clean up and comment

diff --git a/raddb/mods-available/eap b/raddb/mods-available/eap
index d150b2ec7fb2d27377e2b7f3ff210bb04840b2c8..94f23a973a3c93ea5a72dd3461be6811a828535a 100644 (file)
--- a/raddb/mods-available/eap
+++ b/raddb/mods-available/eap
@@ -210,7 +210,8 @@ eap {
 #                      format = "PEM"
 
                        #
-                       #  certificate_file::
+                       #  certificate_file:: File which contains the certificate presented
+                       #  by the EAP module to the client.
                        #
                        #  If PEM is being used the `certificate_file` specified below
                        #  should contain the server certificates, and any intermediary CAs
@@ -237,7 +238,7 @@ eap {
                        certificate_file = ${certdir}/rsa/server.pem
 
                        #
-                       #  ca_file::
+                       #  ca_file::  File which contains the root CA.
                        #
                        #  Load an additional intermediary CA or Root CA for consideration in
                        #  chain compilation.  Multiple "ca_file" config items may be used
@@ -258,7 +259,7 @@ eap {
                        private_key_password = whatever
 
                        #
-                       #  private_key_file::
+                       #  private_key_file:: File which contains the private key.
                        #
                        #  If the Private key & Certificate are located in the same file,
                        #  then `private_key_file` & `certificate_file` must contain the
@@ -267,7 +268,7 @@ eap {
                        private_key_file = ${certdir}/rsa/server.key
 
                        #
-                       #  verify_mode::
+                       #  verify_mode:: How we verify the certificate chain.
                        #
                        #  During startup we attempt to precompile the certificate chain
                        #  from server certificate to Root CA.  This configuration item specifies
@@ -298,9 +299,9 @@ eap {
 #                      verify_mode = "hard"
 
                        #
-                       #  include_root_ca::
+                       #  include_root_ca:: Whether or not the root CA is included in the
+                       #  certificate chain.
                        #
-                       #  Omit the Root CA from the compiled certificate chain.
                        #  The Root CA should already be known/trusted by the client so it is
                        #  usually not needed unless the client is particularly poorly behaved.
                        #