emqx_psk_schema {
chunk_size.desc:
"""The size of each chunk used to import to the built-in database from PSK file"""
enable.desc:
"""Whether to enable TLS PSK support"""
init_file.desc:
"""If init_file is specified, EMQX will import PSKs from the file into the built-in database at startup for use by the runtime.
The file has to be structured line-by-line, each line must be in the format of PSKIdentity:SharedSecret
.
For example: mydevice1:c2VjcmV0
"""
psk_authentication.desc:
"""PSK stands for 'Pre-Shared Keys'.
This config to enable TLS-PSK authentication.
Important! Make sure the SSL listener with only tlsv1.2
enabled, and also PSK cipher suites
configured, such as RSA-PSK-AES256-GCM-SHA384
.
See listener SSL options config for more details.
The IDs and secrets can be provided from a file which is configurable by the init_file
field."""
separator.desc:
"""The separator between PSKIdentity
and SharedSecret
in the PSK file"""
}