capistrano-unicorn-nginx 5.0.0 → 5.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 0fa877d749e83b2c34f3b32afe592b02e64c5e2a
-  data.tar.gz: 548a8d063c482223211352b23f9448abc49346c8
+  metadata.gz: ab9d63e0a6ffbdbe3617964ec054b8ebac836061
+  data.tar.gz: e41c8391700c762badeb37ebf246f69d216e22e5
 SHA512:
-  metadata.gz: 5b74ee7655764aa5b1b377fd780d62c6e08ad9a4f3b21cd1c224a81b64d114aaeaaf58c490e09fda1faca0de4f7727a55d5af2eda137449c1e147ab8b226bb19
-  data.tar.gz: e05853236f43bb5d13b33604f5cffc6b8dfc31af551ecc1e4c18cbb9b7d4071428cb0a9757bf8fd45487594b298af1c4eadfc2b83fdc1d002e25adbcf9143ae4
+  metadata.gz: de24ca89f125378105b01be4478e9a4af017f16b7fb4c0172c07e9e0d3c6c4542a24fe80c603c6ab26365b2bcbc60f1f276b7eac65ddd4980e763c8d71ee2f71
+  data.tar.gz: 8053ee9072e4055ab2234d7d49224a15219f6c0bbfe079db108534382c6fcafbe866c4864a9ceed1e440d9edd21aeac6c50ffc4b67f6d990aef8db6fe305d589

data/CHANGELOG.md

@@ -2,6 +2,10 @@
 
 ### master
 
+### v5.1.0, 2018-02-08
+- Remove raw certificate from nginx header. This can result in 400 errors in
+  conjunction with unicorn (some versions). Use ssl_client_cert instead
+
 ### v5.0.0, 2018-02-08
 - Remove `nginx_pass_ssl_client_cert` in favor of nginx_use_client_ssl
 - Add `nginx_server_ssl_ports` to specify which ports nginx should listen on

data/lib/capistrano/tasks/nginx.rake

@@ -24,7 +24,7 @@ namespace :load do
     #   - SUCCESS if a certificate was supplied that was signed by the CA.
     #   - FAILED if a certificate was supplied that was not signed by the CA.
     #   - NONE if no certificate was supplied
-    # - X-Client-Raw-Cert: the raw (PEM) version of the supplied certificate
+    # - X-Client-Cert: the PEM version of the supplied certificate
     set :nginx_use_client_ssl, false
     set :nginx_ssl_client_ca, '' # the location of the root CA (on server)
     set :nginx_ssl_cert, -> { nginx_default_ssl_cert_file_name }

data/lib/capistrano/unicorn_nginx/version.rb

@@ -1,5 +1,5 @@
 module Capistrano
   module UnicornNginx
-    VERSION = '5.0.0'.freeze
+    VERSION = '5.1.0'.freeze
   end
 end

data/lib/generators/capistrano/unicorn_nginx/templates/_default_server_directive.erb

@@ -52,7 +52,7 @@ server {
         proxy_set_header X-Client-Dn $ssl_client_s_dn;
         proxy_set_header X-Client-Serial $ssl_client_serial;
         proxy_set_header X-Client-Verify $ssl_client_verify;
-        proxy_set_header X-Client-Raw-Cert $ssl_client_raw_cert;
+        proxy_set_header X-Client-Cert $ssl_client_cert;
         <% end -%>
 
         proxy_pass http://unicorn_<%= fetch(:nginx_config_name) %>;

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: capistrano-unicorn-nginx
 version: !ruby/object:Gem::Version
-  version: 5.0.0
+  version: 5.1.0
 platform: ruby
 authors:
 - Ruben Stranders
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-02-08 00:00:00.000000000 Z
+date: 2018-02-09 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: capistrano