diff options
Diffstat (limited to 'man')
| -rw-r--r-- | man/man7/zfsprops.7 | 20 |
1 files changed, 19 insertions, 1 deletions
diff --git a/man/man7/zfsprops.7 b/man/man7/zfsprops.7 index 73e7ed972..8b79603f4 100644 --- a/man/man7/zfsprops.7 +++ b/man/man7/zfsprops.7 @@ -1099,7 +1099,7 @@ Even though the encryption suite cannot be changed after dataset creation, the keyformat can be with .Nm zfs Cm change-key . .It Xo -.Sy keylocation Ns = Ns Sy prompt Ns | Ns Sy file:// Ns Em </absolute/file/path> +.Sy keylocation Ns = Ns Sy prompt Ns | Ns Sy file:// Ns Em </absolute/file/path> Ns | Ns Sy https:// Ns Em <address> | Ns Sy http:// Ns Em <address> .Xc Controls where the user's encryption key will be loaded from by default for commands such as @@ -1126,6 +1126,24 @@ but users should be careful not to place keys which should be kept secret on the command line. If a file URI is selected, the key will be loaded from the specified absolute file path. +If an HTTPS or HTTP URL is selected, it will be GETted using +.Xr fetch 3 , +libcurl, or nothing, depending on compile-time configuration and run-time +availability. +The +.Ev SSL_CA_CERT_FILE +environment variable can be set to set the location +of the concatenated certificate store. +The +.Ev SSL_CA_CERT_PATH +environment variable can be set to override the location +of the directory containing the certificate authority bundle. +The +.Ev SSL_CLIENT_CERT_FILE +and +.Ev SSL_CLIENT_KEY_FILE +environment variables can be set to configure the path +to the client certificate and its key. .It Sy pbkdf2iters Ns = Ns Ar iterations Controls the number of PBKDF2 iterations that a .Sy passphrase |