Lost avifdec mention

[tofuproxy.git] / doc / usage.texi

diff --git a/doc/usage.texi b/doc/usage.texi
index 8cfbb0600dcfb3bbe85fa3b63ce0d4b7d195ffae..70084563d14ad8ce6407ec49437f8ecaa0221981 100644 (file)
--- a/doc/usage.texi
+++ b/doc/usage.texi
@@ -7,7 +7,7 @@
     GnuTLS'es @url{https://www.gnutls.org/manual/html_node/certtool-Invocation.html, certtool},
     @url{http://cr.yp.to/redo.html, redo} build system,
     @url{https://www.tcl.tk/, Tcl/Tk}'s @command{wish} shell for GUI dialogues,
-    @command{dwebp}, @command{djxl} for images transcoding,
+    @command{dwebp}, @command{djxl}, @command{avifdec} for images transcoding,
     @url{https://github.com/halturin/multitail, multitail} for logs viewing.
 
 @item Download and build @command{tofuproxy}:
@@ -37,7 +37,7 @@ Run @command{tofuproxy} itself. By default it will bind to
 
 @example
 $ ./tofuproxy.cmd
-main.go:316: listening: [::1]:8080 certs: ./certs
+main.go:70: listening: [::1]:8080 dns: [::1]:53 certs: ./certs ccerts: ./ccerts
 @end example
 
 @item Trust your newly generated CA:
@@ -48,6 +48,17 @@ main.go:316: listening: [::1]:8080 certs: ./certs
 
 @item Point you HTTP/HTTPS clients to @code{http://localhost:8080}.
 
+@item
+If you want to use TLS client certificates, then place them to
+@file{-ccerts} directory.
+
+@item
+Load spying domains to reject to with:
+
+@example
+$ cat spies.txt > fifos/add-spies
+@end example
+
 @item Watch logs:
 
 @example
@@ -63,4 +74,33 @@ will be shown Tk-dialog through the @command{wish} invocation. GnuTLS'es
 
 @image{dialog,,,Example dialog,.webp}
 
+@item
+Certificate trust decision dialog (like above one) has multiple hotkeys:
+
+    @itemize
+    @item @code{a} -- accept and save certificate chain to disk
+    @item @code{o} -- accept once per session (@command{tofuproxy} running)
+    @item @code{r} -- reject certificate
+    @item @code{q} -- reject certificate really once, same as closing the window
+    @item @code{n} -- next page of "their" certificate chain
+    @item @code{p} -- previous page of "their" certificate chain
+    @item @code{N} -- next page of "our" certificate chain
+    @item @code{P} -- previous page of "our" certificate chain
+    @end itemize
+
+@item
+To list currently accepted, rejected, HTTP authorized, TLS client
+authenticated hosts:
+
+@example
+$ cat fifos/list-@{accepted,rejected,http-auth,tls-auth@}
+@end example
+
+@item
+To remove knowledge of the host from any of the states mentioned above:
+
+@example
+$ echo www.example.com > fifos/del-tls-auth
+@end example
+
 @end itemize