sstp: add man & readme records

1 files changed, 80 insertions, 0 deletions

diff --git a/accel-pppd/accel-ppp.conf.5 b/accel-pppd/accel-ppp.conf.5
index 4b3b20aa..56b8bee9 100644
--- a/accel-pppd/accel-ppp.conf.5
+++ b/accel-pppd/accel-ppp.conf.5
@@ -42,6 +42,10 @@ PPTP controlling connection handling module.
 .br
 PPPoE discovery stage handling module.
 .TP
+.BI sstp
+.br
+SSTP controlling connection handling module.
+.TP
 .BI auth_pap
 PAP authentication module.
 .TP
@@ -627,6 +631,82 @@ sessions. Default value is 1420.
 If this option is given ppp interface will be renamed using
 .B ifname
 as a template, i.e l2tp%d => l2tp0.
+.SH [sstp]
+.br
+Configuration of SSTP module.
+.TP
+.BI "bind=" x.x.x.x
+If this option is given then sstp server will bind to specified IP address.
+.TP
+.BI "port=" n
+If this option is given then sstp server will bind to specified port.
+Default is 443.
+.TP
+.BI "verbose=" n
+If this option is given and 
+.B n
+is greater of zero then sstp module will produce verbose logging.
+.TP
+.BI "timeout=" n
+Timeout waiting reply from client in seconds.
+Default is 60.
+.TP
+.BI "hello-interval=" n
+If this option is given and greater then zero then sstp will send echo-request every 
+.B n
+seconds and drop connection without a reply.
+Default is 60.
+.TP
+.BI "ssl=" ssl
+If this option is given and 
+.B ssl
+is greater of zero then sstp module will enable builtin TLS support.
+Default is 1.
+.TP
+.BI "ssl-ciphers=" string
+Specifies the enabled ciphers. The ciphers are specified in the format understood by the OpenSSL library.
+.TP
+.BI "ssl-prefer-server-ciphers=" n
+If this option is given and 
+.B n
+is greater of zero then server ciphers should be preferred over client ciphers.
+Default is 0.
+.TP
+.BI "ssl-pemfile=" pemfile
+Specifies a file with the certificate in the PEM format for sstp server.
+Certificate is also used to compute initial SHA1 and SHA256 certificate hash.
+.TP
+.BI "ssl-keyfile=" keyfile
+Specifies a file with the secret key in the PEM format for sstp server.
+If not set, secret key will be loaded from the
+.BI pemfile
+certificate.
+.TP
+.BI "cert-hash-proto=" sha1,sha256
+Specifies hashing methods that can be used to compute the Compound MAC in the Crypto Binding attribute.
+Default is sha1 and sha256 both.
+.TP
+.BI "cert-hash-sha1=" hexstring
+Given hexadecimal value overrides SHA1 hash computed from the
+.BI pemfile
+certificate or used directly for non-ssl mode.
+.TP
+.BI "cert-hash-sha256=" hexstring
+Given hexadecimal value overrides SHA256 hash computed from the
+.BI pemfile
+certificate or used directly for non-ssl mode.
+.TP
+.BI "host-name=" string
+If this option is given, only sstp connection to specified host and with the same TLS SNI will be allowed.
+.TP
+.BI "ifname=" ifname
+If this option is given ppp interface will be renamed using
+.B ifname
+as a template, i.e sstp%d => sstp0.
+.TP
+.BI "ppp-max-mtu=" n
+Set the maximun MTU value that can be negociated for PPP over SSTP sessions.
+Default value is 1452, maximum is 4087.
 .SH [radius]
 .br
 Configuration of RADIUS module.