capistrano-unicorn-nginx 5.1.0 → 5.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA1:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 1b291fd777ca231900bb12eb76a575fba4bc22b0
|
|
4
|
+
data.tar.gz: 4fbfd1809f73ae3cedb93591d431034e24c870dc
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 743a411872d3623fb4136a0b2d05f8e7d2141b9d4046f7a2ae8d81125acb286f59e4884698ae9eade30380ce5dcc4cb9954c465766a8d6453f3e9c49afb7cb86
|
|
7
|
+
data.tar.gz: 3237053470207d58532d7fe3c63e12dabd49bf6fe6587916ee097538e6b69cac8cbc6b7edb70afb5a20eaa4093505a25909a5852a56862221e58df6cb1d14075
|
data/CHANGELOG.md
CHANGED
|
@@ -2,6 +2,10 @@
|
|
|
2
2
|
|
|
3
3
|
### master
|
|
4
4
|
|
|
5
|
+
### v5.2.0, 2018-03-05
|
|
6
|
+
- Allow nginx_ssl_client_ca to be empty, otherwise the setting `optional_no_ca`
|
|
7
|
+
does not seem to work correctly
|
|
8
|
+
|
|
5
9
|
### v5.1.0, 2018-02-08
|
|
6
10
|
- Remove raw certificate from nginx header. This can result in 400 errors in
|
|
7
11
|
conjunction with unicorn (some versions). Use ssl_client_cert instead
|
|
@@ -26,7 +26,7 @@ namespace :load do
|
|
|
26
26
|
# - NONE if no certificate was supplied
|
|
27
27
|
# - X-Client-Cert: the PEM version of the supplied certificate
|
|
28
28
|
set :nginx_use_client_ssl, false
|
|
29
|
-
set :nginx_ssl_client_ca,
|
|
29
|
+
set :nginx_ssl_client_ca, nil # the location of the root CA (on server)
|
|
30
30
|
set :nginx_ssl_cert, -> { nginx_default_ssl_cert_file_name }
|
|
31
31
|
set :nginx_ssl_cert_key, -> { nginx_default_ssl_cert_key_file_name }
|
|
32
32
|
set :nginx_ssl_cert_path, -> { nginx_default_ssl_cert_file_path }
|
|
@@ -7,7 +7,9 @@ server {
|
|
|
7
7
|
ssl_certificate <%= nginx_ssl_cert_file %>;
|
|
8
8
|
ssl_certificate_key <%= nginx_ssl_cert_key_file %>;
|
|
9
9
|
<% if fetch(:nginx_use_client_ssl) -%>
|
|
10
|
+
<% if fetch(:nginx_ssl_client_ca) -%>
|
|
10
11
|
ssl_trusted_certificate <%= nginx_ssl_client_ca %>;
|
|
12
|
+
<% end -%>
|
|
11
13
|
ssl_verify_client optional_no_ca;
|
|
12
14
|
<% end -%>
|
|
13
15
|
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: capistrano-unicorn-nginx
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 5.
|
|
4
|
+
version: 5.2.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Ruben Stranders
|
|
@@ -9,7 +9,7 @@ authors:
|
|
|
9
9
|
autorequire:
|
|
10
10
|
bindir: bin
|
|
11
11
|
cert_chain: []
|
|
12
|
-
date: 2018-
|
|
12
|
+
date: 2018-03-05 00:00:00.000000000 Z
|
|
13
13
|
dependencies:
|
|
14
14
|
- !ruby/object:Gem::Dependency
|
|
15
15
|
name: capistrano
|