From c8d93e151ede1b17ca2ad33b6480fd59166ec1a4 Mon Sep 17 00:00:00 2001 From: "Chris St. Pierre" Date: Thu, 24 Jan 2013 13:10:28 -0500 Subject: docs: formatting fixes, updated reserved encryption options --- doc/server/encryption.txt | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/doc/server/encryption.txt b/doc/server/encryption.txt index e84b9fb31..b56487620 100644 --- a/doc/server/encryption.txt +++ b/doc/server/encryption.txt @@ -164,9 +164,8 @@ For instance:: .. note:: - The name of a passphrase **cannot** be "algorithm"; that - configuration option is reserved for configuring the cipher - algorithm. + The name of a passphrase **cannot** be ``algorithm`` or + ``decrypt``, which are reserved for other configuration options. This would define two separate encryption passphrases, presumably for use by two separate teams. The passphrase names are completely @@ -212,7 +211,7 @@ though, that may not be possible. (For instance, if you use encryption to protect data for your production environment from your staging Bcfg2 server, then you would not expect the staging server to be able to decrypt everything.) In this case, you want to enable lax -decryption in the ``[encryption]`` section of ``bcfg2.conf``: +decryption in the ``[encryption]`` section of ``bcfg2.conf``:: [encryption] decrypt = lax -- cgit v1.2.3-1-g7c22