docs: Simplify explanation of tls_allowed_dn_list wildcards

This removes a dead link, the need for users to understand a glib function and a
improper reference to fnmatch (as we only expand asterisks to any string).

Signed-off-by: Martin Kletzander <mkletzan@redhat.com>
Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
This commit is contained in:
Martin Kletzander 2021-11-11 15:44:58 +01:00
parent 694f4e2f01
commit 555c24a55d
4 changed files with 5 additions and 9 deletions

View File

@ -249,8 +249,8 @@ Blank lines and comments beginning with <code>#</code> are ignored.
</p>
<p>
This list may contain wildcards such as <code>"C=GB,ST=London,L=London,O=Libvirt Project,CN=*"</code>
See the POSIX <code>fnmatch</code> function for the format
of the wildcards.
Any * matches in the string matches any number of consecutive characters,
like a simplified <code>glob(7)</code>.
</p>
<p>
Note that if this is an empty list, <i>no client can connect</i>.

View File

@ -290,9 +290,7 @@
#
# "C=GB,ST=London,L=London,O=Red Hat,CN=*"
#
# See the g_pattern_match function for the format of the wildcards:
#
# https://developer.gnome.org/glib/stable/glib-Glob-style-pattern-matching.html
# Any * matches any number of consecutive spaces, like a simplified glob(7).
#
# NB If this is an empty list, no client can connect, so comment out
# entirely rather than using empty list to disable these checks

View File

@ -183,9 +183,8 @@ tls_no_verify_certificate = 1
#
# "C=GB,ST=London,L=London,O=Red Hat,CN=*"
#
# See the g_pattern_match function for the format of the wildcards.
# Any * matches any number of consecutive spaces, like a simplified glob(7).
#
# https://developer.gnome.org/glib/stable/glib-Glob-style-pattern-matching.html
#
# NB If this is an empty list, no client can connect, so comment out
# entirely rather than using empty list to disable these checks

View File

@ -147,9 +147,8 @@ tls_no_verify_certificate = 1
#
# "C=GB,ST=London,L=London,O=Red Hat,CN=*"
#
# See the g_pattern_match function for the format of the wildcards.
# Any * matches any number of consecutive spaces, like a simplified glob(7).
#
# https://developer.gnome.org/glib/stable/glib-Glob-style-pattern-matching.html
#
# NB If this is an empty list, no client can connect, so comment out
# entirely rather than using empty list to disable these checks