summaryrefslogtreecommitdiffstats
path: root/doc
diff options
context:
space:
mode:
authorAlexander Sulfrian <alexander.sulfrian@fu-berlin.de>2015-10-20 17:24:49 +0200
committerAlexander Sulfrian <alexander.sulfrian@fu-berlin.de>2016-07-12 18:36:37 +0200
commitde5c810edd44fd086342a3e69cc5bc10126f1323 (patch)
tree5b0cfa4a4a009275f929629c08d7de0af1a13be0 /doc
parenta5a25e56e595ea4eff0449390d62ff72c9d192b3 (diff)
downloadbcfg2-de5c810edd44fd086342a3e69cc5bc10126f1323.tar.gz
bcfg2-de5c810edd44fd086342a3e69cc5bc10126f1323.tar.bz2
bcfg2-de5c810edd44fd086342a3e69cc5bc10126f1323.zip
doc: Fix docs of lax_decryption config file option
Diffstat (limited to 'doc')
-rw-r--r--doc/server/encryption.txt9
1 files changed, 5 insertions, 4 deletions
diff --git a/doc/server/encryption.txt b/doc/server/encryption.txt
index db5e2ae29..c186bc31d 100644
--- a/doc/server/encryption.txt
+++ b/doc/server/encryption.txt
@@ -225,16 +225,17 @@ be able to decrypt everything.) In this case, you want to enable lax
decryption in the ``[encryption]`` section of ``bcfg2.conf``::
[encryption]
- decrypt = lax
+ lax_decryption = true
This causes a failed decrypt to produce a warning only, not an error.
This can be overridden by individual XML files by setting
-``decrypt="strict"`` on the top-level tag (or, vice-versa; if strict
-is the default an XML file can specify ``decrypt="lax"``.
+``lax_decryption="false"`` on the top-level tag (or, vice-versa; if
+strict is the default an XML file can specify
+``lax_decryption="true"``.
Note that you could, for instance, set lax decryption by default, and
-then set strict decryption on individual files.
+then disable it on individual files.
Encryption API
==============