@@ -35,7 +35,7 @@ var (

 	flSocketGroup = flag.String([]string{"G", "-group"}, "docker", "Group to assign the unix socket specified by -H when running in daemon mode\nuse '' (the empty string) to disable setting of a group")

 	flLogLevel    = flag.String([]string{"l", "-log-level"}, "info", "Set the logging level")

 	flEnableCors  = flag.Bool([]string{"#api-enable-cors", "-api-enable-cors"}, false, "Enable CORS headers in the remote API")

-	flTls         = flag.Bool([]string{"-tls"}, false, "Use TLS; implied by tls-verify flags")

+	flTls         = flag.Bool([]string{"-tls"}, false, "Use TLS; implied by --tlsverify=true")

 	flTlsVerify   = flag.Bool([]string{"-tlsverify"}, dockerTlsVerify, "Use TLS and verify the remote (daemon: verify client, client: verify daemon)")

 	// these are initialized in init() below since their default values depend on dockerCertPath which isn't fully initialized until init() runs

@@ -84,7 +84,7 @@ expect an integer, and they can only be specified once.

       -s, --storage-driver=""                    Force the Docker runtime to use a specific storage driver

       --selinux-enabled=false                    Enable selinux support. SELinux does not presently support the BTRFS storage driver

       --storage-opt=[]                           Set storage driver options

-      --tls=false                                Use TLS; implied by tls-verify flags

+      --tls=false                                Use TLS; implied by --tlsverify=true

       --tlscacert="/home/sven/.docker/ca.pem"    Trust only remotes providing a certificate signed by the CA given here

       --tlscert="/home/sven/.docker/cert.pem"    Path to TLS certificate file

       --tlskey="/home/sven/.docker/key.pem"      Path to TLS key file