From 06ca92195b2e912ccf98d7a24d862dc2f7e919d8 Mon Sep 17 00:00:00 2001 From: Sn0rt Date: Mon, 18 Sep 2023 14:34:25 +0800 Subject: [PATCH] fix: ssl.key_encrypt_salt field description Signed-off-by: Sn0rt --- conf/config-default.yaml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/conf/config-default.yaml b/conf/config-default.yaml index 06640900ca61..d0b8c873da64 100755 --- a/conf/config-default.yaml +++ b/conf/config-default.yaml @@ -109,8 +109,9 @@ apisix: # Disabled by default because it renders Perfect Forward Secrecy (FPS) # useless. See https://github.com/mozilla/server-side-tls/issues/135. - key_encrypt_salt: # Set the encryption key for AES-128-CBC. It should be a - - edd1c9f0985e76a2 # hexadecimal string of length 16. + key_encrypt_salt: # This field is only used to encrypt the private key of SSL. + - edd1c9f0985e76a2 # Set the encryption key for AES-128-CBC. It should be a + # hexadecimal string of length 16. # If not set, APISIX saves the original data into etcd. # CAUTION: If you would like to update the key, add the new key as the # first item in the array and keep the older keys below the newly added