From: Philippe Antoine <pantoine@oisf.net>
Date: Fri, 5 May 2023 15:00:11 +0000 (+0200)
Subject: doc: explain where tls.store stores certificates
X-Git-Tag: suricata-7.0.0-rc2~199
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=9bd2b72e2bd4a7715d3b64f83da8c5ef41042a06;p=thirdparty%2Fsuricata.git

doc: explain where tls.store stores certificates

By adding a reference/link to the doc about the suricata.yaml
config section pecifying the directory where the certificates
are stored
---

diff --git a/doc/userguide/configuration/suricata-yaml.rst b/doc/userguide/configuration/suricata-yaml.rst
index 6da5b46d62..c91ddbe3ca 100644
--- a/doc/userguide/configuration/suricata-yaml.rst
+++ b/doc/userguide/configuration/suricata-yaml.rst
@@ -388,6 +388,8 @@ For more advanced configuration options, see :ref:`Eve JSON Output <eve-json-out
 
 The format is documented in :ref:`Eve JSON Format <eve-json-format>`.
 
+.. _suricata-yaml-outputs-tls:
+
 TLS parameters and certificates logging (tls.log)
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
diff --git a/doc/userguide/rules/tls-keywords.rst b/doc/userguide/rules/tls-keywords.rst
index 5f6dab8b31..9d83b68194 100644
--- a/doc/userguide/rules/tls-keywords.rst
+++ b/doc/userguide/rules/tls-keywords.rst
@@ -229,7 +229,8 @@ The tls.fingerprint buffer is lower case so you must use lower case letters for
 tls.store
 ---------
 
-store TLS/SSL certificate on disk
+store TLS/SSL certificate on disk.
+The location can be specified in the `output.tls-store.certs-log-dir` parameter of the yaml configuration file, cf :ref:`suricata-yaml-outputs-tls`..
 
 ssl_state
 ---------