From: Fabian Keil <fk@fabiankeil.de>
Date: Fri, 21 Feb 2020 14:44:35 +0000 (+0100)
Subject: config: Improve the description of the ca-cert-file directive
X-Git-Tag: v_3_0_29~513
X-Git-Url: http://www.privoxy.org/gitweb/?a=commitdiff_plain;h=ebbac8cf3d2fab2ac88871ab7c442a20c2e9e1f1;p=privoxy.git

config: Improve the description of the ca-cert-file directive
---

diff --git a/doc/source/p-config.sgml b/doc/source/p-config.sgml
index 358e591a..30f5701b 100644
--- a/doc/source/p-config.sgml
+++ b/doc/source/p-config.sgml
@@ -4007,7 +4007,18 @@ forward-socks4, forward-socks4a, forward-socks5 and forward-socks5t</title>
     in ".crt" format.
    </para>
    <para>
-    It can be generated with: openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.crt -days 3650
+    The file is used by &my-app; to generate website certificates
+    when https filtering is enabled with the
+    <literal><ulink url="actions-file.html#ENABLE-HTTP-FILTERING">enable-https-filtering</ulink></literal>
+    action.
+   </para>
+   <para>
+    &my-app; clients should import the certificate so that they
+    can validate the generated certificates.
+   </para>
+   <para>
+    The file can be generated with:
+    openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.crt -days 3650
    </para>
   </listitem>
  </varlistentry>