self-hosted/dockerfiles
1
0
Fork 0
mirror of https://github.com/vimagick/dockerfiles.git synced 2024-12-23 01:39:27 +02:00
Code Issues Releases Activity

allow verify certificate chain in client mode (optional)

Browse Source 
* `verifyChain` allows stunnel to verify the remote certificate chain. the default is still no, so it should keep backwards compatibility.
* `CAfile` points to a file that should exist on Alpine and includes the root certificates. It has no effect unless `verifyChain` is set to yes.
This commit is contained in:
gingerlime 2017-12-28 14:43:46 +07:00 committed by GitHub
parent 39546fe58f
commit 079fdc9300
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
stunnel/docker-entrypoint.sh
View File

@ -10,6 +10,8 @@ socket = l:TCP_NODELAY=1
socket = r:TCP_NODELAY=1 socket = r:TCP_NODELAY=1
cert = /etc/stunnel/stunnel.pem cert = /etc/stunnel/stunnel.pem
client = ${CLIENT:-no} client = ${CLIENT:-no}
verifyChain = ${VERIFY_CHAIN:-no}
CAfile = /etc/ssl/cert.pem
[${SERVICE}] [${SERVICE}]
accept = ${ACCEPT} accept = ${ACCEPT}