emqx_psk_schema.hocon 1.0 KB

12345678910111213141516171819202122232425262728
  1. emqx_psk_schema {
  2. chunk_size.desc:
  3. """The size of each chunk used to import to the built-in database from PSK file"""
  4. enable.desc:
  5. """Whether to enable TLS PSK support"""
  6. init_file.desc:
  7. """If init_file is specified, EMQX will import PSKs from the file into the built-in database at startup for use by the runtime.
  8. The file has to be structured line-by-line, each line must be in the format of <code>PSKIdentity:SharedSecret</code>.
  9. For example: <code>mydevice1:c2VjcmV0</code>"""
  10. psk_authentication.desc:
  11. """PSK stands for 'Pre-Shared Keys'.
  12. This config to enable TLS-PSK authentication.
  13. Important! Make sure the SSL listener with only <code>tlsv1.2</code> enabled, and also PSK cipher suites
  14. configured, such as <code>RSA-PSK-AES256-GCM-SHA384</code>.
  15. See listener SSL options config for more details.
  16. The IDs and secrets can be provided from a file which is configurable by the <code>init_file</code> field."""
  17. separator.desc:
  18. """The separator between <code>PSKIdentity</code> and <code>SharedSecret</code> in the PSK file"""
  19. }