X-Git-Url: http://www.git.stargrave.org/?a=blobdiff_plain;f=doc%2Fusage.texi;h=828fe349705279ed4ee13014ae1739e8c558999a;hb=aca0f719ffa95e51420a625813f2f4cbf1d5397c;hp=eb88636dcf3e104a627df3078d3310ff1aa3bb51;hpb=2df541457d24653f0fb789bfdc8de828c03f4f6c;p=tofuproxy.git diff --git a/doc/usage.texi b/doc/usage.texi index eb88636..828fe34 100644 --- a/doc/usage.texi +++ b/doc/usage.texi @@ -1,14 +1,14 @@ @node Usage @unnumbered Usage -@itemize +Currently @command{tofuproxy} uses: +GnuTLS'es @url{https://www.gnutls.org/manual/html_node/certtool-Invocation.html, certtool}, +@url{http://cr.yp.to/redo.html, redo} build system, +@url{https://www.tcl.tk/, Tcl/Tk}'s @command{wish} shell for GUI dialogues, +@command{dwebp}, @command{djxl}, @command{avifdec} for images transcoding, +@url{https://github.com/halturin/multitail, multitail} for logs viewing. -@item Currently @command{tofuproxy} uses: - GnuTLS'es @url{https://www.gnutls.org/manual/html_node/certtool-Invocation.html, certtool}, - @url{http://cr.yp.to/redo.html, redo} build system, - @url{https://www.tcl.tk/, Tcl/Tk}'s @command{wish} shell for GUI dialogues, - @command{dwebp}, @command{djxl} for images transcoding, - @url{https://github.com/halturin/multitail, multitail} for logs viewing. +@itemize @item Download and build @command{tofuproxy}: @@ -32,7 +32,7 @@ $ SSL_CERT_FILE=`pwd`/cert.pem GIT_SSL_CAINFO=`pwd`/cert.pem redo all @item Run @command{tofuproxy} itself. By default it will bind to -@code{[::1]:8080}, use @code{[::1]:53} DNS server for DANE requests +@code{[::1]:8080} and use @code{[::1]:53} DNS server for DANE requests (set to an empty string to disable DANE lookups): @example @@ -46,18 +46,7 @@ main.go:70: listening: [::1]:8080 dns: [::1]:53 certs: ./certs ccerts: ./ccerts # cat cert.pem >> /etc/ssl/cert.pem @end example -@item Point you HTTP/HTTPS clients to @code{http://localhost:8080}. - -@item -If you want to use TLS client certificates, then place them to -@file{-ccerts} directory. - -@item -Load spying domains to reject to with: - -@example -$ cat spies.txt > fifos/add-spies -@end example +@item Point you HTTP/HTTPS clients to @code{http://localhost:8080} proxy. @item Watch logs: @@ -67,26 +56,4 @@ $ ( cd fifos ; ./multitail.sh ) @image{logs,,,Example logs,.webp} -@item -When you encounter something requiring your attention and decision, you -will be shown Tk-dialog through the @command{wish} invocation. GnuTLS'es -@command{certtool} is used for certificate information printing. - -@image{dialog,,,Example dialog,.webp} - -@item -To list currently accepted, rejected, HTTP authorized, TLS client -authenticated hosts: - -@example -$ cat fifos/list-@{accepted,rejected,http-auth,tls-auth@} -@end example - -@item -To remove knowledge of the host from any of the states mentioned above: - -@example -$ echo www.example.com > fifos/del-tls-auth -@end example - @end itemize