Merging tlscertfile and tlscafile to only one TLS certificate

Russ Allbery eagle at eyrie.org
Tue Oct 12 02:58:34 UTC 2021


Julien ÉLIE <julien at trigofacile.com> writes:

> Suggestion follows, with updated wording in documentation (also in 
> nnrpd.pod, which shares the same wording as in inn.conf.pod):

Looks good to me, with one minor nit:

> +More concretly, when using S<Let's Encrypt> certificates, Certbot's
> +files can be installed as follows:
> +
> +    tlscapath:      <pathetc>
> +    tlscafile:      <pathetc>/chain.pem
> +    tlscertfile:    <pathetc>/cert.pem
> +    tlskeyfile:     <pathetc>/privkey.pem
> +
> +or:
> +
> +    tlscapath:      <pathetc>
> +    tlscertfile:    <pathetc>/fullchain.pem
> +    tlskeyfile:     <pathetc>/privkey.pem

I would reverse the order of the examples so that the simpler one is
first, since I suspect that's what most people want.

-- 
Russ Allbery (eagle at eyrie.org)             <https://www.eyrie.org/~eagle/>

    Please send questions to the list rather than mailing me directly.
     <https://www.eyrie.org/~eagle/faqs/questions.html> explains why.


More information about the inn-workers mailing list