You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/src/main/asciidoc/tls-registry-reference.adoc
+5-6Lines changed: 5 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -25,7 +25,7 @@ The TLS Registry extension is automatically included in your project when you us
25
25
As a result, applications that use the TLS Registry can be ready to handle secure communications out of the box.
26
26
TLS Registry also provides features like automatic certificate reloading, Let's Encrypt (ACME) integration, Kubernetes Cert-Manager support, and compatibility with various keystore formats, such as PKCS12, PEM, and JKS.
27
27
28
-
[#using-the-tls-registry]
28
+
[[using-the-tls-registry]]
29
29
== Using the TLS registry
30
30
31
31
To configure a TLS connection, including key and truststores, use the `+quarkus.tls.*+` properties.
This configuration enables mTLS by ensuring that both the server and client validate each other's certificates, which provides an additional layer of security.
128
128
129
-
[#referencing-a-tls-configuration]
129
+
[[referencing-a-tls-configuration]]
130
130
== Referencing a TLS configuration
131
131
132
132
To reference an example _named_ configuration that you created by using the `quarkus.tls.<name>.*` properties as explained in <<using-the-tls-registry>>
* Alternatively, use SNI to select the appropriate certificate and private key.
258
258
Note that all keys must use the same password.
259
259
260
-
[#sni]
260
+
[[sni]]
261
261
==== SNI
262
262
263
263
Server Name Indication (SNI) is a TLS extension that makes it possible for a client to specify the host name to which it attempts to connect during the TLS handshake.
@@ -585,7 +585,7 @@ When an application that uses the TLS extension starts, the TLS registry perform
585
585
586
586
If any of these checks fail, the application will not start.
587
587
588
-
[#reloading-certificates]
588
+
[[reloading-certificates]]
589
589
== Reloading certificates
590
590
591
591
The `TlsConfiguration` obtained from the `TLSConfigurationRegistry` includes a mechanism for reloading certificates.
0 commit comments