Update documentation

This commit is contained in:
Soner Tari 2019-03-15 02:38:08 +03:00
parent 79ad5e86cc
commit 362a87ac6d
2 changed files with 12 additions and 4 deletions

View File

@ -126,7 +126,9 @@ for the reasons of this difference.
If enabled, the UserAuth option requires network users to log in to the system
to use SSLproxy (this feature is currently available on OpenBSD and Linux
only). When users are logged in, they should be recorded on the users table in
an SQLite3 database. The users table is created using the following SQL
an SQLite3 database. SSLproxy does not create this users table by itself, so
it should already exist in the SQLite3 database file configured by the
UserDBPath option. The users table should be created using the following SQL
statement:
CREATE TABLE USERS(
@ -145,7 +147,9 @@ value in the users table with the current system time. If the difference is
larger than the configured value of the user timeout option, then the
connection is redirected to the login page. The atime of the IP address in the
users table is updated with the system time while the connection is being
terminated.
terminated. Since this atime update is run using a privsep command, it is
expensive. So, to reduce the frequency of such updates, it is deferred until
the connection idle time is more than half of the timeout period.
If enabled, the ValidateProto option validates protocols in proxy
specifications. If a connection cannot pass protocol validation, then it is

View File

@ -127,7 +127,9 @@ ones.
If enabled, the UserAuth option requires network users to log in to the system
to use SSLproxy (this feature is currently available on OpenBSD and Linux
only). When users are logged in, they should be recorded on the users table in
an SQLite3 database. The users table is created using the following SQL
an SQLite3 database. SSLproxy does not create this users table by itself, so
it should already exist in the SQLite3 database file configured by the
UserDBPath option. The users table should be created using the following SQL
statement:
.LP
CREATE TABLE USERS(
@ -146,7 +148,9 @@ value in the users table with the current system time. If the difference is
larger than the configured value of the user timeout option, then the
connection is redirected to the login page. The atime of the IP address in the
users table is updated with the system time while the connection is being
terminated.
terminated. Since this atime update is run using a privsep command, it is
expensive. So, to reduce the frequency of such updates, it is deferred until
the connection idle time is more than half of the timeout period.
.LP
If enabled, the ValidateProto option validates protocols in proxy
specifications. If a connection cannot pass protocol validation, then it is