From 1cce6419bfbecad654aff8858184d16c2bf766cd Mon Sep 17 00:00:00 2001 From: Denys Fedoryshchenko Date: Sun, 23 Nov 2025 19:09:18 +0200 Subject: docs: Update accel-ppp.conf about certificate configuration This is follow-up for https://github.com/accel-ppp/accel-ppp/pull/238 Adding missing documentation update. Signed-off-by: Denys Fedoryshchenko --- accel-pppd/accel-ppp.conf.5 | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/accel-pppd/accel-ppp.conf.5 b/accel-pppd/accel-ppp.conf.5 index 01e7ac07..05ade262 100644 --- a/accel-pppd/accel-ppp.conf.5 +++ b/accel-pppd/accel-ppp.conf.5 @@ -842,11 +842,12 @@ is greater of zero then server ciphers should be preferred over client ciphers. Default is 0. .TP .BI "ssl-pemfile=" pemfile -Specifies a file with the chain of certificates in the PEM format for sstp server. -The certificates must be in PEM format and must be sorted starting with the -subject's certificate (actual server certificate), followed by intermediate CA -certificates if applicable, and ending at the highest level (root) CA. -Leaf (the first) certificate is also used to compute initial SHA1 and SHA256 +Specifies a PEM file with the server certificate. Files that contain only the +leaf certificate are still supported for backward compatibility. When the file +includes the full chain, certificates must be sorted starting with the subject's +certificate (actual server certificate), followed by intermediate CA +certificates if applicable, and ending at the highest level (root) CA. The leaf +certificate (first in the file) is used to compute the initial SHA1 and SHA256 certificate hash. .TP .BI "ssl-keyfile=" keyfile -- cgit v1.2.3