mir/kea
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/kea synced 2025-08-30 21:45:37 +00:00
Code Issues Releases Wiki Activity

[#1662] Updated doc (not finished: depends on 1664)

Browse Source
This commit is contained in:
Francis Dupont
2021-03-24 09:52:04 +01:00
parent ac57685e23
commit 67c314f565
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
doc/sphinx/arm/agent.rst
View File

@@ -187,11 +187,11 @@ the example above.
.. _agent-secure-connection: .. _agent-secure-connection:
Secure Connections (version before 1.9.5) Secure Connections (version before 1.9.6)
========================================= =========================================
The Control Agent does not natively support secure HTTP connections like The Control Agent does not natively support secure HTTP connections like
SSL or TLS before version 1.9.5. SSL or TLS before version 1.9.6.
In order to setup a secure connection, please use one of the In order to setup a secure connection, please use one of the
available third-party HTTP servers and configure it to run as a reverse available third-party HTTP servers and configure it to run as a reverse
@@ -297,10 +297,10 @@ can use an HTTP/HTTPS translator such as stunnel in client mode. A
sample configuration is provided in the ``doc/examples/https/shell/`` sample configuration is provided in the ``doc/examples/https/shell/``
directory. directory.
Secure Connections (since version 1.9.5) Secure Connections (since version 1.9.6)
======================================== ========================================
Since the Kea version 1.9.5 the Control Agent natively supports secure Since the Kea version 1.9.6 the Control Agent natively supports secure
HTTP connections using TLS. This allows a protection against users from HTTP connections using TLS. This allows a protection against users from
the node where the agent runs, something that a reverse proxy cannot the node where the agent runs, something that a reverse proxy cannot
provide. provide.
@@ -309,7 +309,7 @@ TLS is configured using three string parameters giving file names and
a boolean parameter: a boolean parameter:
- The ``trust-anchor`` specifies the Certificate Authority file name or - The ``trust-anchor`` specifies the Certificate Authority file name or
with OpenSSL backend directory path. directory path.
- The ``cert-file`` specifies the server certificate file name. - The ``cert-file`` specifies the server certificate file name.
@@ -339,7 +339,7 @@ Configuring only one or two string parameters is an error.
the HTTP authentication. To summary a Man in the Middle attack is the HTTP authentication. To summary a Man in the Middle attack is
still possible when both HTTPS and HTTP authentication are used. still possible when both HTTPS and HTTP authentication are used.
Since the Kea version 1.9.5 the ``kea-shell`` tool supports TLS. Since the Kea version 1.9.6 the ``kea-shell`` tool supports TLS.
.. _agent-launch: .. _agent-launch: