mount_nfs(8): add a description for the new "tlscertname" option

commit 665b1365fe8e added a new NFS mount option that is used to set a
non-default X.509 certificate, that can be used for nfs-over-tls NFS
mounts.
This patch adds a description for it to the man page.

Reviewed by:		0mp
Differential Revision:	https://reviews.freebsd.org/D27733

1 files changed, 31 insertions, 1 deletions

diff --git a/sbin/mount_nfs/mount_nfs.8 b/sbin/mount_nfs/mount_nfs.8
index 44490d6945fe..b2c561bc5cc8 100644
--- a/sbin/mount_nfs/mount_nfs.8
+++ b/sbin/mount_nfs/mount_nfs.8
@@ -28,7 +28,7 @@
 .\"	@(#)mount_nfs.8	8.3 (Berkeley) 3/29/95
 .\" $FreeBSD$
 .\"
-.Dd November 30, 2020
+.Dd December 21, 2020
 .Dt MOUNT_NFS 8
 .Os
 .Sh NAME
@@ -418,6 +418,36 @@ per RFC NNNN.
 TLS is only supported for TCP connections and the
 .Xr rpc.tlsclntd 8
 daemon must be running for an NFS over TCP connection to use TLS.
+.It Cm tlscertname Ns = Ns Aq Ar name
+This option specifies the name of an alternate certificate to be
+presented to the NFS server during TLS handshake.
+The default certificate file names are
+.Dq cert.pem
+and
+.Dq certkey.pem .
+When this option is specified,
+.Ar name
+replaces
+.Dq cert
+in the above file names.
+For example, if the value of
+.Ar name
+is specified as
+.Dq other
+the certificate file names to be used will be
+.Dq other.pem
+and
+.Dq otherkey.pem .
+These files are stored in
+.Pa /etc/rpc.tlsclntd
+by default.
+This option is only meaningful when used with the
+.Cm tls
+option and the
+.Xr rpc.tlsclntd 8
+is running with the
+.Fl m
+command line flag set.
 .It Cm udp
 Use UDP transport.
 .It Cm vers Ns = Ns Aq Ar vers_number