Skip to content

Commit

Permalink
Document PEM format as file format
Browse files Browse the repository at this point in the history
  • Loading branch information
mosabua committed Sep 22, 2023
1 parent 12cb42c commit f92b119
Showing 1 changed file with 8 additions and 11 deletions.
19 changes: 8 additions & 11 deletions docs/src/main/sphinx/security/inspect-pem.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,20 +3,18 @@
PEM (Privacy Enhanced Mail) is a standard for public key and certificate
information, and an encoding standard used to transmit keys and certificates.

Trino supports PEM-encoded certificates. If you want to use other supported
formats, see:
Trino supports PEM files. If you want to use other supported formats, see:

- {doc}`JKS keystores </security/inspect-jks>`
- {ref}`PKCS 12 <glossPKCS12>` stores. (Look up alternate commands for these in
`openssl` references.)

A single PEM-encoded file can contain either certificate or key pair
information, or both in the same file. Certified keys can contain a chain of
certificates from successive certificate authorities.
A single PEM file can contain either certificate or key pair information, or
both in the same file. Certified keys can contain a chain of certificates from
successive certificate authorities.

Follow the steps in this topic to inspect and validate PEM-encoded key and
certificate files. See {ref}`troubleshooting-keystore` to validate JKS
keystores.
Follow the steps in this topic to inspect and validate key and certificate in
PEM files. See {ref}`troubleshooting-keystore` to validate JKS keystores.

(inspect-pems)=

Expand Down Expand Up @@ -122,6 +120,5 @@ characteristics:
`DNS:clustercoord.example.com`. Certificates without SANs are not
supported.

If your PEM certificate shows valid information for your cluster, proceed to
configure the server, as described in {ref}`cert-placement` and
{ref}`configure-https`.
If your PEM file shows valid information for your cluster, proceed to configure
the server, as described in {ref}`cert-placement` and {ref}`configure-https`.

0 comments on commit f92b119

Please sign in to comment.