debian/masterdebian/stretch-backportsjessie-backportsupstream
|
Last change
on this file since f030883 was
f030883,
checked in by Thomas Klute <thomas2.klute@…>, 5 years ago
|
|
Set GnuTLS priorities for proxy connections separately
Until now, proxy connections were configured with the same priorities as
the server side. This commit introduces the new configuration option
"GnuTLSProxyPriorities" to set the priorities for proxy connections
separately. Note that GnuTLSProxyPriorities MUST be set when
SSLProxyEngine is enabled.
Since the parameters to GnuTLSPriorities and GnuTLSProxyPriorities need
the same processing, mgs_set_priorities has been rewritten to select the
priority cache to write to based on the option name, rather than adding
a new function to handle GnuTLSProxyPriorities.
|
-
Property mode set to
100644
|
|
File size:
618 bytes
|
| Rev | Line | |
|---|
| [6e6a4e4] | 1 | Include ${PWD}/../../base_apache.conf |
|---|
| 2 | |
|---|
| 3 | GnuTLSCache dbm cache/gnutls_cache |
|---|
| 4 | |
|---|
| 5 | LoadModule proxy_module /usr/lib/apache2/modules/mod_proxy.so |
|---|
| 6 | LoadModule proxy_http_module /usr/lib/apache2/modules/mod_proxy_http.so |
|---|
| 7 | |
|---|
| 8 | <VirtualHost ${TEST_IP}:${TEST_PORT}> |
|---|
| 9 | ServerName ${TEST_HOST} |
|---|
| 10 | GnuTLSEnable On |
|---|
| 11 | GnuTLSCertificateFile server/x509.pem |
|---|
| 12 | GnuTLSKeyFile server/secret.key |
|---|
| 13 | GnuTLSPriorities NORMAL |
|---|
| 14 | |
|---|
| 15 | SSLProxyEngine On |
|---|
| [8b472af] | 16 | GnuTLSProxyCAFile authority/x509.pem |
|---|
| [f030883] | 17 | GnuTLSProxyPriorities NORMAL |
|---|
| [6e6a4e4] | 18 | ProxyPass /proxy/ https://${BACKEND_HOST}:${BACKEND_PORT}/ |
|---|
| 19 | ProxyPassReverse /proxy/ https://${BACKEND_HOST}:${BACKEND_PORT}/ |
|---|
| 20 | </VirtualHost> |
|---|
Note: See
TracBrowser
for help on using the repository browser.
