X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=lib%2Fssl.man;h=5f0215c01fbe866ead5e34cf744b29255287d361;hb=0ef165ecb57943e17a8ee8270df68ffb8d032e29;hp=12c497cc8e2e2bd1b39eb764c124101921ef5f5e;hpb=a0bc29a541fc7dc6e20137d5558e2094d614e6ab;p=sliver-openvswitch.git

diff --git a/lib/ssl.man b/lib/ssl.man
index 12c497cc8..5f0215c01 100644
--- a/lib/ssl.man
+++ b/lib/ssl.man
@@ -1,3 +1,8 @@
+.de IQ
+.  br
+.  ns
+.  IP "\\$1"
+..
 .IP "\fB\-p\fR \fIprivkey.pem\fR"
 .IQ "\fB\-\-private\-key=\fIprivkey.pem\fR"
 Specifies a PEM file containing the private key used as \fB\*(PN\fR's
@@ -17,3 +22,9 @@ should use to verify certificates presented to it by SSL peers.  (This
 may be the same certificate that SSL peers use to verify the
 certificate specified on \fB\-c\fR or \fB\-\-certificate\fR, or it may
 be a different one, depending on the PKI design in use.)
+.
+.IP "\fB\-C none\fR"
+.IQ "\fB\-\-ca\-cert=none\fR"
+Disables verification of certificates presented by SSL peers.  This
+introduces a security risk, because it means that certificates cannot
+be verified to be those of known trusted hosts.