updates.

[silc.git] / doc / example_silcd.conf

diff --git a/doc/example_silcd.conf b/doc/example_silcd.conf
index 26b6ef13fa0a6b174e1a16b4c8f0eeb2b2dc5396..89e7c6c657ce05ba674dda10a318f1b5ae6a645b 100644 (file)
--- a/doc/example_silcd.conf
+++ b/doc/example_silcd.conf
@@ -6,10 +6,16 @@
 # If the cipher is builtin the <module path> maybe omitted.
 #
 [Cipher]
-twofish:../lib/silcsim/modules/twofish.sim.so:16:16
-rc6:../lib/silcsim/modules/rc6.sim.so:16:16
-mars:../lib/silcsim/modules/mars.sim.so:16:16
-none:../lib/silcsim/modules/none.sim.so:0:0
+aes-256-cbc:/usr/local/silc/modules/aes.sim.so:32:16
+aes-192-cbc:/usr/local/silc/modules/aes.sim.so:24:16
+aes-128-cbc:/usr/local/silc/modules/aes.sim.so:16:16
+twofish-256-cbc:/usr/local/silc/modules/twofish.sim.so:32:16
+twofish-192-cbc:/usr/local/silc/modules/twofish.sim.so:24:16
+twofish-128-cbc:/usr/local/silc/modules/twofish.sim.so:16:16
+mars-256-cbc:/usr/local/silc/modules/mars.sim.so:32:16
+mars-192-cbc:/usr/local/silc/modules/mars.sim.so:24:16
+mars-128-cbc:/usr/local/silc/modules/mars.sim.so:16:16
+none:/usr/local/silc/modules/none.sim.so:0:0
 
 #
 # Configured hash functions.
@@ -18,20 +24,38 @@ none:../lib/silcsim/modules/none.sim.so:0:0
 #
 # If the hash function is builtin the <module path> maybe omitted.
 #
-[FashFunction]
-md5::64:16
+[Hash]
 sha1::64:20
+md5::64:16
+
+#
+# Configured HMAC functions. The hash function used in the HMAC must
+# configured to the [hash] section.
+#
+# Format: <name>:<hash name>:<mac length>
+#
+[hmac]
+hmac-sha1-96:sha1:12
+hmac-md5-96:md5:12
+hmac-sha1:sha1:20
+hmac-md5:md5:16
 
 #
 # Configured PKCS.
 #
-# Format: <name>:<module path>:<key length>
+# Format: <name>
 #
-# NOTE: <module path> must be omitted as PKCS cannot be modules currently.
+[PKCS]
+rsa
+
+#
+# Run SILC server as specific user and group. The server must be initially
+# run as root.
+#
+# Format: <user>:<group>
 #
-#[PKCS]
-#rsa::1024
-#dss::1024
+[Identity]
+nobody:nobody
 
 #
 # Server's administrative information.
@@ -49,6 +73,14 @@ Kuopio, Finland:Test Server:Pekka Riikonen:priikone@poseidon.pspt.fi
 [ServerInfo]
 lassi.kuo.fi.ssh.com:10.2.1.6:Kuopio, Finland:706
 
+#
+# Server keys
+#
+# Format: +<public key>:<private key>
+#
+[ServerKeys]
+/etc/silc/silcd.pub:/etc/silc/silcd.prv
+
 #
 # Listenning ports.
 #
@@ -71,10 +103,10 @@ lassi.kuo.fi.ssh.com:10.2.1.6:Kuopio, Finland:706
 #         fatallogile:<path>:<max byte size>
 #
 [Logging]
-infologfile:silcd.log:10000
-#warninglogfile:/var/log/silcd_warning.log:10000
-#errorlogfile:ERROR.log:10000
-#fatallogfile:/var/log/silcd_error.log:
+infologfile:/usr/local/silc/logs/silcd.log:10000
+#warninglogfile:/usr/local/silc/logs/silcd_warning.log:10000
+#errorlogfile:/usr/local/silc/logs/error.log:10000
+#fatallogfile:/usr/local/silc/logs/silcd_error.log:
 
 #
 # Connection classes.
@@ -93,16 +125,22 @@ infologfile:silcd.log:10000
 #
 # Format: <remote host>:<auth method>:<auth data>:<port>:<class>
 #
+# The <auth data> is either passphrase or file path to the public key
+# file.
+#
 [ClientConnection]
-:::1333:1
+:::706:1
 
 #
 # Configured server administrator connections
 #
-# Format: <host>:<auth method>:<auth data>:<nickname hash>:<class>
+# Format: <host>:<username>:<nickname>:<auth method>:<auth data>
+#
+# The <auth data> is either passphrase or file path to the public key
+# file.
 #
 [AdminConnection]
-10.2.1.199:passwd:veryscret:XXX:1
+10.2.1.199:priikone:pekka:passwd:veryscret
 
 #
 # Configured server connections.
@@ -114,6 +152,9 @@ infologfile:silcd.log:10000
 #
 # Format: <remote host>:<auth method>:<auth data>:<port>:<version ID>:<vlass>
 #
+# The <auth data> is either passphrase or file path to the public key
+# file.
+#
 [ServerConnection]
 10.2.1.7:passwd:veryscret:706:1:1
 
@@ -125,25 +166,20 @@ infologfile:silcd.log:10000
 # this sections includes all configured router connections.  The first
 # configured connection is the primary route.
 #
-# Format: <remote host>:<auth method>:<auth data>:<port>:<version ID>:<class>
+# Format: <remote host>:<auth method>:<auth data>:<port>:<version ID>:<class>:<initiator>
+#
+# The <auth data> is either passphrase or file path to the public key
+# file.
 #
 [RouterConnection]
-#10.2.1.100:passwd:veryverysecret:706:1:1
+#10.2.1.100:passwd:veryverysecret:706:1:1:1
 
 #
 # Denied connections.
 #
 # These connections are denied to connect our server.
 #
-# Format: <remote host/nickname>:<time interval>:<comment>:<port>
+# Format: <remote host>:<port>:<comment>
 #
 [DenyConnection]
-
-#
-# Redirected client connections.
-#
-# Clients will be redirected to these servers when our server is full.
-#
-# Format: <remote host>:<port>
-#
-[RedirectClient]
+#10.2.1.99:0:Your connection has been denied