DOC: Fix rename of options cafile and crlfile to ca-file and crl-file.
diff --git a/doc/configuration.txt b/doc/configuration.txt
index 598d5d2..da9d205 100644
--- a/doc/configuration.txt
+++ b/doc/configuration.txt
@@ -485,8 +485,8 @@
ca-base <dir>
Assigns a default directory to fetch SSL CA certificates and CRLs from when a
- relative path is used with "cafile" or "crlfile" directives. Absolute
- locations specified in "cafile" and "crlfile" prevail and ignore "ca-base".
+ relative path is used with "ca-file" or "crl-file" directives. Absolute
+ locations specified in "ca-file" and "crl-file" prevail and ignore "ca-base".
chroot <jail dir>
Changes current directory to <jail dir> and performs a chroot() there before
@@ -6758,7 +6758,7 @@
the named curve (RFC 4492) used to generate ECDH ephemeral keys and makes
ECDHE cipher suites usable.
-cafile <cafile>
+ca-file <cafile>
This setting is only available when support for OpenSSL was built in. It
designates a PEM file from which to load CA certificates used to verify
client's certificate.
@@ -6776,7 +6776,7 @@
in "man 1 ciphers" from OpenSSL man pages, and can be for instance a string
such as "AES:ALL:!aNULL:!eNULL:+RC4:@STRENGTH" (without quotes).
-crlfile <cafile>
+crl-file <crlfile>
This setting is only available when support for OpenSSL was built in. It
designates a PEM file from which to load certificate revocation list used
to verify client's certificate.
@@ -7008,10 +7008,10 @@
cases, a client certificate is requested. If the client does not provide a
certificate after the request and if 'verify' is set to 'required', then the
handshake is aborted, while it would have succeeded if set to 'optional'. The
- certificate provided by the client is always verified using CAs from 'cafile'
- and optional CRLs from 'crlfile'. On verify failure the handshake is aborted,
- regardless of the 'verify' option, unless the error code exactly matches one
- of those listed with 'ca-ignore-err' or 'crt-ignore-err'.
+ certificate provided by the client is always verified using CAs from
+ 'ca-file' and optional CRLs from 'crl-file'. On verify failure the handshake
+ is aborted, regardless of the 'verify' option, unless the error code exactly
+ matches one of those listed with 'ca-ignore-err' or 'crt-ignore-err'.
5.2. Server and default-server options
------------------------------------