Merge pull request #364 from martinzuern/bugfix/lua-ssl

Fixes lua ssl validation
NREL · May 8, 2017 · 12d005e · 12d005e
2 parents 14c39f9 + 0401147
commit 12d005e
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/config/default.yml b/config/default.yml
@@ -28,6 +28,8 @@ nginx:
   ssl_buffer_size: 1400
   ssl_prefer_server_ciphers: "on"
   ssl_ecdh_curve: secp384r1
+  lua_ssl_trusted_certificate:
+  lua_ssl_verify_depth: 1
   dyups:
     host: 127.0.0.1
     port: 14005

diff --git a/templates/etc/nginx/router.conf.mustache b/templates/etc/nginx/router.conf.mustache
@@ -55,6 +55,10 @@ http {
   lua_shared_dict resolved_hosts {{nginx.shared_dicts.resolved_hosts.size}};
   lua_shared_dict stats {{nginx.shared_dicts.stats.size}};
   lua_shared_dict upstream_checksums {{nginx.shared_dicts.upstream_checksums.size}};
+  {{#nginx.lua_ssl_trusted_certificate}}
+  lua_ssl_trusted_certificate {{nginx.lua_ssl_trusted_certificate}};
+  lua_ssl_verify_depth {{nginx.lua_ssl_verify_depth}};
+  {{/nginx.lua_ssl_trusted_certificate}}
 
   {{#dns_resolver._nameservers_nginx}}
     resolver {{dns_resolver._nameservers_nginx}};