aboutsummaryrefslogtreecommitdiffstats
path: root/README.SSL
diff options
context:
space:
mode:
Diffstat (limited to 'README.SSL')
-rw-r--r--README.SSL10
1 files changed, 5 insertions, 5 deletions
diff --git a/README.SSL b/README.SSL
index 63620b55..f5eca24f 100644
--- a/README.SSL
+++ b/README.SSL
@@ -22,8 +22,8 @@ below and in the manual).
fetchmail 6.4.0 will auto-negotiate TLSv1 or newer only.
Fetchmail 6.4.25 supports OpenSSL 3.0 and 1.1.1 and WolfSSL 5.0.
-
-The configure options --with-wolfssl takes precedence over --with-ssl.
+Note that WolfSSL 5.0 is a bit less flexible about its trust store,
+see INSTALL chapter 2.1 for details.
-- Matthias Andree, 2021-11-20
@@ -46,7 +46,7 @@ since fetchmail v6.4.0, but since fetchmail 6.3 releases will be in circulation
for too long, (--)sslcertck will remain in the examples below for now.
For use of SSL or TLS on a separate port (recommended), called Implicit TLS,
-the whole TCP connection is SSL-encrypted from the very beginning (SSL- or
+the whole TCP connection is SSL-encrypted from the very beginning (SSL- or
TLS-wrapped), use these command line options (in the rcfile,
omit all leading "--"):
@@ -57,8 +57,8 @@ or these options in the rcfile (after the respective "user"... options)
ssl sslproto tls1.2+ sslcertck
-For use of SSL or TLS with in-band negotiation on the regular service's port,
-i. e. with STLS or STARTTLS, use these command line options (omitting --ssl or
+For use of SSL or TLS with in-band negotiation on the regular service's port,
+i. e. with STLS or STARTTLS, use these command line options (omitting --ssl or
ssl):
--sslproto tls1.2+ --sslcertck