]> git.ipfire.org Git - thirdparty/ldns.git/commitdiff
Show dane acronyms in documentation too
authorWillem Toorop <willem@nlnetlabs.nl>
Fri, 3 Oct 2014 09:26:30 +0000 (11:26 +0200)
committerWillem Toorop <willem@nlnetlabs.nl>
Fri, 3 Oct 2014 09:26:30 +0000 (11:26 +0200)
examples/ldns-dane.1.in
examples/ldns-dane.c

index b65e64f0441fd3473dac6e664d30bed7298e931c..6dc64d3b03cef909e1372f4f0700b237b3dfa8ea 100644 (file)
@@ -55,38 +55,35 @@ The parameters for TLSA rr creation are:
 .PD 0
 .I Certificate-usage\fR:
 .RS
-.IP 0
+.IP "0 | PKIX-TA"
 CA constraint
-.IP 1
+.IP "1 | PKIX-EE"
 Service certificate constraint
-.IP 2
+.IP "2 | DANE-TA"
 Trust anchor assertion
-.IP 3
+.IP "3 | DANE-EE"
 Domain-issued certificate (default)
 .RE
 
 .I Selector\fR:
 .RS
-.IP 0
-Full certificate (default)
-.IP 1
-SubjectPublicKeyInfo
+.IP "0 | Cert"
+Full certificate
+.IP "1 | SPKI"
+SubjectPublicKeyInfo (default)
 .RE
 
 .I Matching-type\fR:
 .RS
-.IP 0
+.IP "0 | Full"
 No hash used
-.IP 1
+.IP "1 | SHA2-256"
 SHA-256 (default)
-.IP 2
+.IP "2 | SHA2-512"
 SHA-512
 .RE
 .PD 1
 
-In stead of numbers the first few letters of the value may be used.
-Except for the hash algorithm name, where the full name must be specified.
-
 .SH OPTIONS
 .IP -4
 TLS connect IPv4 only
index f390b918efb1c660da5ffa491271d6d593a43c79..d35099be055923ec0eb4b58c573c15d827c1e6c9 100644 (file)
@@ -73,17 +73,19 @@ print_usage(const char* progname)
                        "resource record(s) that would "
                        "authenticate the connection.\n");
        printf("\n\t<usage>"
-                       "\t\t0: CA constraint\n"
-                       "\t\t\t1: Service certificate constraint\n"
-                       "\t\t\t2: Trust anchor assertion\n"
-                       "\t\t\t3: Domain-issued certificate (default)\n");
+                       "\t\t0 | PKIX-TA  : CA constraint\n"
+                       "\t\t\t1 | PKIX-EE  : Service certificate constraint\n"
+                       "\t\t\t2 | DANE-TA  : Trust anchor assertion\n"
+                       "\t\t\t3 | DANE-EE  : Domain-issued certificate "
+                       "(default)\n");
        printf("\n\t<selector>"
-                       "\t0: Full certificate (default)\n"
-                       "\t\t\t1: SubjectPublicKeyInfo\n");
+                       "\t0 | Cert     : Full certificate\n"
+                       "\t\t\t1 | SPKI     : SubjectPublicKeyInfo "
+                       "(default)\n");
        printf("\n\t<type>"
-                       "\t\t0: No hash used\n"
-                       "\t\t\t1: SHA-256 (default)\n"
-                       "\t\t\t2: SHA-512\n");
+                       "\t\t0 | Full     : No hash used\n"
+                       "\t\t\t1 | SHA2-256 : SHA-256 (default)\n"
+                       "\t\t\t2 | SHA2-512 : SHA-512\n");
 
        printf("OPTIONS:\n");
        printf("\t-h\t\tshow this text\n");