Improve the message shown to the admin when generating SSL certs.

Self-signed SSL certificates are intended for testing purposes. A
production server should be using a CA-signed certificate instead.

1 files changed, 9 insertions, 1 deletions

diff --git a/configure b/configure
index 04981f6fd..db0464d19 100755
--- a/configure
+++ b/configure
@@ -303,7 +303,15 @@ if (prompt_bool $interactive, $question, 0) {
 }
 
 # Generate SSL certificates.
-if (<src/modules/m_ssl_*.cpp> && prompt_bool $interactive, 'Would you like to generate SSL certificates now?', $interactive) {
+$question = <<EOQ;
+Would you like to generate a self-signed SSL certificate now? This certificate
+can be used for testing but <|BOLD should not|> be used on a production network.
+
+Note: you can get a <|BOLD free|> CA-signed certificate from Let's Encrypt. See
+https://letsencrypt.org/getting-started/ for more details.
+EOQ
+
+if (<src/modules/m_ssl_*.cpp> && prompt_bool $interactive, $question, $interactive) {
 	system './tools/genssl', 'auto';
 }