[PATCH 3/3] Add x509.crl option to man page.

Rik Theys
2025-06-11T07:10:20Z

Update the man page to include the x509.crl option available
in the authenticate.server and authenticate.client section.

Signed-off-by: Rik Theys <Rik.Theys@gmail.com>
---
src/tlshd/tlshd.conf.man | 9 ++++++++-
1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/src/tlshd/tlshd.conf.man b/src/tlshd/tlshd.conf.man
index 9d6d92f..745058a 100644
--- a/src/tlshd/tlshd.conf.man
+++ b/src/tlshd/tlshd.conf.man
@@ -94,7 +94,7 @@ and it consults the settings in the
.I [server]
subsection when handling the server end of a handshake.
.P
-In each of these two subsections, there are three available options:
+In each of these two subsections, there are four available options:
.TP
.B x509.truststore
This option specifies the pathname of a file containing a
@@ -104,6 +104,13 @@ If this option is not specified,
.B tlshd
uses the system's trust store.
.TP
+.B x509.crl
+This option specifies the pathname of a file containing a
+PEM-encoded certificate revocation list (CRL) that is to be
+used to verify the revocation status of a certificate during
+a handshake.
+If this option is not specified, no CRL checking takes place.
+.TP
.B x509.certificate
This option specifies the pathname of a file containing
a PEM-encoded x.509 certificate that is to be presented during
--
2.49.0