mirror of
https://github.com/laurivosandi/certidude
synced 2025-09-10 23:41:04 +00:00
Enabled certificate publishing from command-line
Instead of defining environment variables for push server URL-s the URL-s are now fetched from openssl.cnf instead.
This commit is contained in:
0
certidude/templates/__init__.py
Normal file
0
certidude/templates/__init__.py
Normal file
@@ -19,7 +19,7 @@ crlDistributionPoints = {{crl_distribution_points}}
|
||||
emailAddress = {{email_address}}
|
||||
{% endif %}
|
||||
x509_extensions = {{slug}}_cert
|
||||
policy = poliy_{{slug}}
|
||||
policy = policy_{{slug}}
|
||||
|
||||
# Certidude specific stuff, TODO: move to separate section?
|
||||
request_subnets = 10.0.0.0/8 192.168.0.0/16 172.168.0.0/16
|
||||
@@ -28,6 +28,8 @@ admin_subnets = 127.0.0.0/8
|
||||
admin_users =
|
||||
inbox = {{inbox}}
|
||||
outbox = {{outbox}}
|
||||
publish_certificate_url = {{publish_certificate_url}}
|
||||
subscribe_certificate_url = {{subscribe_certificate_url}}
|
||||
|
||||
[policy_{{slug}}]
|
||||
countryName = match
|
||||
|
@@ -12,13 +12,6 @@ callable = app
|
||||
chmod-socket = 660
|
||||
chown-socket = {{username}}:www-data
|
||||
buffer-size = 32768
|
||||
{% if push_server %}
|
||||
env = PUSH_PUBLISH={{push_server}}/publish/%(channel)s
|
||||
env = PUSH_SUBSCRIBE={{push_server}}/subscribe/%(channel)s
|
||||
{% else %}
|
||||
env = PUSH_PUBLISH=http://localhost/event/publish/%(channel)s
|
||||
env = PUSH_SUBSCRIBE=http://localhost/event/subscribe/%(channel)s
|
||||
{% endif %}
|
||||
env = LANG=C.UTF-8
|
||||
env = LC_ALL=C.UTF-8
|
||||
env = KRB5_KTNAME={{kerberos_keytab}}
|
||||
|
Reference in New Issue
Block a user