mirror of https://github.com/hashicorp/consul
Tighten up TLS setting language a bit.
parent
26bbda57d0
commit
0cd1739ebc
|
@ -67,8 +67,8 @@ to verify the authenticity of the servers or verify the authenticity of clients.
|
|||
controlled by the `verify_incoming` and `verify_outgoing` [options](/docs/agent/options.html), respectively.
|
||||
|
||||
If `verify_outgoing` is set, agents verify the authenticity of Consul for outgoing
|
||||
connections. Server nodes must present a certificate signed by the `ca_file` setting that must
|
||||
be present all agents. All server nodes must have an appropriate key pair set using `cert_file` and `key_file`.
|
||||
connections. Server nodes must present a certificate signed by the `ca_file` setting that in turn must
|
||||
be present on all agents. All server nodes must have an appropriate key pair set using `cert_file` and `key_file`.
|
||||
|
||||
If `verify_incoming` is set, then the servers verify the authenticity of all incoming
|
||||
connections. Servers will also disallow any non-TLS connections. All clients must have
|
||||
|
|
Loading…
Reference in New Issue