From: Otto Moerbeek Date: Wed, 11 Feb 2026 11:30:12 +0000 (+0100) Subject: Mention the PKCS12 feature is not available everywhere. X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=bc2fb92aa23f459ca3d13855adb32aafe7b3c117;p=thirdparty%2Fpdns.git Mention the PKCS12 feature is not available everywhere. Signed-off-by: Otto Moerbeek --- diff --git a/pdns/recursordist/rec-rust-lib/docs-new-preamble-in.rst b/pdns/recursordist/rec-rust-lib/docs-new-preamble-in.rst index f1e0a1edb2..526ac0fe15 100644 --- a/pdns/recursordist/rec-rust-lib/docs-new-preamble-in.rst +++ b/pdns/recursordist/rec-rust-lib/docs-new-preamble-in.rst @@ -598,7 +598,8 @@ If a ``tls`` section is present, clients are required to use ``https`` to contac If both the ``certificate`` and the ``key`` fields are set, the values specify unencrypted PEM files. The ``password`` field is ignored in that case. -Starting with version 5.5.0, if the ``key`` field is not set but the ``certificate`` and ``password`` fields are set, the listed file is assumed to be an encrypted PKCS12 (also known as pfx) file containing both a key and the certificate chain. +If the ``key`` field is not set but the ``certificate`` and ``password`` fields are set, the listed file is assumed to be an encrypted PKCS12 (also known as pfx) file containing both a key and the certificate chain. +The ``pkcs12`` feature is only available starting with version 5.5.0 and if the Rust build environment used is version 1.88 or higher. At the moment it is not possible to list additional properties of the TLS listener.