Skip to content

Commit 91f7e12

Browse files
committed
settings: Update ssl_request_client_cert_changed setting
1 parent 3d4c40c commit 91f7e12

File tree

1 file changed

+7
-1
lines changed

1 file changed

+7
-1
lines changed

data/settings.js

+7-1
Original file line numberDiff line numberDiff line change
@@ -10564,17 +10564,23 @@ appended to the [[setting,ssl_server_ca_file]] file.`
1056410564
changed: {
1056510565
settings_ssl_request_client_cert_changed: `
1056610566
Renamed from \`ssl_verify_client_cert\` setting.`
10567+
1056710568
},
1056810569
default: 'no',
1056910570
seealso: [
1057010571
'ssl',
1057110572
'auth_ssl_require_client_cert',
1057210573
'[[link,ssl_configuration]]',
1057310574
],
10574-
values: setting_types.BOOLEAN,
10575+
values: setting_types.ENUM,
10576+
values_enum: ['no', 'yes', 'any-cert']
1057510577
text: `
1057610578
If enabled, the imap/pop3/etc. client is requested to send an SSL certificate.
1057710579
10580+
You can accept any certificate with \'any-cert\' value, but you must configure
10581+
authentication to check the client certificate with \`check_client_fp\` (or
10582+
variant) extra field. See [[link,passdb_check_client_fp]].
10583+
1057810584
Note: This setting doesn't yet require the certificate to be valid or
1057910585
to even exist. See [[setting,auth_ssl_require_client_cert]].`
1058010586
},

0 commit comments

Comments
 (0)