diff --git a/docs/ssl-tutorial.rst b/docs/ssl-tutorial.rst index 00f5770..a4fc994 100644 --- a/docs/ssl-tutorial.rst +++ b/docs/ssl-tutorial.rst @@ -9,7 +9,7 @@ All SSL configuration is done per-storage. Pinning by fingerprint ---------------------- -To pin the certificate by SHA1- or MD5-fingerprint:: +To pin the certificate by fingerprint:: [storage foo] type = caldav @@ -17,6 +17,9 @@ To pin the certificate by SHA1- or MD5-fingerprint:: verify_fingerprint = "94:FD:7A:CB:50:75:A4:69:82:0A:F8:23:DF:07:FC:69:3E:CD:90:CA" #verify = false # Optional: Disable CA validation, useful for self-signed certs +SHA1-, SHA256- or MD5-Fingerprints can be used. They're detected by their +length. + You can use the following command for obtaining a SHA-1 fingerprint:: echo -n | openssl s_client -connect unterwaditzer.net:443 | openssl x509 -noout -fingerprint