Commit 8d738c96 authored by nimrod's avatar nimrod
Browse files

Validate secure proxied servers. 

Use the CA certificate bundle and set the verification depth (for
intermediate certificates). Right now for Vouch.
parent dcd85176

conf.d/global.conf

+10 −6
Original line number Diff line number Diff line
@@ -5,3 +5,7 @@ tcp_nopush on; 
tcp_nodelay                     on;

server_tokens                   off;

include                         snippets/common-headers.conf;

# Validate proxied SSL connections.

proxy_ssl_trusted_certificate   /etc/ssl/certs/ca-certificates.crt;

proxy_ssl_verify                on;

proxy_ssl_verify_depth          4;