docs for configurable server name and domain

Signed-off-by: Evan Hazlett <ejhazlett@gmail.com>

key_manager.go

@@ -93,7 +93,7 @@ func (c *ClientKeyManager) RegisterTLSConfig(tlsConfig *tls.Config) error {
 }
 
 // NewIdentityAuthTLSConfig creates a tls.Config for the server to use for
-// libtrust identity authentication
+// libtrust identity authentication for the domain specified
 func NewIdentityAuthTLSConfig(trustKey PrivateKey, clients *ClientKeyManager, addr string, domain string) (*tls.Config, error) {
 	tlsConfig := newTLSConfig()
 
@@ -107,7 +107,7 @@ func NewIdentityAuthTLSConfig(trustKey PrivateKey, clients *ClientKeyManager, ad
 	if err != nil {
 		return nil, err
 	}
-	// add default docker domain for docker clients to look for
+	// add domain that it expects clients to use
 	domains = append(domains, domain)
 	x509Cert, err := GenerateSelfSignedServerCert(trustKey, domains, ips)
 	if err != nil {

util.go

@@ -48,9 +48,10 @@ func LoadOrCreateTrustKey(trustKeyPath string) (PrivateKey, error) {
 }
 
 // NewIdentityAuthTLSClientConfig returns a tls.Config configured to use identity
-// based authentication from the specified dockerUrl and the rootConfigPath.
+// based authentication from the specified dockerUrl, the rootConfigPath and
+// the server name to which it is connecting.
 // If trustUnknownHosts is true it will automatically add the host to the
-// known-hosts.json in rootConfigPath
+// known-hosts.json in rootConfigPath.
 func NewIdentityAuthTLSClientConfig(dockerUrl string, trustUnknownHosts bool, rootConfigPath string, serverName string) (*tls.Config, error) {
 	tlsConfig := newTLSConfig()