Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Documentation: clarify the difference between --no-tlsverify and --no-tls #3486

Closed
stuclem opened this issue Dec 12, 2016 · 1 comment
Closed
Assignees
Labels
impact/doc/user Requires changes to official user documentation

Comments

@stuclem
Copy link
Contributor

stuclem commented Dec 12, 2016

Following a question from @mreferre:

We do currently state that --no-tlsverify only creates/uploads server certs, and that clients are unverified. However, the writeup of --no-tls states pretty much the same about the client side and doesn't say much about the absence of a server cert. We need to make it 100% clear that with --no-tls there is no server cert. In other words, with --no-tlsverify, any client can connect, but at least the connection between the client and server is a secure one. With --no-tls, any client can connect, and the connection itself is insecure.

@hickeng is this accurate?

@stuclem stuclem self-assigned this Dec 12, 2016
@stuclem stuclem added the impact/doc/user Requires changes to official user documentation label Dec 12, 2016
@stuclem stuclem added this to the Doc for 0.8 post-GA refresh milestone Dec 12, 2016
@stuclem stuclem removed this from the Doc for Sprint 2 milestone Mar 9, 2017
@stuclem
Copy link
Contributor Author

stuclem commented Mar 22, 2017

Covered by vmware/vic-product#70. Closing as a dup.

@stuclem stuclem closed this as completed Mar 22, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
impact/doc/user Requires changes to official user documentation
Projects
None yet
Development

No branches or pull requests

1 participant