1
0
mirror of https://github.com/prometheus/alertmanager.git synced 2026-02-05 15:45:34 +01:00

Add documentation for client_allowed_sans (#4706)

* Add documentation for client_allowed_sans.

Signed-off-by: Shyukri Shyukriev <shyukri.shyukriev@crate.io>

* Update CHANGELOG.md

Signed-off-by: Ben Kochie <superq@gmail.com>

---------

Signed-off-by: Shyukri Shyukriev <shyukri.shyukriev@crate.io>
Signed-off-by: Ben Kochie <superq@gmail.com>
Co-authored-by: Ben Kochie <superq@gmail.com>
This commit is contained in:
Shyukri Shyukriev
2025-11-10 18:03:27 +02:00
committed by GitHub
parent 64a7edfb4e
commit 5c8df7c3f2

View File

@@ -44,6 +44,13 @@ tls_server_config:
# CA certificate for client certificate authentication to the server.
[ client_ca_file: <filename> ]
# Verify that the client certificate has a Subject Alternate Name (SAN)
# which is an exact match to an entry in this list, else terminate the
# connection. SAN match can be one or multiple of the following: DNS,
# IP, e-mail, or URI address from https://pkg.go.dev/crypto/x509#Certificate.
[ client_allowed_sans:
[ - <string> ] ]
# Minimum TLS version that is acceptable.
[ min_version: <string> | default = "TLS12" ]