From 510f7fbe8a9195f8c329fcc1013c2ce14003ed30 Mon Sep 17 00:00:00 2001 From: Manfred Moser Date: Tue, 13 Apr 2021 08:49:13 -0700 Subject: [PATCH] Add minimal TLS/HTTPS section --- docs/src/main/sphinx/installation/cli.rst | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/docs/src/main/sphinx/installation/cli.rst b/docs/src/main/sphinx/installation/cli.rst index 32ba242085c9f..c9e74c9239afe 100644 --- a/docs/src/main/sphinx/installation/cli.rst +++ b/docs/src/main/sphinx/installation/cli.rst @@ -29,6 +29,23 @@ The CLI uses the HTTP protocol and the :doc:`Trino client REST API ` to communicate with Trino. +TLS/HTTPS +--------- + +Trino is typically available with an HTTPS URL. This means that all network +traffic between the CLI and Trino uses TLS. :doc:`TLS configuration +` is common, since it is a requirement for any authentication. + +Use the HTTPS URL to connect to the server: + +.. code-block:: text + + ./trino --server https://trino.example.com + +The recommended TLS implementation is to use a globally trusted certificate. In +this case, no other options are necessary, since the JVM running the CLI +recognizes these certificates. + Authentication --------------