DevFW-CICD/ingress-nginx-helm
6
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

properly handle default and custom default certs in dynamic ssl mode

Browse source
This commit is contained in:
Elvin Efendi 2019-04-12 00:38:03 -04:00
parent f067712824
commit 417af76e97
3 changed files with 32 additions and 26 deletions
Download patch file Download diff file Expand all files Collapse all files

8
cmd/nginx/main.go
View file

@ -55,7 +55,7 @@ const (
// client code is overriding it.
defaultBurst = 1e6
fakeCertificate = "default-fake-certificate"
fakeCertificateName = "default-fake-certificate"
)
func main() {
@ -116,12 +116,12 @@ func main() {
if err != nil {
klog.Fatalf("unexpected error creating fake SSL Cert: %v", err)
}
err = ssl.StoreSSLCertOnDisk(fs, fakeCertificate, sslCert)
err = ssl.StoreSSLCertOnDisk(fs, fakeCertificateName, sslCert)
if err != nil {
klog.Fatalf("unexpected error storing fake SSL Cert: %v", err)
}
conf.FakeCertificatePath = sslCert.PemFileName
conf.FakeCertificateSHA = sslCert.PemSHA
conf.FakeCertificate = sslCert
klog.Infof("Created fake certificate with PemFileName: %v", conf.FakeCertificate.PemFileName)
// end create default fake SSL certificates
conf.Client = kubeClient