Document that SHA256 fingerprints already work

Fix #321
This commit is contained in:
Markus Unterwaditzer 2016-01-15 21:35:34 +01:00
parent a87ab770f8
commit 7583be5826

View file

@ -9,7 +9,7 @@ All SSL configuration is done per-storage.
Pinning by fingerprint
----------------------
To pin the certificate by SHA1- or MD5-fingerprint::
To pin the certificate by fingerprint::
[storage foo]
type = caldav
@ -17,6 +17,9 @@ To pin the certificate by SHA1- or MD5-fingerprint::
verify_fingerprint = "94:FD:7A:CB:50:75:A4:69:82:0A:F8:23:DF:07:FC:69:3E:CD:90:CA"
#verify = false # Optional: Disable CA validation, useful for self-signed certs
SHA1-, SHA256- or MD5-Fingerprints can be used. They're detected by their
length.
You can use the following command for obtaining a SHA-1 fingerprint::
echo -n | openssl s_client -connect unterwaditzer.net:443 | openssl x509 -noout -fingerprint