Skip to content

Commit

Permalink
Adding the DAO SSL certificate as a lua_ssl_trusted_certificate
Browse files Browse the repository at this point in the history
  • Loading branch information
subnetmarco authored and thibaultcha committed Jan 30, 2016
1 parent 54f9978 commit 309a2f3
Showing 1 changed file with 8 additions and 1 deletion.
9 changes: 8 additions & 1 deletion kong/cli/services/nginx.lua
Original file line number Diff line number Diff line change
Expand Up @@ -57,6 +57,13 @@ local function get_current_user()
end

local function prepare_nginx_configuration(configuration, ssl_config)
-- DAO SSL certificate
local lua_ssl_trusted_certificate = (configuration[configuration.database] and
configuration[configuration.database].ssl and
configuration[configuration.database].ssl.enabled and
configuration[configuration.database].ssl.certificate_authority) and
configuration[configuration.database].ssl.certificate_authority or nil

-- Extract nginx config from kong config, replace any needed value
local nginx_config = configuration.nginx
local nginx_inject = {
Expand All @@ -68,7 +75,7 @@ local function prepare_nginx_configuration(configuration, ssl_config)
memory_cache_size = configuration.memory_cache_size,
ssl_cert = ssl_config.ssl_cert_path,
ssl_key = ssl_config.ssl_key_path,
lua_ssl_trusted_certificate = ssl_config.trusted_ssl_cert_path ~= nil and "lua_ssl_trusted_certificate \""..ssl_config.trusted_ssl_cert_path.."\";" or ""
lua_ssl_trusted_certificate = lua_ssl_trusted_certificate ~= nil and "lua_ssl_trusted_certificate \""..lua_ssl_trusted_certificate.."\";" or ""
}

-- Auto-tune
Expand Down

0 comments on commit 309a2f3

Please sign in to comment.