|
1 |
| - |
2 | 1 | ==== {component} TLS/SSL Settings
|
3 | 2 | You can configure the following TLS/SSL settings. If the settings are not configured,
|
4 | 3 | the {ref}/security-settings.html#ssl-tls-settings[Default TLS/SSL Settings]
|
@@ -39,7 +38,13 @@ endif::verifies[]
|
39 | 38 | Supported cipher suites can be found in Oracle's http://docs.oracle.com/javase/8/docs/technotes/guides/security/SunProviders.html[
|
40 | 39 | Java Cryptography Architecture documentation]. Defaults to ``.
|
41 | 40 |
|
| 41 | +ifdef::asciidoctor[] |
| 42 | +[#{ssl-context}-tls-ssl-key-trusted-certificate-settings] |
42 | 43 | ===== {component} TLS/SSL Key and Trusted Certificate Settings
|
| 44 | +endif::[] |
| 45 | +ifndef::asciidoctor[] |
| 46 | +===== anchor:{ssl-context}-tls-ssl-key-trusted-certificate-settings[] {component} TLS/SSL Key and Trusted Certificate Settings |
| 47 | +endif::[] |
43 | 48 |
|
44 | 49 | The following settings are used to specify a private key, certificate, and the
|
45 | 50 | trusted certificates that should be used when communicating over an SSL/TLS connection.
|
@@ -105,7 +110,13 @@ Password to the truststore.
|
105 | 110 | +{ssl-prefix}.ssl.truststore.secure_password+ (<<secure-settings,Secure>>)::
|
106 | 111 | Password to the truststore.
|
107 | 112 |
|
| 113 | +ifdef::asciidoctor[] |
| 114 | +[#{ssl-context}-pkcs12-files] |
108 | 115 | ===== PKCS#12 Files
|
| 116 | +endif::[] |
| 117 | +ifndef::asciidoctor[] |
| 118 | +===== anchor:{ssl-context}-pkcs12-files[] PKCS#12 Files |
| 119 | +endif::[] |
109 | 120 |
|
110 | 121 | {es} can be configured to use PKCS#12 container files (`.p12` or `.pfx` files)
|
111 | 122 | that contain the private key, certificate and certificates that should be trusted.
|
@@ -143,7 +154,13 @@ Password to the PKCS#12 file.
|
143 | 154 | +{ssl-prefix}.ssl.truststore.secure_password+ (<<secure-settings,Secure>>)::
|
144 | 155 | Password to the PKCS#12 file.
|
145 | 156 |
|
| 157 | +ifdef::asciidoctor[] |
| 158 | +[#{ssl-context}-pkcs11-tokens] |
146 | 159 | ===== PKCS#11 Tokens
|
| 160 | +endif::[] |
| 161 | +ifndef::asciidoctor[] |
| 162 | +===== anchor:{ssl-context}-pkcs11-tokens[] PKCS#11 Tokens |
| 163 | +endif::[] |
147 | 164 |
|
148 | 165 | {es} can be configured to use a PKCS#11 token that contains the private key,
|
149 | 166 | certificate and certificates that should be trusted.
|
|
0 commit comments