summaryrefslogtreecommitdiff
path: root/doc
diff options
context:
space:
mode:
Diffstat (limited to 'doc')
-rw-r--r--doc/source/configuration.rst13
1 files changed, 9 insertions, 4 deletions
diff --git a/doc/source/configuration.rst b/doc/source/configuration.rst
index d9b3d6e9..51f1176d 100644
--- a/doc/source/configuration.rst
+++ b/doc/source/configuration.rst
@@ -62,11 +62,16 @@ and certificate validation.
**Default value:** ``[empty]``
- The SHA-2 fingerprint of the SSL certificate as a hexadecimal string,
- you should not touch it, except if know what you are doing.
+ The SHA-2 fingerprint of the SubjectPublicKeyInfo of the SSL
+ certificate as a hexadecimal string, you should not touch it,
+ except if know what you are doing.
- .. note:: the fingerprint was previously stored in SHA-1, and has been
- silently upgraded to SHA-2 if the SHA-1 still matched.
+ .. note:: the fingerprint was previously a fingerprint of the whole
+ certificate, while it is now only of the SubjectPublicKeyInfo,
+ which persists across LetsEncrypt renewals, and therefore
+ reduces the noise generated by the alert dialog.
+
+ .. versionchanged:: 0.12
ciphers