commit 0aa0bf8ee6102d032c8833db043c007cd5bc36c2 Author: Nick Mathewson nickm@torproject.org Date: Thu Oct 10 15:21:50 2013 -0400

Update manpage with http option --- man/tlsdate-helper.1 | 2 +- man/tlsdate.1 | 6 +++++- 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/man/tlsdate-helper.1 b/man/tlsdate-helper.1 index 8260434..d81f694 100644 --- a/man/tlsdate-helper.1 +++ b/man/tlsdate-helper.1 @@ -6,7 +6,7 @@ tlsdate-helper - secure parasitic rdate replacement .SH SYNOPSIS .B tlsdate-helper host port protocol ca_racket verbose certdir setclock \ -showtime timewarp leapaway proxy-type://proxyhost:proxyport +showtime timewarp leapaway proxy-type://proxyhost:proxyport httpmode .SH DESCRIPTION .B tlsdate-helper is a tool for setting the system clock by hand or by communication diff --git a/man/tlsdate.1 b/man/tlsdate.1 index e34c81d..82e3d7c 100644 --- a/man/tlsdate.1 +++ b/man/tlsdate.1 @@ -5,7 +5,7 @@ .SH NAME tlsdate - secure parasitic rdate replacement .SH SYNOPSIS -.B tlsdate [-hnvVstl] [-H [hostname]] [-p [port]] [-P [sslv23|sslv3|tlsv1]] \ +.B tlsdate [-hnvVstlw] [-H [hostname]] [-p [port]] [-P [sslv23|sslv3|tlsv1]] \ [--certdir [dirname]] [-x [--proxy] proxy-type://proxyhost:proxyport] .SH DESCRIPTION .B tlsdate @@ -76,6 +76,10 @@ if there are any other issues, such as self-signed certificates or if the user pins to a CA that is not used by the remote server. This is useful if your RTC is broken on boot and you are unable to use DNSEC until you've at least had some kind of leap of cryptographically assured data. +.IP "-w | --http" +Run in web mode: look for the time in an HTTP "Date" header inside an +HTTPS connection, rather than in the TLS connection itself. The provided +hostname and port must support HTTPS. .SH BUGS It's likely! Let us know by contacting jacob@appelbaum.net