X-Git-Url: https://diplodocus.org/git/nmh/blobdiff_plain/f347dd165f907248db3958f34ec91a73198fbcb3..bc4927948a1b01bf2ae8b952dfd2639c1f929f00:/man/msgchk.man

diff --git a/man/msgchk.man b/man/msgchk.man
index 97809b2f..eb356c22 100644
--- a/man/msgchk.man
+++ b/man/msgchk.man
@@ -19,11 +19,12 @@ all/mail/nomail ]
 .IR hostname ]
 .RB [ \-user
 .IR username ]
-.RB [ \-sasl ]
+.RB [ \-sasl " | " \-nosasl ]
 .RB [ \-saslmech
 .IR mechanism ]
 .RB [ \-initialtls ]
 .RB [ \-notls ]
+.RB [ \-certverify " | " \-nocertverify ]
 .RB [ \-authservice
 .IR service ]
 .RB [ \-snoop ]
@@ -164,6 +165,15 @@ transaction with the
 switch.  The
 .B \-notls
 switch will disable all attempts to negotiate TLS.
+.PP
+When using TLS the default is to verify the remote certificate and SubjectName
+against the local trusted certificate store.  This can be controlled by
+the
+.B \-certverify
+and
+.B \-nocertverify
+switches.  See your OpenSSL documentation for more information on certificate
+verification.
 .SH FILES
 .fc ^ ~
 .nf