certs: minor stylistic improvements

Signed-off-by: Stoiko Ivanov <s.ivanov@proxmox.com>
This commit is contained in:
Stoiko Ivanov 2021-03-18 14:26:29 +01:00 committed by Thomas Lamprecht
parent 811c69ee02
commit d745718506

View File

@ -51,9 +51,9 @@ Trusted certificates via Let's Encrypt (ACME)
{PMG} includes an implementation of the **A**utomatic **C**ertificate {PMG} includes an implementation of the **A**utomatic **C**ertificate
**M**anagement **E**nvironment **ACME** protocol, allowing {pmg} admins to **M**anagement **E**nvironment **ACME** protocol, allowing {pmg} admins to
use an ACME provider like Let's Encrypt for easy setup of trusted TLS use an ACME provider like Let's Encrypt for easy setup of TLS certificates
certificates which are accepted and trusted from modern operating systems which are accepted and trusted from modern operating systems and web browsers
and web browsers out of the box. out of the box.
Currently, the two ACME endpoints implemented are the Currently, the two ACME endpoints implemented are the
https://letsencrypt.org[Let's Encrypt (LE)] production and its staging https://letsencrypt.org[Let's Encrypt (LE)] production and its staging
@ -93,10 +93,9 @@ the basis building block for automatic certificate management.
The ACME protocol specifies different types of challenges, for example the The ACME protocol specifies different types of challenges, for example the
`http-01` where a web server provides a file with a certain content to prove `http-01` where a web server provides a file with a certain content to prove
that it controls a domain. Sometimes this isn't possible, either because of that it controls a domain. Sometimes this isn't possible, either because of
technical limitations or if the address of a domain points too is not reachable technical limitations or if the address of a record is not reachable from the
from the public internet. The `dns-01` challenge can be used in these cases. public internet. The `dns-01` challenge can be used in these cases. The
The challenge is fulfilled by creating a certain DNS record in the domain's challenge is fulfilled by creating a certain DNS record in the domain's zone.
zone.
[thumbnail="pmg-gui-acme-create-challenge-plugin.png"] [thumbnail="pmg-gui-acme-create-challenge-plugin.png"]