git: 79302a6304b1 - mount_nfs(8): add a description for the new "tlscertname" option

[Rick Macklem]

The branch main has been updated by rmacklem:

URL: https://cgit.FreeBSD.org/src/commit/?id=79302a6304b1074bdb8ca60cb29982cf64197c92

commit 79302a6304b1074bdb8ca60cb29982cf64197c92
Author:     Rick Macklem <rmacklem at FreeBSD.org>
AuthorDate: 2020-12-24 22:20:06 +0000
Commit:     Rick Macklem <rmacklem at FreeBSD.org>
CommitDate: 2020-12-24 22:20:06 +0000

    mount_nfs(8): add a description for the new "tlscertname" option
    
    commit 665b1365fe8e added a new NFS mount option that is used to set a
    non-default X.509 certificate, that can be used for nfs-over-tls NFS
    mounts.
    This patch adds a description for it to the man page.
    
    Reviewed by:            0mp
    Differential Revision:  https://reviews.freebsd.org/D27733
---
 sbin/mount_nfs/mount_nfs.8 | 32 +++++++++++++++++++++++++++++++-
 1 file changed, 31 insertions(+), 1 deletion(-)

diff --git a/sbin/mount_nfs/mount_nfs.8 b/sbin/mount_nfs/mount_nfs.8
index 44490d6945fe..b2c561bc5cc8 100644
--- a/sbin/mount_nfs/mount_nfs.8
+++ b/sbin/mount_nfs/mount_nfs.8
@@ -28,7 +28,7 @@
 .\"	@(#)mount_nfs.8	8.3 (Berkeley) 3/29/95
 .\" $FreeBSD$
 .\"
-.Dd November 30, 2020
+.Dd December 21, 2020
 .Dt MOUNT_NFS 8
 .Os
 .Sh NAME
@@ -418,6 +418,36 @@ per RFC NNNN.
 TLS is only supported for TCP connections and the
 .Xr rpc.tlsclntd 8
 daemon must be running for an NFS over TCP connection to use TLS.
+.It Cm tlscertname Ns = Ns Aq Ar name
+This option specifies the name of an alternate certificate to be
+presented to the NFS server during TLS handshake.
+The default certificate file names are
+.Dq cert.pem
+and
+.Dq certkey.pem .
+When this option is specified,
+.Ar name
+replaces
+.Dq cert
+in the above file names.
+For example, if the value of
+.Ar name
+is specified as
+.Dq other
+the certificate file names to be used will be
+.Dq other.pem
+and
+.Dq otherkey.pem .
+These files are stored in
+.Pa /etc/rpc.tlsclntd
+by default.
+This option is only meaningful when used with the
+.Cm tls
+option and the
+.Xr rpc.tlsclntd 8
+is running with the
+.Fl m
+command line flag set.
 .It Cm udp
 Use UDP transport.
 .It Cm vers Ns = Ns Aq Ar vers_number