From e056eec67d87a1f13e74b44fe74dedc4411f8a55 Mon Sep 17 00:00:00 2001 From: Alex Dadgar Date: Wed, 30 May 2018 10:23:41 -0700 Subject: [PATCH] Fix docs for defaults --- .../source/docs/agent/configuration/tls.html.md | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/website/source/docs/agent/configuration/tls.html.md b/website/source/docs/agent/configuration/tls.html.md index 07deb14f3..a5f049bea 100644 --- a/website/source/docs/agent/configuration/tls.html.md +++ b/website/source/docs/agent/configuration/tls.html.md @@ -58,17 +58,18 @@ the [Agent's Gossip and RPC Encryption](/docs/agent/encryption.html). cluster is being upgraded to TLS, and removed after the migration is complete. This allows the agent to accept both TLS and plaintext traffic. -- `tls_cipher_suites` - Specifies the TLS cipher suites that will be used by - the agent. Known insecure ciphers are disabled (3DES and RC4). By default, - an agent is configured to use TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305, +- `tls_cipher_suites` `(array: [])` - Specifies the TLS cipher suites + that will be used by the agent. Known insecure ciphers are disabled (3DES and + RC4). By default, an agent is configured to use + TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, and TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384. -- `tls_min_version` - Specifies the minimum supported version of TLS. Accepted - values are "tls10", "tls11", "tls12". Defaults to TLS 1.2. +- `tls_min_version` `(string: "tls12")`- Specifies the minimum supported version + of TLS. Accepted values are "tls10", "tls11", "tls12". -- `tls_prefer_server_cipher_suites` - Specifies whether TLS connections should - prefer the server's ciphersuites over the client's. Defaults to false. +- `tls_prefer_server_cipher_suites` `(bool: false)` - Specifies whether + TLS connections should prefer the server's ciphersuites over the client's. - `verify_https_client` `(bool: false)` - Specifies agents should require client certificates for all incoming HTTPS requests. The client certificates