Extend handling of cert_fingerprint

Add ability to specify multiple fingerprints.

Signed-off-by: Eygene Ryabinkin <rea@codelabs.ru>
This commit is contained in:
Eygene Ryabinkin
2014-05-07 01:22:29 +04:00
parent 1690e5f74e
commit d2ec2a4e9e
4 changed files with 32 additions and 9 deletions

View File

@ -395,8 +395,13 @@ ssl = yes
# has not changed on each connect and refuse to connect otherwise.
# You can also configure this in addition to CA certificate validation
# above and it will check both ways.
#
# Multiple fingerprints can be specified, separated by commas.
#
# Fingerprints must be in hexadecimal form without leading '0x':
# 40 hex digits like bbfe29cf97acb204591edbafe0aa8c8f914287c9.
#cert_fingerprint = <SHA1_of_server_certificate_here>
#cert_fingerprint = <SHA1_of_server_certificate_here>[, <another_SHA1>]
# SSL version (optional)
# It is best to leave this unset, in which case the correct version will be