source: mod_gnutls/test/tests/19_TLS_reverse_proxy/apache.conf @ f030883

debian/masterdebian/stretch-backportsjessie-backportsupstream
Last change on this file since f030883 was f030883, checked in by Thomas Klute <thomas2.klute@…>, 4 years ago

Set GnuTLS priorities for proxy connections separately

Until now, proxy connections were configured with the same priorities as
the server side. This commit introduces the new configuration option
"GnuTLSProxyPriorities" to set the priorities for proxy connections
separately. Note that GnuTLSProxyPriorities MUST be set when
SSLProxyEngine is enabled.

Since the parameters to GnuTLSPriorities and GnuTLSProxyPriorities need
the same processing, mgs_set_priorities has been rewritten to select the
priority cache to write to based on the option name, rather than adding
a new function to handle GnuTLSProxyPriorities.

  • Property mode set to 100644
File size: 618 bytes
Line 
1Include ${PWD}/../../base_apache.conf
2
3GnuTLSCache dbm cache/gnutls_cache
4
5LoadModule proxy_module /usr/lib/apache2/modules/mod_proxy.so
6LoadModule proxy_http_module /usr/lib/apache2/modules/mod_proxy_http.so
7
8<VirtualHost ${TEST_IP}:${TEST_PORT}>
9 ServerName ${TEST_HOST}
10 GnuTLSEnable On
11 GnuTLSCertificateFile server/x509.pem
12 GnuTLSKeyFile server/secret.key
13 GnuTLSPriorities NORMAL
14
15 SSLProxyEngine On
16 GnuTLSProxyCAFile      authority/x509.pem
17 GnuTLSProxyPriorities          NORMAL
18 ProxyPass /proxy/ https://${BACKEND_HOST}:${BACKEND_PORT}/
19 ProxyPassReverse /proxy/ https://${BACKEND_HOST}:${BACKEND_PORT}/
20</VirtualHost>
Note: See TracBrowser for help on using the repository browser.