Merge pull request #351 from mozilla/sslversion_policies

[policy-templates.git] / README.md

diff --git a/README.md b/README.md
index 67193e52138e93d96707cb05fb9ad74873e44a78..ee137d0f166c622d459535a25651efd05b21932e 100644 (file)
--- a/README.md
+++ b/README.md
@@ -100,7 +100,14 @@ This policy can be used to install certificates or to read certificates from the
 
 The ImportEnterpriseRoots key will cause Firefox to import from the system certificate store.
 
-The Install key by default will search for certificates in the locations listed below. Starting in Firefox 65, you can specify a fully qualified path (see cert3.der and cert4.pem in example). If Firefox does not find something at your fully qualified path, it will search the default directories.
+The Install Certificates key by default will search for certificates in the locations listed below. 
+Starting in Firefox 65 you can specify a fully qualified path including UNC. (See cert3.der and cert4.pem, in example).
+
+**Be advised if you wish to load a certificate from a UNC path you must use double backslahes.**
+Example: \\SERVER\\CERTS\CERT5.PEM
+
+
+If Firefox does not find something at your fully qualified path, it will search the default directories.
 
 Certificates can be located in the following locations:
 - Windows
@@ -120,7 +127,7 @@ Certificates can be located in the following locations:
   "policies": {
     "Certificates": {
       "ImportEnterpriseRoots": true,
-      "Install": ["cert1.der", "cert2.pem", "%SYSTEMDRIVE%\Company\cert3.der", "/Library/Company/cert4.pem"]
+      "Install": ["cert1.der", "cert2.pem", "%SYSTEMDRIVE%\Company\cert3.der", "/Library/Company/cert4.pem", "\\server\\certs\\cert.pem"]
     }
   }
 }
@@ -389,6 +396,7 @@ For Uninstall and Locked, you specify extension IDs.
       "Uninstall": ["addon_id@mozilla.org"],
       "Locked":  ["addon_id@mozilla.org"]
     }
+  }
 }
 ```
 ### HardwareAcceleration
@@ -622,4 +630,23 @@ This policy allows you to add PKCS #11 Modules
     }
   }
 }
+### SSLVersionMin
+This policy allows you to set the minimum TLS version.
+```
+{
+  "policies": {
+    "SSSLVersionMin": ["tls1", "tls1.1", "tls1.2",. "tls1.3"]
+  }
+}
+
+```
+### SSLVersionMax
+This policy allows you to set the maximum TLS version.
+```
+{
+  "policies": {
+    "SSSLVersionMax": ["tls1", "tls1.1", "tls1.2",. "tls1.3"]
+  }
+}
+
 ```