Changeset f030883 in mod_gnutls for test/tests/22_TLS_reverse_proxy_crl_revoke

Timestamp:

Apr 9, 2015, 1:02:39 PM (8 years ago)

Author:

Thomas Klute <thomas2.klute@…>

Branches:

asyncio, debian/master, debian/stretch-backports, jessie-backports, main, master, proxy-ticket, upstream

Children:

73f6f12

Parents:

8b472af

Message:

Set GnuTLS priorities for proxy connections separately

Until now, proxy connections were configured with the same priorities as
the server side. This commit introduces the new configuration option
"GnuTLSProxyPriorities" to set the priorities for proxy connections
separately. Note that GnuTLSProxyPriorities MUST be set when
SSLProxyEngine is enabled.

Since the parameters to GnuTLSPriorities and GnuTLSProxyPriorities need
the same processing, mgs_set_priorities has been rewritten to select the
priority cache to write to based on the option name, rather than adding
a new function to handle GnuTLSProxyPriorities.

File:

• test/tests/22_TLS_reverse_proxy_crl_revoke/apache.conf (modified) (1 diff)

test/tests/22_TLS_reverse_proxy_crl_revoke/apache.conf

@@ -16 +16 @@
  GnuTLSProxyCAFile      authority/x509.pem
  GnuTLSProxyCRLFile     ${PWD}/crl.pem
+ GnuTLSProxyPriorities  NORMAL
  ProxyPass /proxy/ https://${BACKEND_HOST}:${BACKEND_PORT}/
  ProxyPassReverse /proxy/ https://${BACKEND_HOST}:${BACKEND_PORT}/