sslio documentation clarification (Re: ipsvd-0.9.0 available)

Charlie Brady <[email protected]>
Newsgroups gmane.comp.misc.pape.general
Message-ID <Pine.LNX.4.44.0405031431440.4035-100000@e-smith.charlieb.ott.istop.com>
On Sat, 1 May 2004, Gerrit Pape wrote:

> This version introduces a first beta version of the sslio[0] program
> (for Linux only), which can be used to encrypt network connections using
> SSLv3.

It's not clear from the documentation that the key and cert file paths are 
relative to the chroot directory (if -/ option is given). IOW, the chroot 
also occurs before the certificate files are opened.

...

-/ root
    chroot. Change the root directory to root before reading data from, or 
writing data to the network. This option should be set when sslio is 
started by root, and cannot be set otherwise. 

-C cert
    cert file. read the certificate from the file cert (default is "./cert.pem"). 

-K key
    private key. Read the private key from the file key (default is cert)
...

You might also mention that the cert and key files need to be readable by 
the -u user (but obviously shouldn't be writable).

---
Charlie
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.