DOCSP-20680 TLS/SSL page (#383)

* DOCSP-20680 tls/ssl page

* DOCSP-20680 tls/ssl page

* DOCSP-20680 options in a table

* DOCSP-20680 options in a table

* DOCSP-20680 options in a table

* DOCSP-20680 options in a table

* DOCSP-20680 options in a table

* DOCSP-20680 nit internal changes

* DOCSP-20680 nit internal changes

* DOCSP-20680 nit internal changes

* DOCSP-20680 fix line break

* DOCSP-20680 default/ unset update

* DOCSP-20680 default/ unset update

Co-authored-by: Jocelyn Mendez <[email protected]>

Author: 2 people

.vscode/settings.json

@@ -0,0 +1,3 @@
+{
+    "esbonio.server.enabled": true
+}

source/connect/tls-ssl-connection.txt

@@ -12,7 +12,9 @@ TLS / SSL Connection Tab
    :depth: 1
    :class: singlecol
 
-The :guilabel:`TLS / SSL` tab allows you to connect deployments via TLS / SSL.
+The :guilabel:`TLS / SSL` tab allows you to connect deployments using TLS / SSL.
+For more information on :guilabel:`TLS / SSL`, see :manual:`TLS Options 
+</reference/connection-string/#tls-options>`
 
 Procedure
 ---------
@@ -28,12 +30,86 @@ Procedure
 
    .. step:: Click the :guilabel:`TLS / SSL` tab.
 
-      You have the option to use a ``Default`` connection or to set the TLS / SSL 
+      You can leave TLS unset with the ``Default`` option or set the TLS / SSL 
       connection ``On`` or ``Off``. 
 
-      Default
-      ~~~~~~~
+      .. list-table::
+         :header-rows: 1 
+         :widths: 40 80
+      
+         * - Option
+           - Description
 
+         * - Default
+           - The ``Default`` option leaves the TLS option ``unset``. The 
+             ``Default / unset`` TLS /SSL option is enabled when using a 
+             :manual:`DNS seedlist 
+             (SRV) </reference/connection-string/#std-label-connections-dns-seedlist>` 
+             in the connection string. To learn more about the additional options 
+             available, see :ref:`<additional-tls>`.
 
+         * - On
+           - Select the ``On`` option when using a DNS seedlist (SRV) in the 
+             connection string. When TLS / SSL Connection is ``On``, you can 
+             specify additional certificate options for your connection string. 
+             To see more on the additional certificate options available, see 
+             :ref:`<additional-tls>`. 
+
+         * - Off
+           - The ``Off`` option initiates a connection :guilabel:`without` 
+             TLS / SSL. 
+
+             .. note::
+
+                It is recommended that users enable TLS / SSL to avoid security 
+                vulnerabilities. 
+
+      .. _additional-tls:
+
+      Additional TLS / SSL Options
+      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+      When TLS is ``On`` you can specify the following:
+
+      .. list-table::
+         :header-rows: 1 
+         :widths: 50 50
+         
+         * - Option
+           - Description
+
+         * - Certificate Authority
+           - One or more certificate files from trusted Certificate Authorities 
+             to validate the certificate provided by the deployment. 
+
+         * - Client Certificate 
+           - Specifies the location of a local .pem file that contains either 
+             the client's TLS/SSL X.509 certificate or the client's TLS/SSL 
+             certificate and key.    
+
+         * - Client Key Password
+           - If the *Client Private Key* is protected with a password, 
+             you must provide the password. 
+
+         * - tlsInsecure
+           - Disables various certificate validations.
+
+         * - tlsAllowInvalidHostnames
+           - Disables hostname validation of the certificate presented by 
+             the the deployment. 
+
+         * - tlsAllowInvalidCertificates
+           - Disable the validation of the server certificates.
+
+      .. warning:: 
+
+         Enabling ``tlsInsecure``, ``tlsAllowInvalidHostnames``, and 
+         ``tlsAllowInvalidCertificates`` may cause a security vulnerabilty. 
+
+   .. step:: (Optional) For advanced connection configuration options, click the :ref:`Advanced <advanced-connection-tab>` tab.
+
+   .. step:: Click Connect.
 
+.. seealso::
 
+   To disconnect from your deployment, see :ref:`<disconnect-tab>`.