Final edits to encryption doc.

pull/664/head
Ryan Breen 10 years ago
parent b18b6491ff
commit 02c7ed0e94

@ -71,9 +71,8 @@ present on all agents, set via the agent's `ca_file` option. All server nodes mu
appropriate key pair set using `cert_file` and `key_file`.
If `verify_incoming` is set, the servers verify the authenticity of all incoming
connections. Servers will also disallow any non-TLS connections. All clients must have
a valid key pair set using `cert_file` and `key_file`. To force clients to use TLS,
`verify_outgoing` must also be set.
connections. All clients must have a valid key pair set using `cert_file` and `key_file`. Servers will
also disallow any non-TLS connections. To force clients to use TLS, `verify_outgoing` must also be set.
TLS is used to secure the RPC calls between agents, but gossip between nodes is done over UDP
and is secured using a symmetric key. See above for enabling gossip encryption.

Loading…
Cancel
Save