git: 9af6cedd270a - stable/13 - rpc.tlsclntd: Add the -2 option to the man page

From: Rick Macklem <rmacklem_at_FreeBSD.org>
Date: Sun, 05 Jun 2022 01:13:49 UTC
The branch stable/13 has been updated by rmacklem:

URL: https://cgit.FreeBSD.org/src/commit/?id=9af6cedd270a6bc4fc07ed7dfd4fe53c81f6d6fe

commit 9af6cedd270a6bc4fc07ed7dfd4fe53c81f6d6fe
Author:     Rick Macklem <rmacklem@FreeBSD.org>
AuthorDate: 2022-05-22 21:20:14 +0000
Commit:     Rick Macklem <rmacklem@FreeBSD.org>
CommitDate: 2022-06-05 01:13:07 +0000

    rpc.tlsclntd: Add the -2 option to the man page
    
    Since the KTLS now supports TLS1.3, the daemons default
    to version 1.3, since the draft (to be an RFC someday)
    requires TLS1.3.
    
    However, since FreeBSD 13,0, 13,1 uses TLS1.2 for
    NFS-over-TLS, the "-2" option is added to both daemons
    for compatibility with FreeBSD 13.0, 13.1.
    
    This patch updates the man pages for this.
    
    This is a content change.
    
    (cherry picked from commit 915fc1afe57e89898c4edb0b19911e2a5b27976d)
---
 usr.sbin/rpc.tlsclntd/rpc.tlsclntd.8 | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/usr.sbin/rpc.tlsclntd/rpc.tlsclntd.8 b/usr.sbin/rpc.tlsclntd/rpc.tlsclntd.8
index fa33a09411ac..d8e2d1cd140b 100644
--- a/usr.sbin/rpc.tlsclntd/rpc.tlsclntd.8
+++ b/usr.sbin/rpc.tlsclntd/rpc.tlsclntd.8
@@ -26,7 +26,7 @@
 .\" $FreeBSD$
 .\"
 .\" Modified from gssd.8 for rpc.tlsclntd.8 by Rick Macklem.
-.Dd May 18, 2022
+.Dd May 22, 2022
 .Dt RPC.TLSCLNTD 8
 .Os
 .Sh NAME
@@ -34,6 +34,7 @@
 .Nd "Sun RPC over TLS Client Daemon"
 .Sh SYNOPSIS
 .Nm
+.Op Fl 2
 .Op Fl C Ar available_ciphers
 .Op Fl D Ar certdir
 .Op Fl d
@@ -92,6 +93,15 @@ option has been specified.
 .Pp
 The options are as follows:
 .Bl -tag -width indent
+.It Fl 2 , Fl Fl usetls1_2
+Specify the use of TLS version 1.2.
+By default, the client will
+use TLS version 1.3, as required by the RFC.
+However, early
+.Fx
+.Pq 13.0 and 13.1
+servers require
+this option, since they only support TLS version 1.2.
 .It Fl C Ar available_ciphers , Fl Fl ciphers= Ns Ar available_ciphers
 Specify which ciphers are available during TLS handshake.
 If this option is specified,