Mirrors/juanfont.headscale
1
0
Fork 0
mirror of https://github.com/juanfont/headscale.git synced 2024-12-20 19:09:07 +01:00
Code Issues Projects Releases Wiki Activity

Sort lint

Browse Source
This commit is contained in:
Kristoffer Dalby 2022-02-24 11:10:40 +00:00
parent afb67b6e75
commit 8c33907655
2 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
cmd/headscale/cli/utils.go
View File

@ -94,7 +94,9 @@ func LoadConfig(path string) error {
errorText += "Fatal config error: server_url must start with https:// or http://\n" errorText += "Fatal config error: server_url must start with https:// or http://\n"
} }
_, authModeValid := headscale.LookupTLSClientAuthMode(viper.GetString("tls_client_auth_mode")) _, authModeValid := headscale.LookupTLSClientAuthMode(
viper.GetString("tls_client_auth_mode"),
)
if !authModeValid { if !authModeValid {
errorText += fmt.Sprintf( errorText += fmt.Sprintf(

2
docs/tls.md
View File

@ -35,7 +35,7 @@ tls_key_path: ""
mTLS is a method by which an HTTPS server authenticates clients, e.g. Tailscale, using TLS certificates. This can be configured by applying one of the following values to the `tls_client_auth_mode` setting in the configuration file. mTLS is a method by which an HTTPS server authenticates clients, e.g. Tailscale, using TLS certificates. This can be configured by applying one of the following values to the `tls_client_auth_mode` setting in the configuration file.
| Value | Behavior | | Value | Behavior |
| ------------------- | -----------------------------------------------------------| | ------------------- | ---------------------------------------------------------- |
| `disabled` | Disable mTLS. | | `disabled` | Disable mTLS. |
| `relaxed` (default) | A client certificate is required, but it is not verified. | | `relaxed` (default) | A client certificate is required, but it is not verified. |
| `enforced` | Requires clients to supply a certificate that is verified. | | `enforced` | Requires clients to supply a certificate that is verified. |