Displaying 4 results from an estimated 4 matches for "ssl_client_i_dn".
2011 Jul 08
2
Puppetmaster setup with separate CA server configuration help
...proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Client-Verify $ssl_client_verify;
proxy_set_header X-Client-DN $ssl_client_s_dn;
proxy_set_header X-SSL-Subject $ssl_client_s_dn;
proxy_set_header X-SSL-Issuer $ssl_client_i_dn;
proxy_buffer_size 16k;
proxy_buffers 8 32k;
proxy_busy_buffers_size 64k;
proxy_temp_file_write_size 64k;
proxy_read_timeout 65;
location ^~ /production/certificate/ca {
proxy_pass https://puppetca;
}
location...
2011 Mar 14
1
slight security problem
...eader X-Forwarded-For
$proxy_add_x_forwarded_for;
proxy_set_header X-Client-Verify SUCCESS;
proxy_set_header X-Client-DN $ssl_client_s_dn;
proxy_set_header X-SSL-Subject $ssl_client_s_dn;
proxy_set_header X-SSL-Issuer $ssl_client_i_dn;
proxy_read_timeout 65;
location / {
proxy_pass http://puppet-production;
}
}
</code>
and here is how i start puppetmasterd:
/usr/bin/thin start -P /var/run/puppet/$ROLE_NAME.pid -e production --
servers 5 --daemonize --socket /var/run/puppet/$ROLE_NAM...
2009 Jul 21
2
Toward a simple Nginx configuration for Puppet Mongrel
...$host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Client-Verify $ssl_client_verify;
proxy_set_header X-SSL-Subject $ssl_client_s_dn;
proxy_set_header X-SSL-Issuer $ssl_client_i_dn;
proxy_read_timeout 65;
}
}
I really hope those patches could be merged in the official Nginx
distribution, meanwhile it is easy to patch and build your own nginx (or
package of).
Please see the following blog post for more information and access to
those patches:
http://www.masterzen...
2006 Jul 17
7
SSL [X.509] Authentication in Rails?
Been doing some research but haven''t been able to determine much - has
anyone had any experience parsing incoming [on the request] x.509
certificates? Specifically, getting name, CA, etc. Here''s how you do in
Java Servlets for reference:
X509Certificate[] certs = (X509Certificate[])
request.getAttribute("javax.servlet.request.X509Certificate");
Thanks.
--