Date: Thu, 8 Mar 2012 01:37:01 +0000 (UTC) From: Ed Maste <emaste@FreeBSD.org> To: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org Subject: svn commit: r232678 - head/share/man/man4 Message-ID: <201203080137.q281b1cg019574@svn.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: emaste Date: Thu Mar 8 01:37:01 2012 New Revision: 232678 URL: http://svn.freebsd.org/changeset/base/232678 Log: Inbound TCP-MD5 digest validation is now supported Modified: head/share/man/man4/tcp.4 Modified: head/share/man/man4/tcp.4 ============================================================================== --- head/share/man/man4/tcp.4 Thu Mar 8 01:10:23 2012 (r232677) +++ head/share/man/man4/tcp.4 Thu Mar 8 01:37:01 2012 (r232678) @@ -38,7 +38,7 @@ .\" From: @(#)tcp.4 8.1 (Berkeley) 6/5/93 .\" $FreeBSD$ .\" -.Dd February 5, 2012 +.Dd March 7, 2012 .Dt TCP 4 .Os .Sh NAME @@ -255,8 +255,9 @@ or the internal send buffer is filled. .It Dv TCP_MD5SIG This option enables the use of MD5 digests (also known as TCP-MD5) on writes to the specified socket. -In the current release, only outgoing traffic is digested; -digests on incoming traffic are not verified. +Outgoing traffic is digested; +digests on incoming traffic are verified +if the net.inet.tcp.signature_verify_input sysctl is nonzero. The current default behavior for the system is to respond to a system advertising this option with TCP-MD5; this may change. .Pp
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201203080137.q281b1cg019574>