moony/dockerfiles
1
2
Fork 0
mirror of https://github.com/vimagick/dockerfiles synced 2024-06-16 11:58:47 +00:00
Code Issues Releases Wiki Activity

Compare commits

base: moony:de230c4b903ed266a6db0f21fd3025512df3f478
Branches Tags
moony:master
...
compare: moony:94ce218f4f86cc8bbf1279883f00665e3dbcc646
Branches Tags
moony:master

2 Commits
de230c4b90 ... 94ce218f4f

Author SHA1 Message Date
gingerlime
94ce218f4f
Merge 079fdc930027316c17d2c58edb5dfbcc7537b588 into 3bdbe9043400f52a4f4b08e0be15ad8d42b72121 2024-02-08 18:56:55 -07:00
gingerlime
079fdc9300
allow verify certificate chain in client mode (optional) 
* `verifyChain` allows stunnel to verify the remote certificate chain. the default is still no, so it should keep backwards compatibility.
* `CAfile` points to a file that should exist on Alpine and includes the root certificates. It has no effect unless `verifyChain` is set to yes.
 2017-12-28 14:43:46 +07:00
1 changed files with 2 additions and 0 deletions
Show Stats Expand all files Collapse all files

2
stunnel/docker-entrypoint.sh
View File

@ -10,6 +10,8 @@ socket = l:TCP_NODELAY=1
socket = r:TCP_NODELAY=1 socket = r:TCP_NODELAY=1
cert = /etc/stunnel/stunnel.pem cert = /etc/stunnel/stunnel.pem
client = ${CLIENT:-no} client = ${CLIENT:-no}
verifyChain = ${VERIFY_CHAIN:-no}
CAfile = /etc/ssl/cert.pem
[${SERVICE}] [${SERVICE}]
accept = ${ACCEPT} accept = ${ACCEPT}