From a8680a8719417cfebf806c0d23c34ac21c1b63a4 Mon Sep 17 00:00:00 2001 From: Jean-Baptiste Doumenjou Date: Mon, 15 Jul 2019 08:46:04 +0200 Subject: [PATCH] Fixes the TLS Mutual Authentication documentation --- docs/configuration/entrypoints.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/docs/configuration/entrypoints.md b/docs/configuration/entrypoints.md index 812fe9860..1a01625c4 100644 --- a/docs/configuration/entrypoints.md +++ b/docs/configuration/entrypoints.md @@ -235,8 +235,10 @@ If you need to add or remove TLS certificates while Traefik is started, Dynamic ## TLS Mutual Authentication TLS Mutual Authentication can be `optional` or not. -If it's `optional`, Traefik will authorize connection with certificates not signed by a specified Certificate Authority (CA). -Otherwise, Traefik will only accept clients that present a certificate signed by a specified Certificate Authority (CA). + +* If `optional = true`, if a certificate is provided, verifies if it is signed by a specified Certificate Authority (CA). Otherwise proceeds without any certificate. +* If `optional = false`, Traefik will only accept clients that present a certificate signed by a specified Certificate Authority (CA). + `ClientCAFiles` can be configured with multiple `CA:s` in the same file or use multiple files containing one or several `CA:s`. The `CA:s` has to be in PEM format.