From 1020bde33b499928eb1be70c782422703eeb0e64 Mon Sep 17 00:00:00 2001
From: Fabian Keil <fk@fabiankeil.de>
Date: Thu, 20 Feb 2020 17:37:19 +0100
Subject: [PATCH] Rebuild docs

---
 doc/webserver/user-manual/actions-file.html |  2 +-
 doc/webserver/user-manual/appendix.html     | 16 +++++++--------
 doc/webserver/user-manual/config.html       | 22 +++++++++++++++++----
 3 files changed, 27 insertions(+), 13 deletions(-)

diff --git a/doc/webserver/user-manual/actions-file.html b/doc/webserver/user-manual/actions-file.html
index 770fb4b5..90b6dd8f 100644
--- a/doc/webserver/user-manual/actions-file.html
+++ b/doc/webserver/user-manual/actions-file.html
@@ -73,7 +73,7 @@
         <p>The default profiles, and their associated actions, as pre-defined in <tt class=
         "FILENAME">default.action</tt> are:</p>
         <div class="TABLE">
-          <a name="AEN3088" id="AEN3088"></a>
+          <a name="AEN3105" id="AEN3105"></a>
           <p><b>Table 1. Default Configurations</b></p>
           <table border="1" frame="border" rules="all" class="CALSTABLE">
             <col width="1*" title="C1">
diff --git a/doc/webserver/user-manual/appendix.html b/doc/webserver/user-manual/appendix.html
index d9149543..5d3c622d 100644
--- a/doc/webserver/user-manual/appendix.html
+++ b/doc/webserver/user-manual/appendix.html
@@ -202,7 +202,7 @@
       these. If not, you will get a friendly error message. Internet access is not necessary either.</p>
       <ul>
         <li>
-          <p>Privoxy main page:</p><a name="AEN6270" id="AEN6270"></a>
+          <p>Privoxy main page:</p><a name="AEN6287" id="AEN6287"></a>
           <blockquote class="BLOCKQUOTE">
             <p><a href="http://config.privoxy.org/" target="_top">http://config.privoxy.org/</a></p>
           </blockquote>
@@ -211,7 +211,7 @@
           "APPLICATION">Privoxy</span>)</p>
         </li>
         <li>
-          <p>View and toggle client tags:</p><a name="AEN6278" id="AEN6278"></a>
+          <p>View and toggle client tags:</p><a name="AEN6295" id="AEN6295"></a>
           <blockquote class="BLOCKQUOTE">
             <p><a href="http://config.privoxy.org/client-tags" target=
             "_top">http://config.privoxy.org/client-tags</a></p>
@@ -219,21 +219,21 @@
         </li>
         <li>
           <p>Show information about the current configuration, including viewing and editing of actions
-          files:</p><a name="AEN6283" id="AEN6283"></a>
+          files:</p><a name="AEN6300" id="AEN6300"></a>
           <blockquote class="BLOCKQUOTE">
             <p><a href="http://config.privoxy.org/show-status" target=
             "_top">http://config.privoxy.org/show-status</a></p>
           </blockquote>
         </li>
         <li>
-          <p>Show the browser's request headers:</p><a name="AEN6288" id="AEN6288"></a>
+          <p>Show the browser's request headers:</p><a name="AEN6305" id="AEN6305"></a>
           <blockquote class="BLOCKQUOTE">
             <p><a href="http://config.privoxy.org/show-request" target=
             "_top">http://config.privoxy.org/show-request</a></p>
           </blockquote>
         </li>
         <li>
-          <p>Show which actions apply to a URL and why:</p><a name="AEN6293" id="AEN6293"></a>
+          <p>Show which actions apply to a URL and why:</p><a name="AEN6310" id="AEN6310"></a>
           <blockquote class="BLOCKQUOTE">
             <p><a href="http://config.privoxy.org/show-url-info" target=
             "_top">http://config.privoxy.org/show-url-info</a></p>
@@ -242,15 +242,15 @@
         <li>
           <p>Toggle Privoxy on or off. This feature can be turned off/on in the main <tt class="FILENAME">config</tt>
           file. When toggled <span class="QUOTE">"off"</span>, <span class="QUOTE">"Privoxy"</span> continues to run,
-          but only as a pass-through proxy, with no actions taking place:</p><a name="AEN6301" id="AEN6301"></a>
+          but only as a pass-through proxy, with no actions taking place:</p><a name="AEN6318" id="AEN6318"></a>
           <blockquote class="BLOCKQUOTE">
             <p><a href="http://config.privoxy.org/toggle" target="_top">http://config.privoxy.org/toggle</a></p>
           </blockquote>
-          <p>Short cuts. Turn off, then on:</p><a name="AEN6305" id="AEN6305"></a>
+          <p>Short cuts. Turn off, then on:</p><a name="AEN6322" id="AEN6322"></a>
           <blockquote class="BLOCKQUOTE">
             <p><a href="http://config.privoxy.org/toggle?set=disable" target=
             "_top">http://config.privoxy.org/toggle?set=disable</a></p>
-          </blockquote><a name="AEN6308" id="AEN6308"></a>
+          </blockquote><a name="AEN6325" id="AEN6325"></a>
           <blockquote class="BLOCKQUOTE">
             <p><a href="http://config.privoxy.org/toggle?set=enable" target=
             "_top">http://config.privoxy.org/toggle?set=enable</a></p>
diff --git a/doc/webserver/user-manual/config.html b/doc/webserver/user-manual/config.html
index a1df796c..b229eb60 100644
--- a/doc/webserver/user-manual/config.html
+++ b/doc/webserver/user-manual/config.html
@@ -2431,6 +2431,8 @@
             <dd>
               <p>This directive specifies the directory where the CA key, the CA certificate and the trusted CAs file
               are located.</p>
+              <p>The permissions should only let <span class="APPLICATION">Privoxy</span> and the <span class=
+              "APPLICATION">Privoxy</span> admin access the directory.</p>
             </dd>
             <dt>Examples:</dt>
             <dd>
@@ -2462,8 +2464,13 @@
             <dt>Notes:</dt>
             <dd>
               <p>This directive specifies the name of the CA certificate file in ".crt" format.</p>
-              <p>It can be generated with: openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.crt
-              -days 3650</p>
+              <p>The file is used by <span class="APPLICATION">Privoxy</span> to generate website certificates when
+              https filtering is enabled with the <tt class="LITERAL"><a href="actions-file.html#ENABLE-HTTP-FILTERING"
+              target="_top">enable-https-filtering</a></tt> action.</p>
+              <p><span class="APPLICATION">Privoxy</span> clients should import the certificate so that they can
+              validate the generated certificates.</p>
+              <p>The file can be generated with: openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out
+              cacert.crt -days 3650</p>
             </dd>
             <dt>Examples:</dt>
             <dd>
@@ -2560,7 +2567,14 @@
             </dd>
             <dt>Notes:</dt>
             <dd>
-              <p>This directive specifies the directory where generated TLS/SSL keys and certificates are saved.</p>
+              <p>This directive specifies the directory where generated TLS/SSL keys and certificates are saved when
+              https filtering is enabled with the <tt class="LITERAL"><a href="actions-file.html#ENABLE-HTTP-FILTERING"
+              target="_top">enable-https-filtering</a></tt> action.</p>
+              <p>The keys and certificates currently have to be deleted manually when changing the <a href=
+              "#CA-CERT-FILE" target="_top">ca-cert-file</a> and the <a href="#CA-CERT-KEY" target=
+              "_top">ca-cert-key</a>.</p>
+              <p>The permissions should only let <span class="APPLICATION">Privoxy</span> and the <span class=
+              "APPLICATION">Privoxy</span> admin access the directory.</p>
             </dd>
             <dt>Examples:</dt>
             <dd>
@@ -2592,7 +2606,7 @@
             <dt>Notes:</dt>
             <dd>
               <p>This directive specifies the trusted CAs file that is used when validating certificates for
-              intercepted TLS/SSL request.</p>
+              intercepted TLS/SSL requests.</p>
               <p>An example file can be downloaded from <a href="https://curl.haxx.se/ca/cacert.pem" target=
               "_top">https://curl.haxx.se/ca/cacert.pem</a>.</p>
             </dd>
-- 
2.39.2