doc update

src/occtl-args.def

@@ -16,7 +16,7 @@ detail  = "Openconnect VPN server control (occtl) is a tool to control
 the ocserv VPN server.";
 
 copyright = {
-    date  = "2014";
+    date  = "2014, 2015";
     owner = "Red Hat";
     author = "Nikos Mavrogiannopoulos";
     eaddr  = "openconnect-devel@lists.infradead.org";
@@ -39,7 +39,7 @@ doc-section = {
   ds-format = 'texi';
   ds-text   = <<-_EOT_
 Openconnect VPN server control (occtl) is a tool to control
-the ocserv VPN server. It uses D-BUS to connect to ocserv.
+the ocserv VPN server.
 _EOT_;
 };
 
@@ -60,9 +60,7 @@ doc-section = {
   ds-type = 'IMPLEMENTATION NOTES';
   ds-format = 'texi';
   ds-text   = <<-_EOT_
-This tool uses unix domain sockets or D-BUS to connect to ocserv (depending on compilation options).
-In case D-BUS is being use the D-BUS access controls should be used to prevent potentially dangerous commands to be sent
-to ocserv by unprivileged users.
+This tool uses unix domain sockets to connect to ocserv.
 _EOT_;
 };
 

src/ocserv-args.def

@@ -612,7 +612,7 @@ This a standalone server that reads a configuration file (see below for more det
 and waits for client connections.
 
 The server maintains two connections/channels with the client. The main VPN 
-channel is established over TCP and TLS. This is the control channel as well 
+channel is established over TCP, HTTP and TLS. This is the control channel as well 
 as the backup data channel. After its establishment a UDP channel using DTLS 
 is initiated which serves as the main data channel. If the UDP channel fails 
 to establish or is temporarily unavailable the backup channel over TCP/TLS 
@@ -805,10 +805,9 @@ doc-section = {
   ds-type = 'IMPLEMENTATION NOTES';
   ds-format = 'texi';
   ds-text   = <<-_EOT_
-Note that while this server utilizes privilege separation and password
+Note that while this server utilizes privilege separation and all
 authentication occurs on the security module, this does not apply for TLS client 
-certificate authentication. That is because the worker has no way to 
-prove to the main server that it performed the certificate verification.
+certificate authentication. That is due to TLS protocol limitation.
 _EOT_;
 };