[GitHub] [apisix] tzssangglass commented on issue #4384: bug: apisix 链接 etcd， 提示证书认证失败

[GitBox <gi...@apache.org>]

tzssangglass commented on issue #4384:
URL: https://github.com/apache/apisix/issues/4384#issuecomment-856095255


   hi, let's start with a question, do you want to use tls to connect to etcd? This means that this is a one-way authentication, etcd will verify that apisix is communicating with etcd using tls, but apisix will not verify the credentials of etcd.
   
   n this case, the example configuration of etcd
   
   ```shell
   docker run -d -p 12379:12379 -p 12380:12380 \
           -e ALLOW_NONE_AUTHENTICATION=yes \
           -e ETCD_ADVERTISE_CLIENT_URLS=https://0.0.0.0:12379 \
           -e ETCD_LISTEN_CLIENT_URLS=https://0.0.0.0:12379 \
           -e ETCD_CERT_FILE=/certs/etcd.pem \
           -e ETCD_KEY_FILE=/certs/etcd.key \
           -v /usr/local/apisix/t/certs:/certs \
           bitnami/etcd:3.4.0
   ```
   
   the configuration of apisix
   
   ```yaml
   etcd:
     host:
       - "https://127.0.0.1:12379"
     tls:
       verify: false
   ```
   
   it's work well.
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org