From: Alan T. DeKok <aland@freeradius.org>
Date: Mon, 22 Jun 2020 20:09:53 +0000 (-0400)
Subject: clean up and comment
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=4e9d7b7f2c9d22118e9ef3c2e101da412ade1061;p=thirdparty%2Ffreeradius-server.git

clean up and comment
---

diff --git a/raddb/mods-available/eap b/raddb/mods-available/eap
index d150b2ec7fb..94f23a973a3 100644
--- a/raddb/mods-available/eap
+++ b/raddb/mods-available/eap
@@ -210,7 +210,8 @@ eap {
 #			format = "PEM"
 
 			#
-			#  certificate_file::
+			#  certificate_file:: File which contains the certificate presented
+			#  by the EAP module to the client.
 			#
 			#  If PEM is being used the `certificate_file` specified below
 			#  should contain the server certificates, and any intermediary CAs
@@ -237,7 +238,7 @@ eap {
 			certificate_file = ${certdir}/rsa/server.pem
 
 			#
-			#  ca_file::
+			#  ca_file::  File which contains the root CA.
 			#
 			#  Load an additional intermediary CA or Root CA for consideration in
 			#  chain compilation.  Multiple "ca_file" config items may be used
@@ -258,7 +259,7 @@ eap {
 			private_key_password = whatever
 
 			#
-			#  private_key_file::
+			#  private_key_file:: File which contains the private key.
 			#
 			#  If the Private key & Certificate are located in the same file,
 			#  then `private_key_file` & `certificate_file` must contain the
@@ -267,7 +268,7 @@ eap {
 			private_key_file = ${certdir}/rsa/server.key
 
 			#
-			#  verify_mode::
+			#  verify_mode:: How we verify the certificate chain.
 			#
 			#  During startup we attempt to precompile the certificate chain
 			#  from server certificate to Root CA.  This configuration item specifies
@@ -298,9 +299,9 @@ eap {
 #			verify_mode = "hard"
 
 			#
-			#  include_root_ca::
+			#  include_root_ca:: Whether or not the root CA is included in the
+			#  certificate chain.
 			#
-			#  Omit the Root CA from the compiled certificate chain.
 			#  The Root CA should already be known/trusted by the client so it is
 			#  usually not needed unless the client is particularly poorly behaved.
 			#