Skip to content
Snippets Groups Projects

daemon/tls: use system CA with TLS_FORWARD policy

Merged Grigorii Demidov requested to merge tls-system-store into master
All threads resolved!

Should close #310 (closed)

when user want to use system CA it must omit ca_file parameter

policy.add(
   policy.all(
      policy.TLS_FORWARD({{ "127.0.0.1@53003", hostname='res.example.com' }})
   )
)
Edited by Grigorii Demidov

Merge request reports

Loading
Loading

Activity

Filter activity
  • Approvals
  • Assignees & reviewers
  • Comments (from bots)
  • Comments (from users)
  • Commits & branches
  • Edits
  • Labels
  • Lock status
  • Mentions
  • Merge request status
  • Tracking
  • Grigorii Demidov changed the description

    changed the description

  • Grigorii Demidov changed the description

    changed the description

  • Grigorii Demidov unmarked as a Work In Progress

    unmarked as a Work In Progress

  • Petr Špaček resolved all discussions

    resolved all discussions

  • Petr Špaček added 35 commits

    added 35 commits

    • e2e41b49...580a7ed4 - 33 commits from branch master
    • 8c0d6dfb - daemon/tls: use system CA with TLS_FORWARD policy
    • 8dae311e - daemon/tls: system CA's are used by default with TLS_FORWARD policy when ca_file…

    Compare with previous version

  • Petr Špaček resolved all discussions

    resolved all discussions

  • Petr Špaček added 6 commits

    added 6 commits

    • c3627171...bba85538 - 3 commits from branch master
    • 325f62b1 - daemon/tls: use system CA with TLS_FORWARD policy
    • 966430d7 - daemon/tls: system CA's are used by default with TLS_FORWARD policy when ca_file…
    • bd3009ac - daemon/tls: document new behavior

    Compare with previous version

  • merged

  • Petr Špaček mentioned in commit 01282a73

    mentioned in commit 01282a73

  • Please register or sign in to reply
    Loading