source: mod_gnutls/test/tests/21_TLS_reverse_proxy_wrong_cert/apache.conf @ f030883

Last change on this file since f030883 was f030883, checked in by Thomas Klute <thomas2.klute@…>, 6 years ago

Set GnuTLS priorities for proxy connections separately

Until now, proxy connections were configured with the same priorities as
the server side. This commit introduces the new configuration option
"GnuTLSProxyPriorities" to set the priorities for proxy connections
separately. Note that GnuTLSProxyPriorities MUST be set when
SSLProxyEngine is enabled.

Since the parameters to GnuTLSPriorities and GnuTLSProxyPriorities need
the same processing, mgs_set_priorities has been rewritten to select the
priority cache to write to based on the option name, rather than adding
a new function to handle GnuTLSProxyPriorities.

  • Property mode set to 100644
File size: 617 bytes
[ed82a6a]1Include ${PWD}/../../base_apache.conf
3GnuTLSCache dbm cache/gnutls_cache
5LoadModule proxy_module /usr/lib/apache2/modules/
6LoadModule proxy_http_module /usr/lib/apache2/modules/
8<VirtualHost ${TEST_IP}:${TEST_PORT}>
9 ServerName ${TEST_HOST}
10 GnuTLSEnable On
11 GnuTLSCertificateFile server/x509.pem
12 GnuTLSKeyFile server/secret.key
13 GnuTLSPriorities NORMAL
15 SSLProxyEngine On
[8b472af]16 GnuTLSProxyCAFile      authority/x509.pem
[f030883]17 GnuTLSProxyPriorities  NORMAL
[ed82a6a]18 ProxyPass /proxy/ https://${BACKEND_HOST}:${BACKEND_PORT}/
19 ProxyPassReverse /proxy/ https://${BACKEND_HOST}:${BACKEND_PORT}/
Note: See TracBrowser for help on using the repository browser.