Improve the message shown to the admin when generating SSL certs.

Self-signed SSL certificates are intended for testing purposes. A
production server should be using a CA-signed certificate instead.

diff --git a/configure b/configure
index 04981f6fdcc186f3fef0397fd36526da3d0d252d..db0464d19733d8635c3fc563aa61062cdec727cd 100755 (executable)
--- a/configure
+++ b/configure
@@ -303,7 +303,15 @@ if (prompt_bool $interactive, $question, 0) {
 }
 
 # Generate SSL certificates.
-if (<src/modules/m_ssl_*.cpp> && prompt_bool $interactive, 'Would you like to generate SSL certificates now?', $interactive) {
+$question = <<EOQ;
+Would you like to generate a self-signed SSL certificate now? This certificate
+can be used for testing but <|BOLD should not|> be used on a production network.
+
+Note: you can get a <|BOLD free|> CA-signed certificate from Let's Encrypt. See
+https://letsencrypt.org/getting-started/ for more details.
+EOQ
+
+if (<src/modules/m_ssl_*.cpp> && prompt_bool $interactive, $question, $interactive) {
        system './tools/genssl', 'auto';
 }