From f29c4155a81dd58dcdc95f2212d665a5096a205a Mon Sep 17 00:00:00 2001 From: William Lallemand Date: Tue, 10 Jan 2023 15:07:12 +0100 Subject: [PATCH] DOC: management: add details about @system-ca in "show ssl ca-file" Explain why @system-ca is seen in "show ssl ca-file". Should fix issue #1979. Can be backported till 2.6. --- doc/management.txt | 3 +++ 1 file changed, 3 insertions(+) diff --git a/doc/management.txt b/doc/management.txt index cef3b38a2..5a15ec06e 100644 --- a/doc/management.txt +++ b/doc/management.txt @@ -3276,6 +3276,9 @@ show ssl ca-file [[:]] Display the list of CA files loaded into the process and their respective certificate counts. The certificates are not used by any frontend or backend until their status is "Used". + A "@system-ca" entry can appear in the list, it is loaded by the httpclient + by default. It contains the list of trusted CA of your system returned by + OpenSSL. If a filename is prefixed by an asterisk, it is a transaction which is not committed yet. If a is specified without , it will show the status of the CA file ("Used"/"Unused") followed by details about all the -- 2.47.3