File tree Expand file tree Collapse file tree 1 file changed +7
-1
lines changed Expand file tree Collapse file tree 1 file changed +7
-1
lines changed Original file line number Diff line number Diff line change @@ -10564,17 +10564,23 @@ appended to the [[setting,ssl_server_ca_file]] file.`
1056410564 changed : {
1056510565 settings_ssl_request_client_cert_changed : `
1056610566Renamed from \`ssl_verify_client_cert\` setting.`
10567+
1056710568 } ,
1056810569 default : 'no' ,
1056910570 seealso : [
1057010571 'ssl' ,
1057110572 'auth_ssl_require_client_cert' ,
1057210573 '[[link,ssl_configuration]]' ,
1057310574 ] ,
10574- values : setting_types . BOOLEAN ,
10575+ values : setting_types . ENUM ,
10576+ values_enum : [ 'no' , 'yes' , 'any-cert' ]
1057510577 text : `
1057610578If enabled, the imap/pop3/etc. client is requested to send an SSL certificate.
1057710579
10580+ You can accept any certificate with \'any-cert\' value, but you must configure
10581+ authentication to check the client certificate with \`check_client_fp\` (or
10582+ variant) extra field. See [[link,passdb_check_client_fp]].
10583+
1057810584Note: This setting doesn't yet require the certificate to be valid or
1057910585to even exist. See [[setting,auth_ssl_require_client_cert]].`
1058010586 } ,
You can’t perform that action at this time.
0 commit comments