Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Document PEM format as file format #19019

Merged
merged 1 commit into from
Sep 22, 2023
Merged

Document PEM format as file format #19019

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
19 changes: 8 additions & 11 deletions docs/src/main/sphinx/security/inspect-pem.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,20 +3,18 @@
PEM (Privacy Enhanced Mail) is a standard for public key and certificate
information, and an encoding standard used to transmit keys and certificates.

Trino supports PEM-encoded certificates. If you want to use other supported
formats, see:
Trino supports PEM files. If you want to use other supported formats, see:

- {doc}`JKS keystores </security/inspect-jks>`
- {ref}`PKCS 12 <glossPKCS12>` stores. (Look up alternate commands for these in
`openssl` references.)

A single PEM-encoded file can contain either certificate or key pair
information, or both in the same file. Certified keys can contain a chain of
certificates from successive certificate authorities.
A single PEM file can contain either certificate or key pair information, or
mosabua marked this conversation as resolved.
Show resolved Hide resolved
both in the same file. Certified keys can contain a chain of certificates from
successive certificate authorities.

Follow the steps in this topic to inspect and validate PEM-encoded key and
certificate files. See {ref}`troubleshooting-keystore` to validate JKS
keystores.
Follow the steps in this topic to inspect and validate key and certificate in
PEM files. See {ref}`troubleshooting-keystore` to validate JKS keystores.

(inspect-pems)=

Expand Down Expand Up @@ -122,6 +120,5 @@ characteristics:
`DNS:clustercoord.example.com`. Certificates without SANs are not
supported.

If your PEM certificate shows valid information for your cluster, proceed to
configure the server, as described in {ref}`cert-placement` and
{ref}`configure-https`.
If your PEM file shows valid information for your cluster, proceed to configure
the server, as described in {ref}`cert-placement` and {ref}`configure-https`.
Loading