Ignore:
Timestamp:
Apr 9, 2015, 1:02:39 PM (5 years ago)
Author:
Thomas Klute <thomas2.klute@…>
Branches:
debian/master, debian/stretch-backports, jessie-backports, master, upstream
Children:
73f6f12
Parents:
8b472af
Message:

Set GnuTLS priorities for proxy connections separately

Until now, proxy connections were configured with the same priorities as
the server side. This commit introduces the new configuration option
"GnuTLSProxyPriorities" to set the priorities for proxy connections
separately. Note that GnuTLSProxyPriorities MUST be set when
SSLProxyEngine is enabled.

Since the parameters to GnuTLSPriorities and GnuTLSProxyPriorities need
the same processing, mgs_set_priorities has been rewritten to select the
priority cache to write to based on the option name, rather than adding
a new function to handle GnuTLSProxyPriorities.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • test/tests/20_TLS_reverse_proxy_client_auth/apache.conf

    r8b472af rf030883  
    1717 GnuTLSProxyCertificateFile     client/x509.pem
    1818 GnuTLSProxyCAFile              authority/x509.pem
     19 GnuTLSProxyPriorities          NORMAL
    1920 ProxyPass /proxy/ https://${BACKEND_HOST}:${BACKEND_PORT}/
    2021 ProxyPassReverse /proxy/ https://${BACKEND_HOST}:${BACKEND_PORT}/
Note: See TracChangeset for help on using the changeset viewer.