doc update

NEWS

@@ -4,6 +4,9 @@
   by sskaje).
 - fixed an infinite loop when asking for group if the default group
   is selected.
+- Added the unix-conn-file configuration option. That allows obtaining
+  plaintext HTTP sessions through a unix domain socket. That is useful
+  when combined with a forwarder HTTPS server like nginx, nxweb or haproxy.
 
 
 * Version 0.8.4 (released 2014-08-27)

src/ocserv-args.def

@@ -124,8 +124,10 @@ max-same-clients = 2
 tcp-port = 3333
 udp-port = 3333
 
-# Accept connections using a socket file. The connections are
-# forwarded without SSL/TLS.
+# Accept connections using a socket file. It accepts HTTP
+# connections (i.e., without SSL/TLS), and uses it as
+# the primary channel. That option cannot be combined with
+# certificate authentication.
 #unix-conn-file = /var/run/ocserv-conn.socket
 
 # Keepalive in seconds