From 64ac331b10cc7d4907207c3d75cfb88c9ec51117 Mon Sep 17 00:00:00 2001
From: Lexi Winter <ivy@FreeBSD.org>
Date: Tue, 3 Jun 2025 14:02:32 +0100
Subject: kerberos.sh: make keytab configurable

---
 acme.conf.5 | 10 ++++++++++
 1 file changed, 10 insertions(+)

(limited to 'acme.conf.5')

diff --git a/acme.conf.5 b/acme.conf.5
index 550123a..269b99b 100644
--- a/acme.conf.5
+++ b/acme.conf.5
@@ -50,6 +50,16 @@ challenge with the
 challenge handler.
 The default value is
 .Dq host/$(hostname) .
+.It Va ACME_KERBEROS_KEYTAB
+The Kerberos keytab to use when responding to a
+.Dq dns-01
+challenge with the
+.Dq kerberos
+challenge handler.
+The keytab must contain a Kerberos key for the principal configured in
+.Va ACME_KERBEROS_PRINCIPAL .
+The default value is
+.Pa /etc/krb5.keytab .
 .El
 .Sh SEE ALSO
 .Xr domains.conf 5 ,
-- 
cgit v1.2.3