aboutsummaryrefslogtreecommitdiffstats
path: root/config/lacme.conf
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2016-12-01 13:59:25 +0100
committerGuilhem Moulin <guilhem@fripost.org>2016-12-01 13:59:25 +0100
commitac0362fb5a5e83b0ed6c1e31c2c1f3d1dfbc1ced (patch)
treef18552f5dad6638d7921a207234c3be26b109c8e /config/lacme.conf
parentd39ec1c01a622996b5470ec6ce359be254f5274e (diff)
Improve formatting of config files.
Diffstat (limited to 'config/lacme.conf')
-rw-r--r--config/lacme.conf16
1 files changed, 13 insertions, 3 deletions
diff --git a/config/lacme.conf b/config/lacme.conf
index a52689a..08afeb4 100644
--- a/config/lacme.conf
+++ b/config/lacme.conf
@@ -3,7 +3,9 @@
#
#config-certs = /etc/lacme/lacme-certs.conf
+
[client]
+
# The value of "socket" specifies the path to the lacme-accountd(1)
# UNIX-domain socket to connect to for signature requests from the ACME
# client. lacme(1) aborts if the socket is readable or writable by
@@ -30,6 +32,7 @@
#group = nogroup
# Path to the ACME client executable.
+#
#command = /usr/lib/lacme/client
# Root URI of the ACME server. NOTE: Use the staging server for testing
@@ -44,12 +47,15 @@
#timeout = 10
# Whether to verify the server certificate chain.
+#
#SSL_verify = yes
# Specify the version of the SSL protocol used to transmit data.
+#
#SSL_version = SSLv23:!TLSv1_1:!TLSv1:!SSLv3:!SSLv2
# Specify the cipher list for the connection.
+#
#SSL_cipher_list = EECDH+AESGCM:!MEDIUM:!LOW:!EXP:!aNULL:!eNULL
@@ -88,10 +94,10 @@
#iptables = Yes
-# lacme-accound(1) section. Comment out the following section to make
-# lacme(1) connect to an existing UNIX-domain socket bound by a running
-# acme-accountd(1) process.
[accountd]
+# lacme-accound(1) section. Comment out this section (including its
+# header) to make lacme(1) connect to an existing UNIX-domain socket
+# bound by a running acme-accountd(1) process.
# username to drop privileges to (setting both effective and real uid).
# Preserve root privileges if the value is empty.
@@ -105,16 +111,20 @@
#group = root
# Path to the lacme-accountd(1) executable.
+#
#command = /usr/bin/lacme-accountd
# Path to the lacme-accountd(1) configuration file.
+#
#config = /etc/lacme/lacme-accountd.conf
# The (private) account key to use for signing requests. See
# lacme-accountd(1) for details.
+#
#privkey = file:/path/to/account.key
# Be quiet.
+#
#quiet = Yes
; vim:ft=dosini