Make proxy_ssl_verify_depth configurable for external autoamte
When automate is used to deploy chef-server, its possible to configure
an automate data collector endpoint for it to talk to. This change
allows you to configure the proxy_ssl_verify_depth for such cases.
Fixes
proxy_read_timeout 300;
proxy_ssl_trusted_certificate {{pkg.svc_config_path}}/root_ca.crt;
proxy_ssl_verify on;
+ proxy_ssl_verify_depth {{ cfg.ngx.http.ssl_verify_depth }};
error_page 404 =404 /404.html;
proxy_ssl_trusted_certificate {{pkg.svc_config_path}}/root_ca.crt;
proxy_ssl_protocols TLSv1.2 TLSv1.3;
proxy_ssl_verify on;
- proxy_ssl_verify_depth 2;
proxy_ssl_session_reuse on;
}
proxy_ssl_trusted_certificate {{pkg.svc_config_path}}/root_ca.crt;
proxy_ssl_protocols TLSv1.2 TLSv1.3;
proxy_ssl_verify on;
- proxy_ssl_verify_depth 2;
proxy_ssl_session_reuse on;
proxy_pass https://automate-gateway;
proxy_ssl_trusted_certificate {{pkg.svc_config_path}}/root_ca.crt;
proxy_ssl_protocols TLSv1.2 TLSv1.3;
proxy_ssl_verify on;
- proxy_ssl_verify_depth 2;
proxy_ssl_session_reuse on;
proxy_pass https://automate-gateway;
proxy_ssl_trusted_certificate {{pkg.svc_config_path}}/root_ca.crt;
proxy_ssl_protocols TLSv1.2 TLSv1.3;
proxy_ssl_verify on;
- proxy_ssl_verify_depth 2;
proxy_ssl_session_reuse on;
}
proxy_ssl_trusted_certificate {{pkg.svc_config_path}}/root_ca.crt;
proxy_ssl_protocols TLSv1.2 TLSv1.3;
proxy_ssl_verify on;
- proxy_ssl_verify_depth 2;
proxy_ssl_session_reuse on;
}
proxy_ssl_trusted_certificate {{pkg.svc_config_path}}/root_ca.crt;
proxy_ssl_protocols TLSv1.2 TLSv1.3;
proxy_ssl_verify on;
- proxy_ssl_verify_depth 2;
proxy_ssl_session_reuse on;
}
proxy_ssl_trusted_certificate {{pkg.svc_config_path}}/root_ca.crt;
proxy_ssl_protocols TLSv1.2 TLSv1.3;
proxy_ssl_verify on;
- proxy_ssl_verify_depth 2;
proxy_ssl_session_reuse on;
}
}
