X-Git-Url: http://www.privoxy.org/gitweb/?a=blobdiff_plain;f=doc%2Fsource%2Fp-config.sgml;h=eb75d4e3dd78e4c62acdf8ad4edbc6477d018b2c;hb=2b9f7cb23aaa6c1d08cf5ebbb58d8801421bb1fa;hp=8a337839f758854e59dfc6b0382e9f7a9d587f58;hpb=c83713758e9465e03ec3b0228c433e6f2d843352;p=privoxy.git diff --git a/doc/source/p-config.sgml b/doc/source/p-config.sgml index 8a337839..eb75d4e3 100644 --- a/doc/source/p-config.sgml +++ b/doc/source/p-config.sgml @@ -107,7 +107,7 @@ Copyright (C) 2001-2020 Privoxy Developers https://www.privoxy.org/ 4. ACCESS CONTROL AND SECURITY # 5. FORWARDING # 6. MISCELLANEOUS # - 7. TLS # + 7. HTTPS INSPECTION (EXPERIMENTAL) # 8. WINDOWS GUI OPTIONS # # ################################################################## @@ -1018,7 +1018,7 @@ actionsfile debug 1 # Log the destination for each request. See also debug 1024. debug 2 # show each connection status - debug 4 # show I/O status + debug 4 # show tagging-related messages debug 8 # show header parsing debug 16 # log all data written to the network debug 32 # debug force feature @@ -3900,8 +3900,14 @@ forward-socks4, forward-socks4a, forward-socks5 and forward-socks5t - -TLS/SSL Inspection (Experimental) + +HTTPS Inspection (Experimental) + + + HTTPS inspection allows to filter encrypted requests. + This is only supported when Privoxy + has been built with FEATURE_HTTPS_INSPECTION. + @@ -4018,7 +4024,7 @@ forward-socks4, forward-socks4a, forward-socks5 and forward-socks5t The file can be generated with: - openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.crt -days 3650 + openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.crt -days 3650 @@ -4074,9 +4080,9 @@ forward-socks4, forward-socks4a, forward-socks5 and forward-socks5t Notes: - This directive specifies the name of the CA key file - in ".pem" format. See the ca-cert-file - for a command to generate it. + This directive specifies the name of the CA key file in ".pem" format. + The ca-cert-file section contains + a command to generate it. @@ -4353,7 +4359,7 @@ ECDHE-RSA-AES256-GCM-SHA384:\ AES128-SHA - # Use keywords instead of explicity naming the ciphers (Does not work with MbedTLS) + # Use keywords instead of explicitly naming the ciphers (Does not work with MbedTLS) cipher-list ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH