From 7583be5826bccf4264e35171f7be2acad63314c2 Mon Sep 17 00:00:00 2001 From: Markus Unterwaditzer Date: Fri, 15 Jan 2016 21:35:34 +0100 Subject: [PATCH] Document that SHA256 fingerprints already work Fix #321 --- docs/ssl-tutorial.rst | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/docs/ssl-tutorial.rst b/docs/ssl-tutorial.rst index 00f5770..a4fc994 100644 --- a/docs/ssl-tutorial.rst +++ b/docs/ssl-tutorial.rst @@ -9,7 +9,7 @@ All SSL configuration is done per-storage. Pinning by fingerprint ---------------------- -To pin the certificate by SHA1- or MD5-fingerprint:: +To pin the certificate by fingerprint:: [storage foo] type = caldav @@ -17,6 +17,9 @@ To pin the certificate by SHA1- or MD5-fingerprint:: verify_fingerprint = "94:FD:7A:CB:50:75:A4:69:82:0A:F8:23:DF:07:FC:69:3E:CD:90:CA" #verify = false # Optional: Disable CA validation, useful for self-signed certs +SHA1-, SHA256- or MD5-Fingerprints can be used. They're detected by their +length. + You can use the following command for obtaining a SHA-1 fingerprint:: echo -n | openssl s_client -connect unterwaditzer.net:443 | openssl x509 -noout -fingerprint