From 13dbc0a6671e95f48decd5cf944ffd0a5bed680f Mon Sep 17 00:00:00 2001 From: Joseph Sutton Date: Wed, 5 Jul 2023 15:28:33 +1200 Subject: [PATCH] krb5: Fix typos in documentation Signed-off-by: Joseph Sutton --- lib/krb5/krb5.conf.5 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/krb5/krb5.conf.5 b/lib/krb5/krb5.conf.5 index df765c1ab..2f5c30d12 100644 --- a/lib/krb5/krb5.conf.5 +++ b/lib/krb5/krb5.conf.5 @@ -184,7 +184,7 @@ This is a multi-valued parameter naming one or more stores of anchors for PKINIT KDC certificates. .It Li pkinit_revoke = Va HX509-STORE ... This is a multi-valued parameter naming one or more stores of -of CRLs for the issuers of PKINIT KDC certificates. +CRLs for the issuers of PKINIT KDC certificates. If no CRLs are configured, then CRLs will not be checked. This is because hx509 currently lacks support. .El @@ -904,7 +904,7 @@ is also supported here. type stores are OpenSSL-style CA certificate hash directories. .It Li pkinit_revoke = Va HX509-STORE ... This is a multi-valued parameter naming one or more stores of -of CRLs for the issuers of PKINIT client certificates. +CRLs for the issuers of PKINIT client certificates. If no CRLs are configured, then CRLs will not be checked. This is because the KDC will not dereference CRL distribution points nor request OCSP responses.