From 79e4e43bcadb0fb520240c655f529874f305f786 Mon Sep 17 00:00:00 2001 From: Tomas Heinrich Date: Thu, 14 Nov 2013 15:14:08 +0100 Subject: [PATCH] Remove references to Google ads from html documentation --- doc/rsyslog_secure_tls.html | 13 ------------- doc/tls_cert_ca.html | 13 ------------- doc/tls_cert_client.html | 13 ------------- doc/tls_cert_errmsgs.html | 13 ------------- doc/tls_cert_machine.html | 13 ------------- doc/tls_cert_scenario.html | 13 ------------- doc/tls_cert_server.html | 13 ------------- doc/tls_cert_summary.html | 13 ------------- doc/tls_cert_udp_relay.html | 13 ------------- 9 files changed, 117 deletions(-) diff --git a/doc/rsyslog_secure_tls.html b/doc/rsyslog_secure_tls.html index b15e5a4..0bef2b3 100644 --- a/doc/rsyslog_secure_tls.html +++ b/doc/rsyslog_secure_tls.html @@ -38,19 +38,6 @@ below. Do not blame us if it doesn't provide what you need ;)

Our secrity goals are achived via public/private key security. As such, it is vital that private keys are well protected and not accessible to third parties. - - - - If private keys have become known to third parties, the system does not provide any security at all. Also, our solution bases on X.509 certificates and a (very limited) chain of trust. We have one instance (the CA) that issues all machine diff --git a/doc/tls_cert_ca.html b/doc/tls_cert_ca.html index 2cae404..f366462 100644 --- a/doc/tls_cert_ca.html +++ b/doc/tls_cert_ca.html @@ -23,19 +23,6 @@ Gerhards (2008-06-17)

maintained by a trustworthy person (or group) and approves the indentities of all machines. It does so by issuing their certificates. In a small setup, the administrator can provide the CA function. What is important is the the CA's - - - - private key is well-protocted and machine certificates are only issued if it is know they are valid (in a single-admin case that means the admin should not issue certificates to anyone else except himself).

diff --git a/doc/tls_cert_client.html b/doc/tls_cert_client.html index dbe7961..53596fc 100644 --- a/doc/tls_cert_client.html +++ b/doc/tls_cert_client.html @@ -25,19 +25,6 @@ example, that meanst turng.example.net). The client check's the server's identit talks to it only if it is the expected server. This is a very important step. Without it, you would not detect man-in-the-middle attacks or simple malicious servers who try to get hold of your valuable log data. - - - -

Steps to do: