Skip to content

Commit

Permalink
docs(mtls) use number for verify depth (#913)
Browse files Browse the repository at this point in the history
Use an arbitrary number (3) for the verify depth. This is fine for the
vast majority of certificate chains. The default (1) is a bit low, and
causes issues with multiple intermediates. The current value, "on", is
definitely wrong, as this setting only accepts a number.
  • Loading branch information
Travis Raines authored Oct 22, 2020
1 parent dfa37c0 commit da53cb4
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion docs/guides/upstream-mtls.md
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ environment variables on Kong's container in your deployment:

```
KONG_NGINX_PROXY_PROXY_SSL_VERIFY="on"
KONG_NGINX_PROXY_PROXY_SSL_VERIFY_DEPTH="on"
KONG_NGINX_PROXY_PROXY_SSL_VERIFY_DEPTH="3"
KONG_NGINX_PROXY_PROXY_SSL_TRUSTED_CERTIFICATE="/path/to/ca_certs.pem"
```

Expand Down

0 comments on commit da53cb4

Please sign in to comment.