mir/kea
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/kea synced 2025-08-30 13:37:55 +00:00
Code Issues Releases Wiki Activity

[5282] Applied Thomas' proposed diff

Browse Source
This commit is contained in:
Francis Dupont 2017-09-21 23:58:06 +02:00
parent 44592f2737
commit 04cc8f35c3
2 changed files with 10 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
doc/examples/https/nginx/kea-nginx.conf
View File

@ -39,7 +39,7 @@
#
# curl -k --key kea-client.key --cert kea-client.crt -X POST \
# -H Content-Type:application/json -d '{ "command": "list-commands" }' \
# https://kea.example.org/kea
# https://kea.example.org
#
# On some curl running on macOS the crypto library requires a PKCS#12
# bundle with the private key and the certificate as the cert argument.
@ -52,7 +52,7 @@
#
# curl -k --cert kea-client.p12:kea -X POST \
# -H Content-Type:application/json -d '{ "command": "list-commands" }' \
# https://kea.example.org/kea
# https://kea.example.org
#
# nginx configuration starts here.
@ -77,11 +77,12 @@ http {
# Enable verification of the client certificate.
ssl_verify_client on;
# For URLs such as https://kea.example.org/kea, forward the
# requests to http://127.0.0.1:8080.
# Use the / location for URLs with no path.
location /kea {
proxy_pass http://127.0.0.1:8080;
# For the URL https://kea.example.org forward the
# requests to http://127.0.0.1:8000.
# Since kea-shell doesn't currently support URLs with paths we
# use location /
location / {
proxy_pass http://127.0.0.1:8000;
}
}
}

4
doc/examples/https/shell/kea-stunnel.conf
View File

@ -12,7 +12,7 @@
; (i.e. eavesdropping) and active (i.e. man-in-the-middle) attacks
;
; kea-shell -- 127.0.0.1 port 8080 -->
; stunnel == 127.0.0.1 port 8443 ==>
; stunnel == 127.0.0.1 port 443 ==>
; nginx -- 127.0.0.1 port 8000 -->
; kea-agent
;
@ -31,7 +31,7 @@
accept = 127.0.0.1:8080
; forward requests to the https peer
connect = 127.0.0.1:8443
connect = 127.0.0.1:443
; client certificate
cert = kea-client.crt