/[pdpsoft]/nl.nikhef.pdp.fetchcrl/trunk/fetch-crl.cnf.example
ViewVC logotype

Diff of /nl.nikhef.pdp.fetchcrl/trunk/fetch-crl.cnf.example

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

trunk/fetchcrl/fetch-crl.cnf.example revision 2202 by davidg, Tue Feb 22 07:55:17 2011 UTC nl.nikhef.pdp.fetchcrl/trunk/fetch-crl.cnf.example revision 2692 by davidg, Wed Mar 5 19:43:36 2014 UTC
# Line 101  Line 101 
101  #  #
102  # catemplate  = @ALIAS@.pem; @ALIAS@.@R@; @ANCHORNAME@.@R@  # catemplate  = @ALIAS@.pem; @ALIAS@.@R@; @ANCHORNAME@.@R@
103  #  #
104    # When @HASH@ (c_hash from default OpenSSL version as based on the retrieved
105    # CRL) is used in this template list, a CRL will *always* be retrieved first,
106    # even if no corresponding trust anchor is found later. Use of @HASH@ is
107    # only recommended in case the name of the crl_url or info file is different
108    # from the name of the trust anchor.
109    #
110    # catemplate  = @ALIAS@.pem; @ALIAS@.@R@; @ANCHORNAME@.@R@; @HASH@.0
111    #
112  # ---------------------------------------------------------------------------  # ---------------------------------------------------------------------------
113  # opensslmode is used if the openssl format for output is specified and also  # opensslmode is used if the openssl format for output is specified and also
114  # OpenSSL version 1.0.0 or higher are used. If so, you can have the CRL data  # OpenSSL version 1.0.0 or higher are used. If so, you can have the CRL data
# Line 163  Line 171 
171  #  #
172  # ---------------------------------------------------------------------------  # ---------------------------------------------------------------------------
173  # noerrors suppresses the pritning and logging or any and all errors (but  # noerrors suppresses the pritning and logging or any and all errors (but
174  # not warnings or verbose messages)  # not warnings or verbose messages). It also suppresses retrieval errors.
175  #  #
176  # noerrors  # noerrors
177  #  #
178  # ---------------------------------------------------------------------------  # ---------------------------------------------------------------------------
179    # rcmode determines if the return code of fetch-crl will be influenced by
180    # CRL retrieval errors. If rcmode is "normal" (default), any reported errors
181    # will cause the return exit status to be "1".
182    #  normal             - both retrieval and other errors set exit code 1
183    #  differentiated     - retrieval errors result in exit code 2, presence
184    #                       of any other reported errors result in exit 1
185    #  noretrievalerrors  - retrieval errors only results in exit code 0, presence
186    #                       of any other reported errors result in exit 1
187    # Note that setting "noerrors" will suppress retrieval errors entirely!
188    #
189    # rcmode = normal
190    #
191    # ---------------------------------------------------------------------------
192    # noquiet ignores a single "-q" option on the commandline and honours the
193    # verbosity set here even if -q is specified. To counter this setting, give
194    # at least two (2) "-q" arguments
195    #
196    # noquiet
197    #
198    # ---------------------------------------------------------------------------
199  # agingtolerance sets the time in hours before retrieval warnings become  # agingtolerance sets the time in hours before retrieval warnings become
200  # errors for a CRL retrieval. If you also suppress warnings, you will  # errors for a CRL retrieval. If you also suppress warnings, you will
201  # prevent any annoying messages for a trust anchor for up to <hrs> hours.  # prevent any annoying messages for a trust anchor for up to <hrs> hours.
# Line 211  Line 239 
239  # stateless  # stateless
240  #  #
241  # ---------------------------------------------------------------------------  # ---------------------------------------------------------------------------
242    # By default, the perl LWP library does not use IPv6 network sockets. The
243    # perl module Net::INET6GLUE::INET6_as_INET can mitigate this behaviour
244    # by re-mapping all INET socket calls to INET6 socket calls. If you have
245    # the Net::INET6Glue module installed, you may enable this flag in the
246    # cofiguration. Note: the Net::INET6Glue module MUST be installed for this
247    # flag to work. Installation of this module is options and it does not
248    # ship by default with fetch-crl3. You can obtain this module from CPAN.
249    #
250    # inet6glue
251    #
252    # ---------------------------------------------------------------------------
253  # override version or packager to influence the User-Agent header in http  # override version or packager to influence the User-Agent header in http
254  # requests. But please leave them alone  # requests. But please leave them alone
255  # version = 3.0  # version = 3.0

Legend:
Removed from v.2202  
changed lines
  Added in v.2692

grid.support@nikhef.nl
ViewVC Help
Powered by ViewVC 1.1.28