From 7694a69d169139475eec063e340d1a17ea4cc6b5 Mon Sep 17 00:00:00 2001 From: Martin Weindel Date: Tue, 11 Jun 2019 17:28:01 +0200 Subject: [PATCH] Improved description of flag peer-skip-client-verify --- etcdmain/config.go | 2 +- pkg/transport/listener_test.go | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/etcdmain/config.go b/etcdmain/config.go index c8b54ff6602b..9260588c481d 100644 --- a/etcdmain/config.go +++ b/etcdmain/config.go @@ -210,7 +210,7 @@ func newConfig() *config { fs.StringVar(&cfg.ec.PeerTLSInfo.CRLFile, "peer-crl-file", "", "Path to the peer certificate revocation list file.") fs.StringVar(&cfg.ec.PeerTLSInfo.AllowedCN, "peer-cert-allowed-cn", "", "Allowed CN for inter peer authentication.") fs.Var(flags.NewStringsValue(""), "cipher-suites", "Comma-separated list of supported TLS cipher suites between client/server and peers (empty will be auto-populated by Go).") - fs.BoolVar(&cfg.ec.PeerTLSInfo.SkipClientVerify, "peer-skip-client-verify", false, "Skip client IP verification for peer connections.") + fs.BoolVar(&cfg.ec.PeerTLSInfo.SkipClientVerify, "peer-skip-client-verify", false, "Skip verification of SAN field in client certificate for peer connections.") fs.Var( flags.NewUniqueURLsWithExceptions("*", "*"), diff --git a/pkg/transport/listener_test.go b/pkg/transport/listener_test.go index 32383c94dfbb..942c254a5d4c 100644 --- a/pkg/transport/listener_test.go +++ b/pkg/transport/listener_test.go @@ -78,7 +78,7 @@ func testNewListenerTLSInfoAccept(t *testing.T, tlsInfo TLSInfo) { } defer conn.Close() if _, ok := conn.(*tls.Conn); !ok { - t.Errorf("failed to accept *tls.Conn") + t.Error("failed to accept *tls.Conn") } }