sslio documentation clarification (Re: ipsvd-0.9.0 available)
Charlie Brady <[email protected]>
| Newsgroups | gmane.comp.misc.pape.general |
|---|---|
| Message-ID | <Pine.LNX.4.44.0405031431440.4035-100000@e-smith.charlieb.ott.istop.com> |
On Sat, 1 May 2004, Gerrit Pape wrote:
> This version introduces a first beta version of the sslio[0] program
> (for Linux only), which can be used to encrypt network connections using
> SSLv3.
It's not clear from the documentation that the key and cert file paths are
relative to the chroot directory (if -/ option is given). IOW, the chroot
also occurs before the certificate files are opened.
...
-/ root
chroot. Change the root directory to root before reading data from, or
writing data to the network. This option should be set when sslio is
started by root, and cannot be set otherwise.
-C cert
cert file. read the certificate from the file cert (default is "./cert.pem").
-K key
private key. Read the private key from the file key (default is cert)
...
You might also mention that the cert and key files need to be readable by
the -u user (but obviously shouldn't be writable).
---
Charlie