TheArchive/headscale
1
0
Fork 0
mirror of https://github.com/juanfont/headscale.git synced 2024-11-23 18:15:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

updating changelog and docs

Browse Source
This commit is contained in:
Justin Angel 2022-02-21 10:20:11 -05:00
parent daa75da277
commit b5a59d4e7a
2 changed files with 8 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
CHANGELOG.md
View File

@ -2,6 +2,8 @@
**TBD (TBD):**
- Add support for configurable mTLS [docs](docs/tls.md#configuring-mutual-tls-authentication-mtls)
**0.13.0 (2022-02-18):**
**Features**:

15
docs/tls.md
View File

@ -32,16 +32,13 @@ tls_key_path: ""
### Configuring Mutual TLS Authentication (mTLS)
mTLS is a method by which an HTTPS server authenticates clients, e.g. Tailscale,
using TLS certificates. The capability can be configured by applying one of
the following values to the `tls_client_auth_mode` setting in the configuration
file.
mTLS is a method by which an HTTPS server authenticates clients, e.g. Tailscale, using TLS certificates. This can be configured by applying one of the following values to the `tls_client_auth_mode` setting in the configuration file.
| Value | Behavior |
| ---------- | ---------------------------------------------------------- |
| `disabled` | Disable mTLS (default). |
| `relaxed` | A client certificate is required, but it is not verified. |
| `enforced` | Requires clients to supply a certificate that is verified. |
| Value | Behavior |
| ------------------- | -----------------------------------------------------------|
| `disabled` | Disable mTLS. |
| `relaxed` (default) | A client certificate is required, but it is not verified. |
| `enforced` | Requires clients to supply a certificate that is verified. |
```yaml
tls_client_auth_mode: ""