From 1328aa3e47976517d4ca47a881240efa350735d1 Mon Sep 17 00:00:00 2001
From: Mariano Cano <mariano.cano@gmail.com>
Date: Mon, 26 Apr 2021 18:45:46 -0700
Subject: [PATCH] Fix review comments.

---
 ca/identity/identity.go | 2 +-
 ca/tls.go               | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/ca/identity/identity.go b/ca/identity/identity.go
index aad139dc..08a70c7f 100644
--- a/ca/identity/identity.go
+++ b/ca/identity/identity.go
@@ -186,7 +186,7 @@ func (i *Identity) Validate() error {
 		return fileExists(i.Key)
 	case TunnelTLS:
 		if i.Host == "" {
-			return errors.New("tunnel.crt cannot be empty")
+			return errors.New("tunnel.host cannot be empty")
 		}
 		if i.Certificate != "" {
 			if err := fileExists(i.Certificate); err != nil {
diff --git a/ca/tls.go b/ca/tls.go
index 22a9fff2..2d9b8f92 100644
--- a/ca/tls.go
+++ b/ca/tls.go
@@ -23,10 +23,10 @@ import (
 var mTLSDialContext func() func(ctx context.Context, network, address string) (net.Conn, error)
 
 func init() {
-	// STEP_TLS_TUNNEL is an environment that can be set to do an TLS over
-	// (m)TLS tunnel to step-ca using identity-like credentials. The value is a
-	// path to a json file with the tunnel host, certificate, key and root used
-	// to create the (m)TLS tunnel.
+	// STEP_TLS_TUNNEL is an environment variable that can be set to do an TLS
+	// over (m)TLS tunnel to step-ca using identity-like credentials. The value
+	// is a path to a json file with the tunnel host, certificate, key and root
+	// used to create the (m)TLS tunnel.
 	//
 	// The configuration should look like:
 	//  {