From 5bfb83d075ab3c72425613a27a4f79a40aee50cb Mon Sep 17 00:00:00 2001
From: Adar Nimrod <nimrod@shore.co.il>
Date: Thu, 3 Mar 2022 20:17:04 +0200
Subject: [PATCH] Move mispalced proxy_ssl_name statement.
It has a hard-coded server name, it should be in the that server's
config.
---
snippets/ldap-auth.conf | 1 +
snippets/proxy-ssl.conf | 1 -
2 files changed, 1 insertion(+), 1 deletion(-)
diff --git a/snippets/ldap-auth.conf b/snippets/ldap-auth.conf
index 822c440..cba7d38 100644
--- a/snippets/ldap-auth.conf
+++ b/snippets/ldap-auth.conf
@@ -4,6 +4,7 @@ location = /validate {
proxy_pass https://auth.shore.co.il/validate;
proxy_http_version 1.1;
include snippets/proxy-ssl.conf;
+ proxy_ssl_name auth.shore.co.il;
internal;
proxy_pass_request_body off;
proxy_set_header Content-Length "";
diff --git a/snippets/proxy-ssl.conf b/snippets/proxy-ssl.conf
index b83886a..547d081 100644
--- a/snippets/proxy-ssl.conf
+++ b/snippets/proxy-ssl.conf
@@ -1,5 +1,4 @@
proxy_ssl_verify on;
proxy_ssl_verify_depth 3;
-proxy_ssl_name auth.shore.co.il;
proxy_ssl_server_name on;
proxy_ssl_trusted_certificate /etc/ssl/certs/ca-certificates.crt;
--
GitLab