From e7857c83ae5cc871f741376d363b5623694b7549 Mon Sep 17 00:00:00 2001 From: Dean Sheather Date: Mon, 19 Dec 2022 18:58:05 +0000 Subject: [PATCH 1/2] fix: change TLS client auth default to "none" --- cli/deployment/config.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cli/deployment/config.go b/cli/deployment/config.go index 8d206ba0edfee..97177d235996c 100644 --- a/cli/deployment/config.go +++ b/cli/deployment/config.go @@ -303,7 +303,7 @@ func newConfig() *codersdk.DeploymentConfig { Name: "TLS Client Auth", Usage: "Policy the server will follow for TLS Client Authentication. Accepted values are \"none\", \"request\", \"require-any\", \"verify-if-given\", or \"require-and-verify\".", Flag: "tls-client-auth", - Default: "request", + Default: "none", }, KeyFiles: &codersdk.DeploymentConfigField[[]string]{ Name: "TLS Key Files", From 0a40d09d8aee8ec1686155b21b9a39db8be9ecef Mon Sep 17 00:00:00 2001 From: Dean Sheather Date: Mon, 19 Dec 2022 19:08:02 +0000 Subject: [PATCH 2/2] fixup! fix: change TLS client auth default to "none" --- cli/testdata/coder_server_--help.golden | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cli/testdata/coder_server_--help.golden b/cli/testdata/coder_server_--help.golden index 7f5b40a581225..43b97ccb2189b 100644 --- a/cli/testdata/coder_server_--help.golden +++ b/cli/testdata/coder_server_--help.golden @@ -198,7 +198,7 @@ Flags: "verify-if-given", or "require-and-verify". Consumes $CODER_TLS_CLIENT_AUTH (default - "request") + "none") --tls-client-ca-file string PEM-encoded Certificate Authority file used for checking the authenticity of client