From 3e0608db5edc8c9b542ca9219c4181bf17c21b22 Mon Sep 17 00:00:00 2001 From: Shang Ding Date: Sat, 12 Feb 2022 16:05:20 -0600 Subject: [PATCH] tweak readme file --- examples/features/mutual_tls/README.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/examples/features/mutual_tls/README.md b/examples/features/mutual_tls/README.md index 3447b4b96f19..aded0ee3584e 100644 --- a/examples/features/mutual_tls/README.md +++ b/examples/features/mutual_tls/README.md @@ -18,14 +18,14 @@ go run client/main.go ### Client In normal TLS, the client is only concerned with authenticating the server by -using a trusted CA file. In mutual TLS, the client also presents the its client -certificate to the server for authentication. This is done via setting +using one or more trusted CA file. In mutual TLS, the client also presents its +client certificate to the server for authentication. This is done via setting `tls.Config.Certificates`. ### Server In normal TLS, the server is only concerned with presenting the server -certificate for clients to verify. In mutual TLS, the server also load in a +certificate for clients to verify. In mutual TLS, the server also loads in a list of trusted CA files for verifying client presented certificates with. This is done via setting `tls.Config.RootCAs` to the list of trusted CA files, and setting `tls.config.ClientAuth` to `tls.RequireAndVerifyClientCert`.