From 27e92622b5655c3ecf3182bc511adfb8a07b8722 Mon Sep 17 00:00:00 2001
From: Peter Powell <petpow@saberuk.com>
Date: Thu, 1 Mar 2018 19:43:36 +0000
Subject: Improve the message shown to the admin when generating SSL certs.

Self-signed SSL certificates are intended for testing purposes. A
production server should be using a CA-signed certificate instead.
---
 configure | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

(limited to 'configure')

diff --git a/configure b/configure
index 04981f6fd..db0464d19 100755
--- a/configure
+++ b/configure
@@ -303,7 +303,15 @@ if (prompt_bool $interactive, $question, 0) {
 }
 
 # Generate SSL certificates.
-if (<src/modules/m_ssl_*.cpp> && prompt_bool $interactive, 'Would you like to generate SSL certificates now?', $interactive) {
+$question = <<EOQ;
+Would you like to generate a self-signed SSL certificate now? This certificate
+can be used for testing but <|BOLD should not|> be used on a production network.
+
+Note: you can get a <|BOLD free|> CA-signed certificate from Let's Encrypt. See
+https://letsencrypt.org/getting-started/ for more details.
+EOQ
+
+if (<src/modules/m_ssl_*.cpp> && prompt_bool $interactive, $question, $interactive) {
 	system './tools/genssl', 'auto';
 }
 
-- 
cgit v1.2.3