doc/invoke-psktool.texi
doc/invoke-srptool.texi
doc/invoke-tpmtool.texi
+doc/invoke-certtool.texi
+doc/invoke-danetool.texi
+doc/invoke-gnutls-cli-debug.texi
+doc/invoke-gnutls-cli.texi
+doc/invoke-gnutls-serv.texi
+doc/invoke-ocsptool.texi
+doc/invoke-p11tool.texi
+doc/invoke-psktool.texi
+doc/invoke-srptool.texi
+doc/invoke-tpmtool.texi
#
# DO NOT EDIT THIS FILE (invoke-certtool.texi)
#
-# It has been AutoGen-ed November 24, 2013 at 09:39:52 AM by AutoGen 5.18.2
+# It has been AutoGen-ed November 24, 2013 at 09:50:55 AM by AutoGen 5.18.2
# From the definitions ../src/certtool-args.def
# and the template file agtexi-cmd.tpl
@end ignore
#
# DO NOT EDIT THIS FILE (invoke-danetool.texi)
#
-# It has been AutoGen-ed November 24, 2013 at 09:39:55 AM by AutoGen 5.18.2
+# It has been AutoGen-ed November 24, 2013 at 09:50:58 AM by AutoGen 5.18.2
# From the definitions ../src/danetool-args.def
# and the template file agtexi-cmd.tpl
@end ignore
#
# DO NOT EDIT THIS FILE (invoke-gnutls-cli-debug.texi)
#
-# It has been AutoGen-ed November 17, 2013 at 12:30:19 PM by AutoGen 5.18
+# It has been AutoGen-ed November 24, 2013 at 09:50:53 AM by AutoGen 5.18.2
# From the definitions ../src/cli-debug-args.def
# and the template file agtexi-cmd.tpl
@end ignore
@subheading debug option (-d)
This is the ``enable debugging'' option.
-This option takes an argument number.
+This option takes a number argument.
Specifies the debug level.
@anchor{gnutls-cli-debug exit status}
@subheading gnutls-cli-debug exit status
#
# DO NOT EDIT THIS FILE (invoke-gnutls-cli.texi)
#
-# It has been AutoGen-ed November 17, 2013 at 12:30:18 PM by AutoGen 5.18
+# It has been AutoGen-ed November 24, 2013 at 09:50:52 AM by AutoGen 5.18.2
# From the definitions ../src/cli-args.def
# and the template file agtexi-cmd.tpl
@end ignore
@subheading debug option (-d)
This is the ``enable debugging'' option.
-This option takes an argument number.
+This option takes a number argument.
Specifies the debug level.
@anchor{gnutls-cli tofu}
@subheading tofu option
This is the ``enable trust on first use authentication'' option.
+
+@noindent
+This option has some usage constraints. It:
+@itemize @bullet
+@item
+can be disabled with --no-tofu.
+@end itemize
+
This option will, in addition to certificate authentication, perform authentication based on previously seen public keys, a model similar to SSH authentication.
@anchor{gnutls-cli dane}
@subheading dane option
This is the ``enable dane certificate verification (dnssec)'' option.
+
+@noindent
+This option has some usage constraints. It:
+@itemize @bullet
+@item
+can be disabled with --no-dane.
+@end itemize
+
This option will, in addition to certificate authentication using
the trusted CAs, verify the server certificates using on the DANE information
available via DNSSEC.
@subheading local-dns option
This is the ``use the local dns server for dnssec resolving'' option.
+
+@noindent
+This option has some usage constraints. It:
+@itemize @bullet
+@item
+can be disabled with --no-local-dns.
+@end itemize
+
This option will use the local DNS server for DNSSEC.
This is disabled by default due to many servers not allowing DNSSEC.
@anchor{gnutls-cli ca-verification}
This option has some usage constraints. It:
@itemize @bullet
@item
-is enabled by default.
+can be disabled with --no-ca-verification.
+@item
+It is enabled by default.
@end itemize
This option will disable CA certificate verification. It is to be used with the --dane or --tofu options.
@subheading ocsp option
This is the ``enable ocsp certificate verification'' option.
+
+@noindent
+This option has some usage constraints. It:
+@itemize @bullet
+@item
+can be disabled with --no-ocsp.
+@end itemize
+
This option will enable verification of the peer's certificate using ocsp
@anchor{gnutls-cli resume}
@subheading resume option (-r)
@subheading dh-bits option
This is the ``the minimum number of bits allowed for dh'' option.
