diff --git a/hetu-docs/en/security/tls.md b/hetu-docs/en/security/tls.md index a58ab20db2a790e7330484bb7749265eed309751..1f074d317abf244519ac5a30344236e91dea824a 100644 --- a/hetu-docs/en/security/tls.md +++ b/hetu-docs/en/security/tls.md @@ -35,7 +35,9 @@ Enter key password for Java Truststore File for TLS ---------------------------- -Truststore files contain certificates of trusted TLS/SSL servers, or of Certificate Authorities trusted to identify servers. For securing access to the openLooKeng coordinator through HTTPS the clients can configure truststores. For the openLooKeng CLI to trust the openLooKeng coordinator, the coordinator\'s certificate must be imported to the CLI\'s truststore. +Truststore files contain certificates of trusted TLS/SSL servers, or of Certificate Authorities trusted to identify servers. For securing access to the openLooKeng coordinator through HTTPS the clients can configure truststores. + +In order to connect to the coordinator through the openLooKeng CLI, the openLooKeng CLI needs to trust the coordinator's server-side certificate. For the openLooKeng CLI to trust the openLooKeng coordinator, the coordinator\'s certificate must be imported to the CLI\'s truststore. You can either import the certificate to the default Java truststore, or to a custom truststore. You should be careful if you choose to use the default one, since you may need to remove the certificates of CAs you do not deem trustworthy.