github
/
consul
mirror of https://github.com/hashicorp/consul
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Tighten up TLS setting language a bit.

pull/664/head
Ryan Breen 2015-01-31 18:59:11 -05:00
parent 26bbda57d0
commit 0cd1739ebc
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
website/source/docs/agent/encryption.html.markdown
View File

@ -67,8 +67,8 @@ to verify the authenticity of the servers or verify the authenticity of clients.
controlled by the `verify_incoming` and `verify_outgoing` [options](/docs/agent/options.html), respectively. controlled by the `verify_incoming` and `verify_outgoing` [options](/docs/agent/options.html), respectively.
If `verify_outgoing` is set, agents verify the authenticity of Consul for outgoing If `verify_outgoing` is set, agents verify the authenticity of Consul for outgoing
connections. Server nodes must present a certificate signed by the `ca_file` setting that must connections. Server nodes must present a certificate signed by the `ca_file` setting that in turn must
be present all agents. All server nodes must have an appropriate key pair set using `cert_file` and `key_file`. be present on all agents. All server nodes must have an appropriate key pair set using `cert_file` and `key_file`.
If `verify_incoming` is set, then the servers verify the authenticity of all incoming If `verify_incoming` is set, then the servers verify the authenticity of all incoming
connections. Servers will also disallow any non-TLS connections. All clients must have connections. Servers will also disallow any non-TLS connections. All clients must have