Explicitly mention that SPKI's hash is compared to

diff --git a/gocheese.go b/gocheese.go
index 63854169f549e0e301fd72a2af488b74e77196a7..ed7e55d4646d93ab7530388d7810c9185adff1a4 100644 (file)
--- a/gocheese.go
+++ b/gocheese.go
@@ -97,8 +97,8 @@ var (
        norefreshURLPath = flag.String("norefresh", "/norefresh/", "Non-refreshing URL path")
        refreshURLPath   = flag.String("refresh", "/simple/", "Auto-refreshing URL path")
        gpgUpdateURLPath = flag.String("gpgupdate", "/gpgupdate/", "GPG forceful refreshing URL path")
-       pypiURL          = flag.String("pypi", "https://pypi.org/simple/", "Upstream PyPI URL")
-       pypiCertHash     = flag.String("pypi-cert-hash", "", "Authenticate PyPI by its X.509 certificate's SHA256 hash")
+       pypiURL          = flag.String("pypi", "https://pypi.org/simple/", "Upstream (PyPI) URL")
+       pypiCertHash     = flag.String("pypi-cert-hash", "", "Authenticate upstream by its X.509 certificate's SPKI SHA256 hash")
        passwdPath       = flag.String("passwd", "passwd", "Path to file with authenticators")
        logTimestamped   = flag.Bool("log-timestamped", false, "Prepend timestmap to log messages")
        passwdCheck      = flag.Bool("passwd-check", false, "Test the -passwd file for syntax errors and exit")

diff --git a/gocheese.texi b/gocheese.texi
index 8f4aecdcbbb43d8a97f6eff45c2f45c12bb3ee0a..1e9682e832e94201ec01bdb6910a30db0bad0b1e 100644 (file)
--- a/gocheese.texi
+++ b/gocheese.texi
@@ -45,7 +45,7 @@ but nearly all the code was rewritten. It has huge differences:
 @item Integrity check of proxied packages: MD5, SHA256, SHA512, BLAKE2b-256
 @item SHA256 checksums for stored packages
 @item Verifying of SHA256 checksum for uploaded packages
-@item Ability to authenticate upstream PyPI with its X.509 certificate's hash
+@item Ability to authenticate upstream PyPI by its X.509 certificate's SPKI hash
 @item Storing of uploaded GPG signatures
 @item Secure Argon2i (or SHA256) stored passwords hashing
 @item No YAML configuration, just command-line arguments