reference.conf: Document fingerprint generation

[ci skip]
This commit is contained in:
Aaron Jones 2016-07-16 05:41:39 +00:00
parent e719e46d27
commit 419f0c6af7
No known key found for this signature in database
GPG key ID: 6E854C0FAAD4CEA4

View file

@ -1318,6 +1318,9 @@ general {
/* certfp_method: the method that should be used for computing certificate fingerprints. /* certfp_method: the method that should be used for computing certificate fingerprints.
* Acceptable options are sha1, sha256 and sha512. Networks running versions of charybdis * Acceptable options are sha1, sha256 and sha512. Networks running versions of charybdis
* prior to charybdis 3.5 MUST use sha1 for certfp_method. * prior to charybdis 3.5 MUST use sha1 for certfp_method.
*
* To generate a fingerprint from a certificate file, run the following:
* $ openssl x509 -outform DER < your.crt | sha1sum (or sha256sum, or sha512sum)
*/ */
certfp_method = sha1; certfp_method = sha1;
}; };