1
0
mirror of https://github.com/minio/docs.git synced 2025-07-30 07:03:26 +03:00

Adds info on certificates with the MinIO Client (#782)

- Adds a new section on certificates to the MinIO Client page
- Adds a new section in Behaviors to the mc alias set page
- Minor fix to a --json flag command in version doc

Closes #781
This commit is contained in:
Daryl White
2023-03-30 13:04:10 -05:00
committed by GitHub
parent e301ca757b
commit 199d1eb1d4
3 changed files with 40 additions and 2 deletions

View File

@ -418,6 +418,34 @@ The following list describes each possible file path location in the order
You can use the ``--config-dir``
.. _minio-mc-certificates:
Certificates
------------
The MinIO Client stores certificates and CAs for deployments to the following paths:
Linux, MacOS, and other Unix-like systems:
.. code-block:: shell
~/.mc/certs/ # certificates
~/.mc/certs/CAs/ # Certificate Authorities
Windows systems:
.. code-block:: shell
C:\Users\[username]\mc\certs\ # certificates
C:\Users\[username]\mc\certs\CAs\ # Certificate Authorities
When creating a new :ref:`alias <minio-mc-alias>`, the MinIO Client fetches the peer certificate, computes the public key fingerprint, and asks the user whether to accept the deployment's certificate.
If you decide to trust the certificate, the MinIO Client adds the certificate to the certificate authority path listed above.
.. note::
In testing environments, you can bypass the certificate check for selected MinIO Client commands by passing the ``--insecure`` flag.
.. _minio-mc-global-options:
Global Options

View File

@ -198,4 +198,14 @@ For more complete documentation on S3 Access Control, see
:s3-docs:`Amazon S3 Security <security.html>`.
For all other S3-compatible services, defer to the documentation for that
service.
service.
Certificates
~~~~~~~~~~~~
The MinIO Client fetches the peer certificate, computes the public key fingerprint, and asks the user whether to accept the deployment's certificate.
If trusted, the MinIO Client automatically adds the certificate authority to:
- ``~/.mc/certs/CAs/`` on Linux and other Unix-like systems.
- ``C:\Users\[username]\mc\certs\CAs\`` on Windows systems.