aboutsummaryrefslogtreecommitdiffstats
path: root/config/lacme-certs.conf
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2020-11-26 00:17:08 +0100
committerGuilhem Moulin <guilhem@fripost.org>2020-11-26 00:17:08 +0100
commitc3cce44cfc175b9ac641820c63354ade12fb05b5 (patch)
tree6cb1807941d7f2aa59527e6364e42d9482fda335 /config/lacme-certs.conf
parent0d1274eafa7119cafd51a67015bb658c8ec9b1a8 (diff)
parent51369e3955cdc5bf3f1ba0f6e2d7c4d73406c111 (diff)
Merge tag 'upstream/0.7' into debian
New release 0.7
Diffstat (limited to 'config/lacme-certs.conf')
-rw-r--r--config/lacme-certs.conf11
1 files changed, 5 insertions, 6 deletions
diff --git a/config/lacme-certs.conf b/config/lacme-certs.conf
index dd02f95..232c85b 100644
--- a/config/lacme-certs.conf
+++ b/config/lacme-certs.conf
@@ -20,8 +20,8 @@
#
#certificate = /etc/nginx/ssl/srv.pem
-# Where to store the issued certificate, concatenated with the content
-# of the file specified specified with the CAfile option (in PEM format).
+# Where to store the issued certificate along with its chain of trust
+# (in PEM format).
#
#certificate-chain = /etc/nginx/ssl/srv.chain.pem
@@ -30,11 +30,10 @@
#
#min-days = 21
-# Path to the issuer's certificate. This is used for certificate-chain
-# and to verify the validity of each issued certificate. Specifying an
-# empty value skip certificate validation.
+# Path to trusted issuer certificates, used for validating each issued
+# certificate. Specifying an empty value skips certificate validation.
#
-#CAfile = @@datadir@@/lacme/lets-encrypt-x3-cross-signed.pem
+#CAfile = @@datadir@@/lacme/ca-certificates.crt
# Subject field of the Certificate Signing Request. This option is
# required.