example.ini: give more details on handling certificate chain

7e5752b6 · Adrien Dorsaz · d949d385 · 7e5752b6
Commit 7e5752b6 authored Oct 31, 2018 by Adrien Dorsaz
Hide whitespace changes
Inline Side-by-side

Showing with 5 additions and 2 deletions

example.ini example.ini +5 -2

No files found.
--- a/example.ini
+++ b/example.ini
@@ -28,8 +28,11 @@ Language = en
 # Optional: ask to request different format of certificate file.
 # By default, acme-dns-tiny request a certificate chain with format
 # "application/pem-certificate-chain"
-# If the ACME server used support different format, you can specify it here
-# (e.g. application/pkix-cert, applicaiton/pkcs7-mime
+# With this format, you can assume the first certificate block is the one for
+# your domains, as the ACME RFC force the format to have this certificate first.
+#
+# If the ACME server support different format, you can specify it here
+# (e.g. application/pkix-cert, applicaiton/pkcs7-mime)
 # Note that, if the format selected doesn't provide a full chain, you should
 # read logs to find the related certificates (see link header with attribute rel=up)
 CertificateFormat = application/pem-certificate-chain