Command-line options for secure internode comms
@@ -68,10 +68,13 @@ var httpAdv string
var authFile string
var x509Cert string
var x509Key string
+var nodeX509Cert string
+var nodeX509Key string
var raftAddr string
var raftAdv string
var joinAddr string
var noVerify bool
+var noNodeVerify bool
var discoURL string
var discoID string
var expvar bool
@@ -93,13 +96,16 @@ storage engine. It provides an easy-to-use, fault-tolerant store for relational
func init() {
flag.StringVar(&httpAddr, "http", "localhost:4001", "HTTP server bind address. For HTTPS, set X.509 cert and key")
flag.StringVar(&httpAdv, "httpadv", "", "Advertised HTTP address. If not set, same as HTTP server")
- flag.StringVar(&x509Cert, "x509cert", "", "Path to X.509 certificate")
- flag.StringVar(&x509Key, "x509key", "", "Path to X.509 private key for certificate")
+ flag.StringVar(&x509Cert, "x509cert", "", "Path to X.509 certificate for HTTP endpoint")
+ flag.StringVar(&x509Key, "x509key", "", "Path to X.509 private key for certificate HTTP endpoint")
+ flag.StringVar(&nodeX509Cert, "nodex509cert", "", "Path to X.509 certificate for inter-node communication")
+ flag.StringVar(&nodeX509Key, "nodex509key", "", "Path to X.509 private key for inter-node communication")
flag.StringVar(&authFile, "auth", "", "Path to authentication and authorization file. If not set, not enabled")
flag.StringVar(&raftAddr, "raft", "localhost:4002", "Raft communication bind address")
flag.StringVar(&raftAdv, "raftadv", "", "Advertised Raft communication address. If not set, same as Raft bind")
flag.StringVar(&joinAddr, "join", "", "Comma-delimited list of nodes, through which a cluster can be joined (proto://host:port)")
flag.BoolVar(&noVerify, "noverify", false, "Skip verification of remote HTTPS cert when joining cluster")
+ flag.BoolVar(&noNodeVerify, "nonodeverify", false, "Skip verification of a remote node cert")
flag.StringVar(&discoURL, "disco", "http://discovery.rqlite.com", "Set Discovery Service URL")
flag.StringVar(&discoID, "discoid", "", "Set Discovery ID. If not set, Discovery Service not used")
flag.BoolVar(&expvar, "expvar", true, "Serve expvar data on HTTP server")
