capistrano-unicorn-nginx 5.0.0 → 5.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA1:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: ab9d63e0a6ffbdbe3617964ec054b8ebac836061
|
4
|
+
data.tar.gz: e41c8391700c762badeb37ebf246f69d216e22e5
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: de24ca89f125378105b01be4478e9a4af017f16b7fb4c0172c07e9e0d3c6c4542a24fe80c603c6ab26365b2bcbc60f1f276b7eac65ddd4980e763c8d71ee2f71
|
7
|
+
data.tar.gz: 8053ee9072e4055ab2234d7d49224a15219f6c0bbfe079db108534382c6fcafbe866c4864a9ceed1e440d9edd21aeac6c50ffc4b67f6d990aef8db6fe305d589
|
data/CHANGELOG.md
CHANGED
@@ -2,6 +2,10 @@
|
|
2
2
|
|
3
3
|
### master
|
4
4
|
|
5
|
+
### v5.1.0, 2018-02-08
|
6
|
+
- Remove raw certificate from nginx header. This can result in 400 errors in
|
7
|
+
conjunction with unicorn (some versions). Use ssl_client_cert instead
|
8
|
+
|
5
9
|
### v5.0.0, 2018-02-08
|
6
10
|
- Remove `nginx_pass_ssl_client_cert` in favor of nginx_use_client_ssl
|
7
11
|
- Add `nginx_server_ssl_ports` to specify which ports nginx should listen on
|
@@ -24,7 +24,7 @@ namespace :load do
|
|
24
24
|
# - SUCCESS if a certificate was supplied that was signed by the CA.
|
25
25
|
# - FAILED if a certificate was supplied that was not signed by the CA.
|
26
26
|
# - NONE if no certificate was supplied
|
27
|
-
# - X-Client-
|
27
|
+
# - X-Client-Cert: the PEM version of the supplied certificate
|
28
28
|
set :nginx_use_client_ssl, false
|
29
29
|
set :nginx_ssl_client_ca, '' # the location of the root CA (on server)
|
30
30
|
set :nginx_ssl_cert, -> { nginx_default_ssl_cert_file_name }
|
@@ -52,7 +52,7 @@ server {
|
|
52
52
|
proxy_set_header X-Client-Dn $ssl_client_s_dn;
|
53
53
|
proxy_set_header X-Client-Serial $ssl_client_serial;
|
54
54
|
proxy_set_header X-Client-Verify $ssl_client_verify;
|
55
|
-
proxy_set_header X-Client-
|
55
|
+
proxy_set_header X-Client-Cert $ssl_client_cert;
|
56
56
|
<% end -%>
|
57
57
|
|
58
58
|
proxy_pass http://unicorn_<%= fetch(:nginx_config_name) %>;
|
metadata
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: capistrano-unicorn-nginx
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 5.
|
4
|
+
version: 5.1.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Ruben Stranders
|
@@ -9,7 +9,7 @@ authors:
|
|
9
9
|
autorequire:
|
10
10
|
bindir: bin
|
11
11
|
cert_chain: []
|
12
|
-
date: 2018-02-
|
12
|
+
date: 2018-02-09 00:00:00.000000000 Z
|
13
13
|
dependencies:
|
14
14
|
- !ruby/object:Gem::Dependency
|
15
15
|
name: capistrano
|