Skip to content

Commit 7fc2ff7

Browse files
miharpclaude
andcommitted
Trim puppet_conf_setting_diffs to behavioral differences only
Remove 8 sections that just said "does not use this setting" with no actionable content (autoflush, daemonize, http_debug, keylength, logdir, puppetdlog, syslogfacility, user). Fix quote formatting on hostcert section. Note master.conf deprecation in ssl_client_header and ssl_client_verify_header sections. All remaining claims verified against openvox-server source. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Signed-off-by: Michael Harp <mike@mikeharp.com>
1 parent 2b4cdd1 commit 7fc2ff7

1 file changed

Lines changed: 5 additions & 38 deletions

File tree

docs/_openvox-server_8x/puppet_conf_setting_diffs.markdown

Lines changed: 5 additions & 38 deletions
Original file line numberDiff line numberDiff line change
@@ -6,10 +6,6 @@ title: "How OpenVox Server uses the values in puppet.conf"
66
OpenVox Server honors almost all settings in puppet.conf and should pick them up automatically. For more complete information on puppet.conf settings, see the
77
[Configuration Reference](/openvox/latest/configuration.html) page.
88

9-
## `autoflush`
10-
11-
OpenVox Server does not use this setting. For more information on the server logging implementation, see the [logging configuration section](./configuration.html#logging).
12-
139
## `ca_ttl`
1410

1511
OpenVox Server enforces a max ttl of 50 standard years (up to 1576800000 seconds).
@@ -30,10 +26,6 @@ OpenVox Server copies the file for the `cacrl` setting, if one exists, over to t
3026
Any CRL file updates from the OpenVox Server certificate authority---such as revocations performed via the `certificate_status` HTTP endpoint---use the `cacrl` setting in puppet.conf to determine the location
3127
of the CRL. This is true regardless of the `ssl-` settings in webserver.conf.
3228

33-
## `daemonize`
34-
35-
OpenVox Server does not use this setting.
36-
3729
## `hostcert`
3830

3931
If you define `ssl-cert`, `ssl-key`, `ssl-ca-cert`, or `ssl-crl-path` in [webserver.conf](./configuration.html#webserverconf), OpenVox Server presents the file at `ssl-cert` to clients as the server
@@ -42,7 +34,7 @@ certificate via SSL.
4234
If at least one of the `ssl-` settings in webserver.conf is set but `ssl-cert` is not set, OpenVox Server gives an error and shuts down at startup. If none of the `ssl-` settings in webserver.conf are set,
4335
OpenVox Server uses the file for the `hostcert` setting in puppet.conf as the server certificate during SSL negotiation.
4436

45-
Regardless of the configuration of the `ssl-` "webserver.conf" settings, OpenVox Server's certificate authority service, if enabled, uses the `hostcert` "puppet.conf" setting, and not the `ssl-cert` setting,
37+
Regardless of the configuration of the `ssl-` `webserver.conf` settings, OpenVox Server's certificate authority service, if enabled, uses the `hostcert` `puppet.conf` setting, and not the `ssl-cert` setting,
4638
to determine the location of the server host certificate to generate.
4739

4840
## `hostcrl`
@@ -67,15 +59,6 @@ OpenVox Server uses the file for the `hostprivkey` setting in puppet.conf as the
6759
If you enable the OpenVox Server certificate authority service, OpenVox Server uses the `hostprivkey` setting in puppet.conf to determine the location of the server host private key to generate. This is true
6860
regardless of the configuration of the `ssl-` settings in webserver.conf.
6961

70-
## `http_debug`
71-
72-
OpenVox Server does not use this setting. Debugging for HTTP client code in the OpenVox Server is controlled through OpenVox Server's common logging mechanism. For more information on the server logging
73-
implementation, see the [logging configuration section](./configuration.html#logging).
74-
75-
## `keylength`
76-
77-
OpenVox Server does not currently use this setting. OpenVox Server's certificate authority generates 4096-bit keys in conjunction with any SSL certificates that it generates.
78-
7962
## `localcacert`
8063

8164
If you define `ssl-cert`, `ssl-key`, `ssl-ca-cert`, and/or `ssl-crl-path` in [webserver.conf](./configuration.html#webserverconf), OpenVox Server uses the file at `ssl-ca-cert` as the CA cert store for
@@ -84,36 +67,20 @@ authenticating clients via SSL.
8467
If at least one of the `ssl-` settings in webserver.conf is set but `ssl-ca-cert` is not set, OpenVox Server gives an error and shuts down at startup. If none of the `ssl-` settings in webserver.conf is set,
8568
OpenVox Server uses the CA file defined for the `localcacert` setting in puppet.conf for SSL authentication.
8669

87-
## `logdir`
88-
89-
OpenVox Server does not use this setting. For more information on the server logging implementation, see the [logging configuration section](./configuration.html#logging).
90-
9170
## `masterport`
9271

9372
OpenVox Server does not use this setting. To set the port on which the server listens, set the `port` (unencrypted) or `ssl-port` (SSL encrypted) setting in the
9473
[webserver.conf](./configuration.html#webserverconf) file.
9574

96-
## `puppetdlog`
97-
98-
OpenVox Server does not use this setting. For more information on the server logging implementation, see the [logging configuration section](./configuration.html#logging).
99-
10075
## `ssl_client_header`
10176

102-
OpenVox Server honors this setting only if the `allow-header-cert-info` setting in the `master.conf` file is set to 'true'. For more information on this setting, see the documentation on
103-
[external SSL termination](./external_ssl_termination.html).
77+
OpenVox Server honors this setting only if the `allow-header-cert-info` setting in the [`master.conf`](./config_file_master.html) file (deprecated) is set to `true`. For more information,
78+
see the documentation on [external SSL termination](./external_ssl_termination.html).
10479

10580
## `ssl_client_verify_header`
10681

107-
OpenVox Server honors this setting only if the `allow-header-cert-info` setting in the `master.conf` file is set to `true`. For more information on this setting, see the documentation on
108-
[external SSL termination](./external_ssl_termination.html).
109-
110-
## `syslogfacility`
111-
112-
OpenVox Server does not use this setting.
113-
114-
## `user`
115-
116-
OpenVox Server does not use this setting.
82+
OpenVox Server honors this setting only if the `allow-header-cert-info` setting in the [`master.conf`](./config_file_master.html) file (deprecated) is set to `true`. For more information,
83+
see the documentation on [external SSL termination](./external_ssl_termination.html).
11784

11885
## HttpPool-Related Server Settings
11986

0 commit comments

Comments
 (0)