From c552f11bfe5782cbb5e1c45bac47516bb5643cc9 Mon Sep 17 00:00:00 2001 From: Andy Liu Date: Wed, 9 Oct 2019 13:11:56 +0800 Subject: [PATCH] helper document update. --- Documentation/op-guide/configuration.md | 5 +++++ etcdmain/help.go | 2 ++ 2 files changed, 7 insertions(+) diff --git a/Documentation/op-guide/configuration.md b/Documentation/op-guide/configuration.md index 6d4761c95..082015951 100644 --- a/Documentation/op-guide/configuration.md +++ b/Documentation/op-guide/configuration.md @@ -253,6 +253,11 @@ The security flags help to [build a secure etcd cluster][security]. + default: false + env variable: ETCD_PEER_AUTO_TLS +### --experimental-peer-skip-client-san-verification ++ Skip verification of SAN field in client certificate for peer connections. ++ default: false ++ env variable: ETCD_EXPERIMENTAL_PEER_SKIP_CLIENT_SAN_VERIFICATION + ## Logging flags ### --debug diff --git a/etcdmain/help.go b/etcdmain/help.go index b40231112..f8c88b362 100644 --- a/etcdmain/help.go +++ b/etcdmain/help.go @@ -152,6 +152,8 @@ security flags: peer TLS using self-generated certificates if --peer-key-file and --peer-cert-file are not provided. --cipher-suites '' comma-separated list of supported TLS cipher suites between client/server and peers (empty will be auto-populated by Go). + --experimental-peer-skip-client-san-verification 'false' + Skip verification of SAN field in client certificate for peer connections. logging flags