From: Timo Sirainen <timo.sirainen@open-xchange.com>
Date: Tue, 11 Feb 2020 12:41:05 +0000 (+0200)
Subject: example-config: Warn about ssl_client_ca_file memory usage
X-Git-Tag: 2.3.11.2~576
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=eb74dc2fb217aa9ad50af2c07d4d0d86ca95fb72;p=thirdparty%2Fdovecot%2Fcore.git

example-config: Warn about ssl_client_ca_file memory usage
---

diff --git a/doc/example-config/conf.d/10-ssl.conf b/doc/example-config/conf.d/10-ssl.conf
index 984758bb3a..9be3f9129d 100644
--- a/doc/example-config/conf.d/10-ssl.conf
+++ b/doc/example-config/conf.d/10-ssl.conf
@@ -30,7 +30,8 @@ ssl_key = </etc/ssl/private/dovecot.pem
 # when Dovecot needs to act as an SSL client (e.g. imapc backend or
 # submission service). The directory is usually /etc/ssl/certs in
 # Debian-based systems and the file is /etc/pki/tls/cert.pem in
-# RedHat-based systems.
+# RedHat-based systems. Note that ssl_client_ca_file isn't recommended with
+# large CA bundles, because it leads to excessive memory usage.
 #ssl_client_ca_dir =
 #ssl_client_ca_file =