commit 3e3f6cbeceefd9357b53b27c2386bb39306ab353
from: Alexander Barton <alex@barton.de>
date: Fri Apr 19 21:49:59 2024 UTC

Clarify that "CAFile" is not set by default

commit - 75ef4e14e0a3e08eec9ec454a2749711ccaa6c2e
commit + 3e3f6cbeceefd9357b53b27c2386bb39306ab353
blob - 5f9cb9eb2a40ae8e36715f5967b4f295d490118f
blob + 2a08bb43e309c435bdf59393ce957aad94b52388
--- doc/sample-ngircd.conf.tmpl
+++ doc/sample-ngircd.conf.tmpl
@@ -273,7 +273,8 @@
 	# is only available when ngIRCd is compiled with support for SSL!
 	# So don't forget to remove the ";" above if this is the case ...
 
-	# SSL Trusted CA Certificates File (for verifying peer certificates)
+	# SSL Trusted CA Certificates File for verifying peer certificates.
+	# (Default: not set; so no certificates are trusted)
 	;CAFile = /etc/ssl/CA/cacert.pem
 
 	# Certificate Revocation File (for marking otherwise valid
blob - 66d3598d4b4114631217812b5a674f89286f12b4
blob + 68ee90931f1d71a1b4fe8e857a29c8bfe5c37e91
--- man/ngircd.conf.5.tmpl
+++ man/ngircd.conf.5.tmpl
@@ -399,7 +399,7 @@ when it is compiled with support for SSL using OpenSSL
 .TP
 \fBCAFile\fR (string)
 Filename pointing to the Trusted CA Certificates. This is required for
-verifying peer certificates.
+verifying peer certificates. Default: not set, so no certificates are trusted.
 .TP
 \fBCertFile\fR (string)
 SSL Certificate file of the private server key.