Changeset 8b472af in mod_gnutls for test/tests/20_TLS_reverse_proxy_client_auth

Timestamp:

Apr 7, 2015, 5:13:59 AM (5 years ago)

Author:

Thomas Klute <thomas2.klute@…>

Branches:

debian/master, debian/stretch-backports, jessie-backports, master, proxy-ticket, upstream

Children:

f030883

Parents:

49d25a9

git-author:

Thomas Klute <thomas2.klute@…> (04/07/15 03:52:09)

git-committer:

Thomas Klute <thomas2.klute@…> (04/07/15 05:13:59)

Message:

Use server root for file paths in TLS proxy config

This is what users should be able to expect. Changing the return type of
load_proxy_x509_credentials to apr_status_t is not really a change: It
used APR status values before, but now the type is declared as such.
Absence of client credentials for the proxy is not necessarily a problem
(the back end server(s) may not require any), so the log level should be
lower than "warning".

File:

• test/tests/20_TLS_reverse_proxy_client_auth/apache.conf (modified) (1 diff)

test/tests/20_TLS_reverse_proxy_client_auth/apache.conf

@@ -14 +14 @@
 
  SSLProxyEngine On
- GnuTLSProxyKeyFile ${PWD}/../../client/secret.key
- GnuTLSProxyCertificateFile ${PWD}/../../client/x509.pem
- GnuTLSProxyCAFile ${PWD}/../../authority/x509.pem
+ GnuTLSProxyKeyFile             client/secret.key
+ GnuTLSProxyCertificateFile     client/x509.pem
+ GnuTLSProxyCAFile              authority/x509.pem
  ProxyPass /proxy/ https://${BACKEND_HOST}:${BACKEND_PORT}/
  ProxyPassReverse /proxy/ https://${BACKEND_HOST}:${BACKEND_PORT}/