|
|
@ -2261,9 +2261,11 @@ signed by the CA can be used to gain full access to Consul.
|
|
|
|
the hostname we declare.
|
|
|
|
the hostname we declare.
|
|
|
|
|
|
|
|
|
|
|
|
- `tls_min_version` Added in Consul 0.7.4, this specifies
|
|
|
|
- `tls_min_version` Added in Consul 0.7.4, this specifies
|
|
|
|
the minimum supported version of TLS. Accepted values are "tls10", "tls11", "tls12",
|
|
|
|
the minimum supported version of TLS. Accepted values as of Consul 1.11.0 are "TLSv1_0",
|
|
|
|
or "tls13". This defaults to "tls12". WARNING: TLS 1.1 and lower are generally
|
|
|
|
"TLSv1_1", "TLSv1_2", or "TLSv1_3". This defaults to "TLSv1_2". WARNING: TLS 1.1 and
|
|
|
|
considered less secure; avoid using these if possible.
|
|
|
|
lower are generally considered less secure; avoid using these if possible.
|
|
|
|
|
|
|
|
Deprecated values of "tls10", "tls11", "tls12" and "tls13" are currently still accepted
|
|
|
|
|
|
|
|
but will emit a warning during configuration and will be removed in a future release.
|
|
|
|
|
|
|
|
|
|
|
|
- `tls_cipher_suites` Added in Consul 0.8.2, this specifies the list of
|
|
|
|
- `tls_cipher_suites` Added in Consul 0.8.2, this specifies the list of
|
|
|
|
supported ciphersuites as a comma-separated-list. Applicable to TLS 1.2 and below only.
|
|
|
|
supported ciphersuites as a comma-separated-list. Applicable to TLS 1.2 and below only.
|
|
|
|