X-Git-Url: https://www.tinc-vpn.org/git/browse?p=tinc;a=blobdiff_plain;f=doc%2Ftinc.conf.5;h=4da5519742db8218a1e69620a2d44d7805bd54ce;hp=d647bbbd79fba7b5fc779f4d8c5c3eeffa4bd2b1;hb=0d99ae59bd7c640d396ce978045f0911567fb9bf;hpb=90bf1b21fa7e94d73719da0593e7c0356d05e18f diff --git a/doc/tinc.conf.5 b/doc/tinc.conf.5 index d647bbbd..4da55197 100644 --- a/doc/tinc.conf.5 +++ b/doc/tinc.conf.5 @@ -1,4 +1,4 @@ -.TH TINC 5 "May 2000" "tinc version 1.0" "FSF" +.TH TINC 5 "Jan 2001" "tinc version 1.0pre4" "FSF" .SH NAME tinc.conf \- tinc daemon configuration .SH "DESCRIPTION" @@ -104,10 +104,16 @@ probe to the other end. If that other end doesn't answer within that same amount of seconds, the connection is terminated, and the others will be notified of this. .TP -\fBPrivateKey\fR = <\fIkey\fR> (required) +\fBPrivateKey\fR = <\fIkey\fR> The private RSA key of this tinc daemon. It will allow this tinc daemon to authenticate itself to other daemons. .TP +\fBPrivateKeyFile\fR = <\fIfilename\fR> +The file in which the private RSA key of this tinc daemon resides. + +Note that there must be exactly one of \fBPrivateKey\fR or \fBPrivateKeyFile\fR +specified in the configuration file. +.TP \fBTapDevice\fR = <\fIdevice\fR> (/dev/tap0) The ethertap or tun/tap device to use. tinc will automatically detect what kind of tapdevice it is. @@ -134,10 +140,17 @@ The real address or hostname of this tinc daemon. \fBPort\fR = <\fIport number\fR> (655) The port on which this tinc daemon is listening for incoming connections. .TP -\fBPublicKey\fR = <\fIkey\fR> (required) +\fBPublicKey\fR = <\fIkey\fR> The public RSA key of this tinc daemon. It will be used to cryptographically verify it's identity and to set up a secure connection. .TP +\fBPublicKeyFile\fR = <\fIfilename\fR> +The file in which the public RSA key of this tinc daemon resides. + +Note that there must be exactly one of \fBPublicKey\fR or \fBPublicKeyFile\fR +specified in each host configuration file, if you want to be able to establish +a connection with that host. +.TP \fBSubnet\fR = <\fIaddress/masklength\fR> (optional) The subnet which this tinc daemon will serve. tinc tries to look up which other daemon it should send a packet to by searching the appropiate subnet. If the