-This option takes an argument number.
+This option takes a number argument.
This option sets the minimum number of bits allowed for a Diffie-Hellman key exchange. You may want to lower the default value if the peer sends a weak prime and you get an connection error with unacceptable prime.
@anchor{gnutls-cli priority}
@subheading priority option
This is the ``priorities string'' option.
-This option takes an argument string.
+This option takes a string argument.
TLS algorithms and protocols to enable. You can
use predefined sets of ciphersuites such as PERFORMANCE,
NORMAL, SECURE128, SECURE256.
@subheading alpn option
This is the ``application layer protocol'' option.
-This option takes an argument string.
+This option takes a string argument.
@noindent
This option has some usage constraints. It:
This is the ``change the default (^) used as a delimiter for inline commands.
the value is a single us-ascii character (octets 0 - 127).'' option.
-This option takes an argument string.
+This option takes a string argument.
Change the default (^) delimiter used for inline commands. The delimiter is expected to be a single US-ASCII character (octets 0 - 127). This option is only relevant if inline commands are enabled via the inline-commands option
@anchor{gnutls-cli exit status}
@subheading gnutls-cli exit status
#
# DO NOT EDIT THIS FILE (invoke-gnutls-serv.texi)
#
-# It has been AutoGen-ed November 17, 2013 at 12:30:21 PM by AutoGen 5.18
+# It has been AutoGen-ed November 24, 2013 at 09:50:54 AM by AutoGen 5.18.2
# From the definitions ../src/serv-args.def
# and the template file agtexi-cmd.tpl
@end ignore
@subheading debug option (-d)
This is the ``enable debugging'' option.
-This option takes an argument number.
+This option takes a number argument.
Specifies the debug level.
@anchor{gnutls-serv heartbeat}
@subheading heartbeat option (-b)
@subheading priority option
This is the ``priorities string'' option.
-This option takes an argument string.
+This option takes a string argument.
TLS algorithms and protocols to enable. You can
use predefined sets of ciphersuites such as PERFORMANCE,
NORMAL, SECURE128, SECURE256.
@subheading ocsp-response option
This is the ``the ocsp response to send to client'' option.
-This option takes an argument file.
+This option takes a file argument.
If the client requested an OCSP response, return data from this file to the client.
@anchor{gnutls-serv list}
@subheading list option (-l)
#
# DO NOT EDIT THIS FILE (invoke-ocsptool.texi)
#
-# It has been AutoGen-ed November 24, 2013 at 09:39:54 AM by AutoGen 5.18.2
+# It has been AutoGen-ed November 24, 2013 at 09:50:56 AM by AutoGen 5.18.2
# From the definitions ../src/ocsptool-args.def
# and the template file agtexi-cmd.tpl
@end ignore
#
# DO NOT EDIT THIS FILE (invoke-p11tool.texi)
#
-# It has been AutoGen-ed November 24, 2013 at 09:40:01 AM by AutoGen 5.18.2
+# It has been AutoGen-ed November 24, 2013 at 09:51:01 AM by AutoGen 5.18.2
# From the definitions ../src/p11tool-args.def
# and the template file agtexi-cmd.tpl
@end ignore
#
# DO NOT EDIT THIS FILE (invoke-psktool.texi)
#
-# It has been AutoGen-ed November 24, 2013 at 09:39:59 AM by AutoGen 5.18.2
+# It has been AutoGen-ed November 24, 2013 at 09:51:00 AM by AutoGen 5.18.2
# From the definitions ../src/psk-args.def
# and the template file agtexi-cmd.tpl
@end ignore
#
# DO NOT EDIT THIS FILE (invoke-srptool.texi)
#
-# It has been AutoGen-ed November 24, 2013 at 09:39:57 AM by AutoGen 5.18.2
+# It has been AutoGen-ed November 24, 2013 at 09:50:59 AM by AutoGen 5.18.2
# From the definitions ../src/srptool-args.def
# and the template file agtexi-cmd.tpl
@end ignore
#
# DO NOT EDIT THIS FILE (invoke-tpmtool.texi)
#
-# It has been AutoGen-ed November 24, 2013 at 09:40:02 AM by AutoGen 5.18.2
+# It has been AutoGen-ed November 24, 2013 at 09:51:02 AM by AutoGen 5.18.2
# From the definitions ../src/tpmtool-args.def
# and the template file agtexi-cmd.tpl
@end ignore