Skip to content

Commit 7065ece

Browse files
authored
clientAuth flag in SslConfig (#47)
1 parent 984ce90 commit 7065ece

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

docs/HowTo/Configure/TLS.md

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,8 @@ If the value is set to `"OFF"`, the rest of the SSL configuration will not be co
4141
"knownClientsFile": "[TLS known clients file for the server. This contains the fingerprints of public keys of other nodes that are allowed to connect to this one.]",
4242
"knownServersFile": "[TLS known servers file for the client. This contains the fingerprints of public keys of other nodes that this node has encountered.]",
4343
"generateKeyStoreIfNotExisted": "[boolean]",
44-
"environmentVariablePrefix": "[Prefix to uniquely identify environment variables for this particular server ssl configuration]"
44+
"environmentVariablePrefix": "[Prefix to uniquely identify environment variables for this particular server ssl configuration]",
45+
"clientAuth" : "[Configure if SSL needs client authentication - boolean - default is true]"
4546
}
4647
}
4748
```
@@ -59,6 +60,9 @@ These can be defined in multiple ways:
5960
!!! important
6061
`.jks` files take precedence over `.pem` files if both are provided for client-side or server-side.
6162

63+
!!! tip
64+
To enable one-way SSL, set `clientAuth` flag to `false`.
65+
6266
## Keystores
6367

6468
### Passwords

0 commit comments

Comments
 (0)