1
0
Fork 0
mirror of https://github.com/gocsaf/csaf.git synced 2025-12-22 05:40:11 +01:00
Commit graph

18 commits

Author SHA1 Message Date
Bernhard Reiter
d82be5c69e
Improve client cert setup instructions
* Add hint that the used client certification is logged by default
   when accessing the upload interface of the provider.

resolve #99
2022-04-13 17:59:16 +02:00
Bernhard Reiter
f04473874a
Improve client cert setup instructions
* Rephrase slightly and add hint that the issuer config
   will be checked against the `$ssl_client_i_dn` variable, so the
   example serves both uses.

resolve #46
2022-04-13 11:53:21 +02:00
bernhardreiter bernhardreiter@users.noreply.github.com
8711ea67fe Apply automatic changes 2022-04-12 14:06:26 +00:00
Fadi Abbud
9bbe3e1eb8
Add scripts for integration test setup and docs generation
* Add an OpenPGP test keypair.
 * Move script parts of documentation into script, so they can be used on a fresh Ubuntu 20.04 system
   for within a github action to setup a csaf_provider and upload documents to it for an integration test.
 * Use dineshsonachalam/markdown-autodocs in github action to automatically
   insert lines from the scripts into the docs.

Co-authored-by: Bernhard Reiter <bernhard@intevation.de>
2022-04-08 10:04:34 +02:00
Fadi Abbud
43c9a25c34 Improve documentation (client-certificate-setup.md) 2022-03-25 07:45:02 +01:00
Fadi Abbud
782d653e59 Issuer documentation
* Documentation for the "issuer" option of the provider.
* More info of the format of the accepted file
* Print out the value of `SSL_CLIENT_I_DN` also when it is not match the issuer.
2022-03-24 16:46:47 +01:00
Fadi Abbud
1a2af34df0 Add example to README (client-certificate-setup.md) 2022-03-24 09:36:59 +01:00
Fadi Abbud
1c59b671d5 Improve documentation 2022-03-03 11:22:41 +01:00
Fadi Abbud
cbf39f9806 Documentation 2022-02-22 11:06:51 +01:00
Fadi Abbud
a5d64a4038 Add info to one command (client-certificate-setup.md) 2022-02-18 14:40:31 +01:00
Fadi Abbud
d451cc3908 (minor) Fix one option value 2022-02-18 13:57:45 +01:00
Bernhard Reiter
f20a9e2da6
Merge branch 'client-certificate' of github.com:csaf-poc/csaf_distribution into client-certificate 2022-02-15 18:21:41 +01:00
Bernhard Reiter
2905a30cc0
Improve tls client cert handling
* Improve nginx setup to transfer auth information to the fcgiwrap
 backend.
 * Add instructions for creating client certs for testing.
 * Add debug output to see if and which client cert has been used when
   calling the csaf_provider.go .
2022-02-15 18:20:24 +01:00
Bernhard Reiter
ae776306e2
Fix typo 2022-02-14 16:38:40 +01:00
Bernhard Reiter
ef402259a1
Improve client cert setup
* remove cert creation, as it will be described in a different
   file.
2022-02-14 13:24:22 +01:00
Fadi Abbud
078ccdbd69 Fix Typo 2022-02-09 16:30:32 +01:00
Fadi Abbud
dd8378fe19 Use recommended ciphers and typo
* "des3" --> "aes256"
2022-01-12 14:24:21 +01:00
Fadi Abbud
3281387087 Configure nginx for client certificate authentication 2022-01-12 12:03:15 +01:00