tuxmain/rust-rpxy
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

easy support for custom CAs

Browse source 
fixes #183
This commit is contained in:
Aleksandar N. Kostadinov 2024-09-16 02:00:36 +03:00
commit 546e4dd232
No known key found for this signature in database
GPG key ID: DE37CA1CBFB3F811
2 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
docker/README.md
View file

@ -17,6 +17,12 @@ Then, all you need is to mount your `config.toml` as `/etc/rpxy.toml` and certif
See [`docker-compose.yml`](./docker-compose.yml) for the detailed configuration. Note that the file path of keys and certificates must be ones in your docker container.
## Custom CAs for upstream TLS connections
To add a custom certificate, you must use a non-`slim` non-`webpki` image. Then mount `/usr/local/share/ca-certificates` in the container with your desired CAs each in a file like `myca.crt`. The certificates are accepted in PEM format but file extension must be `crt`.
e.g. `-v rpxy/ca-certificates:/usr/local/share/ca-certificates`
## Differences among image tags of Docker Hub and GitHub Container Registry
Differences among tags are summarized as follows.