DevFW-CICD/ingress-nginx-helm
15
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge pull request #1572 from estaleiro/cacertificate-secfix

Browse source 
Certificate Auth Bugfix
This commit is contained in:
Manuel Alejandro de Brito Fontes 2017-10-24 15:20:11 -03:00 committed by GitHub
commit d965ee8108
1 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
rootfs/etc/nginx/template/nginx.tmpl
View file

@ -720,8 +720,11 @@ stream {
# Pass the extracted client certificate to the backend # Pass the extracted client certificate to the backend
{{ if not (empty $server.CertificateAuth.CAFileName) }} {{ if not (empty $server.CertificateAuth.CAFileName) }}
proxy_set_header ssl-client-cert $ssl_client_escaped_cert; proxy_set_header ssl-client-cert $ssl_client_raw_cert;
proxy_set_header ssl-client-verify $ssl_client_verify; proxy_set_header ssl-client-verify $ssl_client_verify;
{{ else }}
proxy_set_header ssl-client-cert "";
proxy_set_header ssl-client-verify "";
{{ end }} {{ end }}
# Allow websocket connections # Allow websocket connections