.D........ [ZBXNEXT-1263] documented TLS parameters in zabbix_get man-page

1 files changed, 74 insertions, 1 deletions

diff --git a/man/zabbix_get.man b/man/zabbix_get.man
index e501c5b342e..22265c72ce4 100644
--- a/man/zabbix_get.man
+++ b/man/zabbix_get.man
@@ -1,4 +1,4 @@
-.TH ZABBIX_GET 1 "2014\-07\-10" Zabbix
+.TH ZABBIX_GET 1 "2015\-06\-10" Zabbix
 .SH NAME
 zabbix_get \- Zabbix get utility
 .SH SYNOPSIS
@@ -10,6 +10,42 @@ zabbix_get \- Zabbix get utility
 .IR IP\-address ]
 .BI \-k " item\-key"
 .br
+.B zabbix_get \-s
+.I host\-name\-or\-IP
+.RB [ \-p
+.IR port\-number ]
+.RB [ \-I
+.IR IP\-address ]
+.B \-\-tls\-connect
+.IR cert
+.B \-\-tls\-ca\-file
+.IR ca_file
+.RB [ \-\-tls\-crl\-file
+.IR crl_file ]
+.RB [ \-\-tls\-cert\-issuer
+.IR certificate_issuer ]
+.RB [ \-\-tls\-cert\-subject
+.IR certificate_subject ]
+.B \-\-tls\-cert\-file
+.IR cert_file
+.B \-\-tls\-key\-file
+.IR key_file
+.BI \-k " item\-key"
+.br
+.B zabbix_get \-s
+.I host\-name\-or\-IP
+.RB [ \-p
+.IR port\-number ]
+.RB [ \-I
+.IR IP\-address ]
+.B \-\-tls\-connect
+.IR psk
+.B \-\-tls\-psk\-identity
+.IR psk_identity
+.B \-\-tls\-psk\-file
+.IR psk_file
+.BI \-k " item\-key"
+.br
 .B zabbix_get \-h
 .br
 .B zabbix_get \-V
@@ -26,12 +62,49 @@ Default is 10050.
 Specify source IP address.
 .IP "\fB\-k\fR, \fB\-\-key\fR \fIitem\-key\fR"
 Specify key of item to retrieve value for.
+.IP "\fB\-\-tls\-connect\fR"
+How to connect to agent. Values:\fR
+.SS
+.RS 12
+.TP 12
+.B unencrypted
+connect without encryption
+.RE
+.RS 12
+.TP 12
+.B psk
+connect using TLS and a pre-shared key
+.RE
+.RS 12
+.TP 12
+.B cert
+connect using TLS and a certificate
+.RE
+.RE
+.IP "\fB\-\-tls\-ca\-file\fR"
+Full pathname of a file containing the top-level CA(s) certificates for peer certificate verification.
+.IP "\fB\-\-tls\-cert\-issuer\fR"
+Allowed server certificate issuer.
+.IP "\fB\-\-tls\-cert\-subject\fR"
+Allowed server certificate subject.
+.IP "\fB\-\-tls\-cert\-file\fR"
+Full pathname of a file containing the certificate or certificate chain.
+.IP "\fB\-\-tls\-key\-file\fR"
+Full pathname of a file containing the private key.
+.IP "\fB\-\-tls\-psk\-identity\fR"
+PSK\-identity string.
+.IP "\fB\-\-tls\-psk\-file\fR"
+Full pathname of a file containing the pre-shared key.
 .IP "\fB\-h\fR, \fB\-\-help\fR"
 Display this help and exit.
 .IP "\fB\-V\fR, \fB\-\-version\fR"
 Output version information and exit.
 .SH "EXAMPLES"
 \fBzabbix_get \-s 127.0.0.1 \-p 10050 \-k "system.cpu.load[all,avg1]"\fR
+.br
+\fBzabbix_get \-s 127.0.0.1 \-p 10050 \-k "system.cpu.load[all,avg1]" \-\-tls\-connect=psk \-\-tls\-psk\-identity="PSK ID Zabbix agentd" \-\-tls\-psk\-file=/home/zabbix/zabbix_agentd.psk\fR
+.br
+\fBzabbix_get \-s 127.0.0.1 \-p 10050 \-k "system.cpu.load[all,avg1]" \-\-tls\-connect=cert \-\-tls\-ca\-file=/home/zabbix/zabbix_ca_file \-\-tls\-cert\-issuer="CN=Signing CA,OU=IT operations,O=Example Corp,DC=example,DC=com" \-\-tls\-cert\-subject="CN=server1,OU=IT operations,O=Example Corp,DC=example,DC=com" \-\-tls\-cert\-file=/home/zabbix/zabbix_get.crt \-\-tls\-key\-file=/home/zabbix/zabbix_get.key
 .SH "SEE ALSO"
 .BR zabbix_agentd (8),
 .BR zabbix_proxy (8),