mirror of
https://github.com/status-im/consul.git
synced 2025-01-13 07:14:37 +00:00
bb4d4040fb
Ensure that the peer stream replication rpc can successfully be used with TLS activated. Also: - If key material is configured for the gRPC port but HTTPS is not enabled now TLS will still be activated for the gRPC port. - peerstream replication stream opened by the establishing-side will now ignore grpc.WithBlock so that TLS errors will bubble up instead of being awkwardly delayed or suppressed
11 lines
377 B
HCL
11 lines
377 B
HCL
tls {
|
|
internal_rpc {
|
|
ca_file = "/workdir/secondary/tls/consul-agent-ca.pem"
|
|
cert_file = "/workdir/secondary/tls/secondary-server-consul-0.pem"
|
|
key_file = "/workdir/secondary/tls/secondary-server-consul-0-key.pem"
|
|
verify_incoming = true
|
|
verify_outgoing = true
|
|
verify_server_hostname = true
|
|
}
|
|
}
|