You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Trim puppet_conf_setting_diffs to behavioral differences only
Remove 8 sections that just said "does not use this setting" with no
actionable content (autoflush, daemonize, http_debug, keylength, logdir,
puppetdlog, syslogfacility, user). Fix quote formatting on hostcert section.
Note master.conf deprecation in ssl_client_header and ssl_client_verify_header
sections. All remaining claims verified against openvox-server source.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: Michael Harp <mike@mikeharp.com>
Copy file name to clipboardExpand all lines: docs/_openvox-server_8x/puppet_conf_setting_diffs.markdown
+5-38Lines changed: 5 additions & 38 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,10 +6,6 @@ title: "How OpenVox Server uses the values in puppet.conf"
6
6
OpenVox Server honors almost all settings in puppet.conf and should pick them up automatically. For more complete information on puppet.conf settings, see the
OpenVox Server does not use this setting. For more information on the server logging implementation, see the [logging configuration section](./configuration.html#logging).
12
-
13
9
## `ca_ttl`
14
10
15
11
OpenVox Server enforces a max ttl of 50 standard years (up to 1576800000 seconds).
@@ -30,10 +26,6 @@ OpenVox Server copies the file for the `cacrl` setting, if one exists, over to t
30
26
Any CRL file updates from the OpenVox Server certificate authority---such as revocations performed via the `certificate_status` HTTP endpoint---use the `cacrl` setting in puppet.conf to determine the location
31
27
of the CRL. This is true regardless of the `ssl-` settings in webserver.conf.
32
28
33
-
## `daemonize`
34
-
35
-
OpenVox Server does not use this setting.
36
-
37
29
## `hostcert`
38
30
39
31
If you define `ssl-cert`, `ssl-key`, `ssl-ca-cert`, or `ssl-crl-path` in [webserver.conf](./configuration.html#webserverconf), OpenVox Server presents the file at `ssl-cert` to clients as the server
@@ -42,7 +34,7 @@ certificate via SSL.
42
34
If at least one of the `ssl-` settings in webserver.conf is set but `ssl-cert` is not set, OpenVox Server gives an error and shuts down at startup. If none of the `ssl-` settings in webserver.conf are set,
43
35
OpenVox Server uses the file for the `hostcert` setting in puppet.conf as the server certificate during SSL negotiation.
44
36
45
-
Regardless of the configuration of the `ssl-`"webserver.conf" settings, OpenVox Server's certificate authority service, if enabled, uses the `hostcert`"puppet.conf" setting, and not the `ssl-cert` setting,
37
+
Regardless of the configuration of the `ssl-``webserver.conf` settings, OpenVox Server's certificate authority service, if enabled, uses the `hostcert``puppet.conf` setting, and not the `ssl-cert` setting,
46
38
to determine the location of the server host certificate to generate.
47
39
48
40
## `hostcrl`
@@ -67,15 +59,6 @@ OpenVox Server uses the file for the `hostprivkey` setting in puppet.conf as the
67
59
If you enable the OpenVox Server certificate authority service, OpenVox Server uses the `hostprivkey` setting in puppet.conf to determine the location of the server host private key to generate. This is true
68
60
regardless of the configuration of the `ssl-` settings in webserver.conf.
69
61
70
-
## `http_debug`
71
-
72
-
OpenVox Server does not use this setting. Debugging for HTTP client code in the OpenVox Server is controlled through OpenVox Server's common logging mechanism. For more information on the server logging
73
-
implementation, see the [logging configuration section](./configuration.html#logging).
74
-
75
-
## `keylength`
76
-
77
-
OpenVox Server does not currently use this setting. OpenVox Server's certificate authority generates 4096-bit keys in conjunction with any SSL certificates that it generates.
78
-
79
62
## `localcacert`
80
63
81
64
If you define `ssl-cert`, `ssl-key`, `ssl-ca-cert`, and/or `ssl-crl-path` in [webserver.conf](./configuration.html#webserverconf), OpenVox Server uses the file at `ssl-ca-cert` as the CA cert store for
@@ -84,36 +67,20 @@ authenticating clients via SSL.
84
67
If at least one of the `ssl-` settings in webserver.conf is set but `ssl-ca-cert` is not set, OpenVox Server gives an error and shuts down at startup. If none of the `ssl-` settings in webserver.conf is set,
85
68
OpenVox Server uses the CA file defined for the `localcacert` setting in puppet.conf for SSL authentication.
86
69
87
-
## `logdir`
88
-
89
-
OpenVox Server does not use this setting. For more information on the server logging implementation, see the [logging configuration section](./configuration.html#logging).
90
-
91
70
## `masterport`
92
71
93
72
OpenVox Server does not use this setting. To set the port on which the server listens, set the `port` (unencrypted) or `ssl-port` (SSL encrypted) setting in the
OpenVox Server does not use this setting. For more information on the server logging implementation, see the [logging configuration section](./configuration.html#logging).
99
-
100
75
## `ssl_client_header`
101
76
102
-
OpenVox Server honors this setting only if the `allow-header-cert-info` setting in the `master.conf` file is set to 'true'. For more information on this setting, see the documentation on
OpenVox Server honors this setting only if the `allow-header-cert-info` setting in the [`master.conf`](./config_file_master.html) file (deprecated) is set to `true`. For more information,
78
+
see the documentation on [external SSL termination](./external_ssl_termination.html).
104
79
105
80
## `ssl_client_verify_header`
106
81
107
-
OpenVox Server honors this setting only if the `allow-header-cert-info` setting in the `master.conf` file is set to `true`. For more information on this setting, see the documentation on
OpenVox Server honors this setting only if the `allow-header-cert-info` setting in the [`master.conf`](./config_file_master.html) file (deprecated) is set to `true`. For more information,
83
+
see the documentation on [external SSL termination](./external_ssl_termination.html).
0 commit comments