diff options
| author | René Meusel <[email protected]> | 2022-04-19 17:17:42 +0200 |
|---|---|---|
| committer | GitHub <[email protected]> | 2022-04-19 17:17:42 +0200 |
| commit | 2fb7ba81b0304f0864a557e3f3a010f4c2ce08d3 (patch) | |
| tree | f5f4823e52ece958404f27bc131caaea160c7d8e /doc | |
| parent | 3fa4e8fdae80bfcb245f8b615a3db50e993c32ff (diff) | |
| parent | 3d7370f5ba90cadb4871aa675054b0db175b0504 (diff) | |
Merge pull request #2960 from reneme/cli/client_auth
TLS Client Authentication for the CLI tool
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/cli.rst | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/doc/cli.rst b/doc/cli.rst index 8eafece33..b0c64feae 100644 --- a/doc/cli.rst +++ b/doc/cli.rst @@ -215,7 +215,7 @@ from which a policy description will be read. Prints the list of ciphersuites that will be offered under a particular policy/version. -``tls_client host --port=443 --print-certs --policy=default --tls1.0 --tls1.1 --tls1.2 --skip-system-cert-store --trusted-cas= --session-db= --session-db-pass= --next-protocols= --type=tcp`` +``tls_client host --port=443 --print-certs --policy=default --tls1.0 --tls1.1 --tls1.2 --skip-system-cert-store --trusted-cas= --session-db= --session-db-pass= --next-protocols= --type=tcp --client-cert= --client-cert-key=`` Implements a testing TLS client, which connects to *host* via TCP or UDP on port *port*. The TLS version can be set with the flags *tls1.0*, *tls1.1* and *tls1.2* of which the lowest specified version is automatically chosen. If @@ -224,6 +224,8 @@ from which a policy description will be read. prints all certificates in the chain, if *print-certs* is passed. *next-protocols* is a comma separated list and specifies the protocols to advertise with Application-Layer Protocol Negotiation (ALPN). + Pass a path to a client certificate PEM and unencrypted PKCS8 encoded private + key if client authentication is required. ``tls_server cert key --port=443 --type=tcp --policy=default --dump-traces= --max-clients=0 --socket-id=0`` Implements a testing TLS server, which allows TLS clients to connect and which |