Skip to content

Commit

Permalink
doc: improve redis documentation about insecure-skip-verify (#4106)
Browse files Browse the repository at this point in the history
close #4092
  • Loading branch information
zhijian-pro authored Oct 18, 2023
1 parent f9f5b87 commit 6716892
Show file tree
Hide file tree
Showing 2 changed files with 8 additions and 6 deletions.
7 changes: 4 additions & 3 deletions docs/en/reference/how_to_set_up_metadata_engine.md
Original file line number Diff line number Diff line change
Expand Up @@ -125,9 +125,10 @@ juicefs format --storage s3 \

In the code mentioned above, we use the `rediss://` protocol header to enable mTLS functionality, and then use the following options to specify the path of the client certificate:

- `tls-cert-file`: The path of the client certificate.
- `tls-key-file`: The path of the private key.
- `tls-ca-cert-file`: The path of the CA certificate. It is optional. If it is not specified, the system CA certificate will be used.
- `tls-cert-file=<path>`: The path of the client certificate.
- `tls-key-file=<path>`: The path of the private key.
- `tls-ca-cert-file=<path>`: The path of the CA certificate. It is optional. If it is not specified, the system CA certificate will be used.
- `insecure-skip-verify=true` It can skip verifying the server certificate.

When specifying options in a URL, start with the `?` symbol and use the `&` symbol to separate multiple options, for example: `?tls-cert-file=client.crt&tls-key-file=client.key`.

Expand Down
7 changes: 4 additions & 3 deletions docs/zh_cn/reference/how_to_set_up_metadata_engine.md
Original file line number Diff line number Diff line change
Expand Up @@ -125,9 +125,10 @@ juicefs format --storage s3 \

上面的示例代码使用 `rediss://` 协议头来开启 mTLS 功能,然后使用以下选项来指定客户端证书的路径:

- `tls-cert-file` 指定客户端证书的路径
- `tls-key-file` 指定客户端密钥的路径
- `tls-ca-cert-file` 指定签发客户端证书的 CA 证书路径,它是可选的,如果不指定,客户端会使用系统默认的 CA 证书进行验证。
- `tls-cert-file=<path>` 指定客户端证书的路径
- `tls-key-file=<path>` 指定客户端密钥的路径
- `tls-ca-cert-file=<path>` 指定签发客户端证书的 CA 证书路径,它是可选的,如果不指定,客户端会使用系统默认的 CA 证书进行验证。
- `insecure-skip-verify=true` 可以用来跳过对服务端证书的验证

在 URL 指定选项时,以 `?` 符号开头,使用 `&` 符号来分隔多个选项,例如:`?tls-cert-file=client.crt&tls-key-file=client.key`

Expand Down

0 comments on commit 6716892

Please sign in to comment.