File 0504-ssl-clarify-docs-for-PEM-cache.patch of Package erlang

Overview Repositories Revisions Requests Users Attributes Meta

File 0504-ssl-clarify-docs-for-PEM-cache.patch of Package erlang (Revision f9f387618fe39a6cb7be110b2c705b4a)

Currently displaying revision f9f387618fe39a6cb7be110b2c705b4a , Show latest

From 6f988996dc951879f8692e3df46b4efb19532373 Mon Sep 17 00:00:00 2001
From: Jakub Witczak <kuba@erlang.org>
Date: Mon, 19 Sep 2022 17:00:37 +0200
Subject: [PATCH] ssl: clarify docs for PEM cache

---
 lib/ssl/doc/src/ssl.xml     | 30 ++++++++++++++++++++++--------
 lib/ssl/doc/src/ssl_app.xml |  4 ++--
 2 files changed, 24 insertions(+), 10 deletions(-)

diff --git a/lib/ssl/doc/src/ssl.xml b/lib/ssl/doc/src/ssl.xml
index 77b31a661a..ba2bcc15b2 100644
--- a/lib/ssl/doc/src/ssl.xml
+++ b/lib/ssl/doc/src/ssl.xml
@@ -1054,8 +1054,15 @@ fun(srp, Username :: binary(), UserState :: term()) ->
 <name name="client_cafile"/>
 <desc>
 	Path to a file containing PEM-encoded CA certificates. The CA
- certificates are used during server authentication and when building the
- client certificate chain.
+ certificates are used during server authentication and when building the
+ client certificate chain.
+ <note>When PEM caching is enabled, files provided with
+ this option will be checked for updates at fixed time intervals specified by the
+ <seeapp marker="ssl:ssl_app#configuration">ssl_pem_cache_clean</seeapp> environment parameter.
+ </note>
+ <note>Alternatively, CA certificates can be provided as a DER-encoded
+ binary with <seetype marker="#client_cacerts">client_cacerts</seetype>
+ option.</note>
 </desc>
 </datatype>
 
@@ -1273,6 +1280,12 @@ fun(srp, Username :: binary(), UserState :: term()) ->
 	client when a certificate is requested. Can be omitted if
 	there is no need to verify the client and if there are no
 	intermediate CAs for the server certificate.
+ <note>When PEM caching is enabled, files provided with
+ this option will be checked for updates at fixed time intervals specified by the
+ <seeapp marker="ssl:ssl_app#configuration">ssl_pem_cache_clean</seeapp> environment parameter.
+ </note>
+ <note>Alternatively, CA certificates can be provided as a DER-encoded
+ binary with <seetype marker="#server_cacerts">server_cacerts</seetype> option.</note>
 	</desc>
 </datatype>
 
@@ -1626,12 +1639,13 @@ fun(srp, Username :: binary(), UserState :: term()) ->
 
 <func>
 <name name="clear_pem_cache" arity="0" since="OTP 17.5"/>
- <fsummary> Clears the pem cache</fsummary>
- <desc>PEM files, used by ssl API-functions, are cached. The
- cache is regularly checked to see if any cache entries should be
- invalidated, however this function provides a way to
- unconditionally clear the whole cache.
- 
+ <fsummary>Clears the pem cache</fsummary>
+ <desc>
+ PEM files, used by ssl API-functions, are cached for
+ performance reasons. The cache is automatically checked at
+ regular intervals to see if any cache entries should be invalidated.
+ This function provides a way to unconditionally clear the entire
+ cache, thereby forcing a reload of previously cached PEM files.
 </desc>
 </func>
 
diff --git a/lib/ssl/doc/src/ssl_app.xml b/lib/ssl/doc/src/ssl_app.xml
index 0f660cc420..c1d99d57f3 100644
--- a/lib/ssl/doc/src/ssl_app.xml
+++ b/lib/ssl/doc/src/ssl_app.xml
@@ -139,9 +139,9 @@
 	
 	 Number of milliseconds between PEM cache validations. Defaults to 2 minutes.
 	
+ Note: The cache can be reloaded by calling
 	<seemfa
-	 marker="ssl#clear_pem_cache/0">ssl:clear_pem_cache/0</seemfa>
-	
+	 marker="ssl#clear_pem_cache/0">ssl:clear_pem_cache/0</seemfa>.
 </item>
 
 <tag><c><![CDATA[bypass_pem_cache = boolean() <optional>]]></c></tag>
-- 
2.35.3

Places

File 0504-ssl-clarify-docs-for-PEM-cache.patch of Package erlang (Revision f9f387618fe39a6cb7be110b2c705b4a)

Places