You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@apisix.apache.org by "aiyiyi121 (via GitHub)" <gi...@apache.org> on 2023/03/18 14:26:21 UTC
[GitHub] [apisix] aiyiyi121 opened a new issue, #9109: help request: Can Apisix support IP certificates
aiyiyi121 opened a new issue, #9109:
URL: https://github.com/apache/apisix/issues/9109
### Description
I have a requirement to use an https IP certificate.
I use Alibaba Cloud SLB reverse proxy to connect to my Apisix cluster. This https certificate is issued to the SLB IP address.
I have already added this certificate to Apisix, but when I access through https, I will still be prompted that it is not secure.
Can the Apisix 2.10 version support certificates in the IP format?
### Environment
- APISIX version (run `apisix version`): 2.10
- Operating system (run `uname -a`): centos7
- OpenResty / Nginx version (run `openresty -V` or `nginx -V`): openresty/1.19.3.1
- etcd version, if relevant (run `curl http://127.0.0.1:9090/v1/server_info`):
- APISIX Dashboard version, if relevant:
- Plugin runner version, for issues related to plugin runners:
- LuaRocks version, for installation issues (run `luarocks --version`):
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] tokers commented on issue #9109: help request: Can Apisix support IP certificates
Posted by "tokers (via GitHub)" <gi...@apache.org>.
tokers commented on issue #9109:
URL: https://github.com/apache/apisix/issues/9109#issuecomment-1475111790
Also, could you checkout the specific reason that your browser reports the unsafe event.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] help request: Can Apisix support IP certificates [apisix]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] closed issue #9109: help request: Can Apisix support IP certificates
URL: https://github.com/apache/apisix/issues/9109
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] help request: Can Apisix support IP certificates [apisix]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on issue #9109:
URL: https://github.com/apache/apisix/issues/9109#issuecomment-1978391686
This issue has been marked as stale due to 350 days of inactivity. It will be closed in 2 weeks if no further activity occurs. If this issue is still relevant, please simply write any comment. Even if closed, you can still revive the issue at any time or discuss it on the dev@apisix.apache.org list. Thank you for your contributions.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] help request: Can Apisix support IP certificates [apisix]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on issue #9109:
URL: https://github.com/apache/apisix/issues/9109#issuecomment-2009181241
This issue has been closed due to lack of activity. If you think that is incorrect, or the issue requires additional review, you can revive the issue at any time.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] tokers commented on issue #9109: help request: Can Apisix support IP certificates
Posted by "tokers (via GitHub)" <gi...@apache.org>.
tokers commented on issue #9109:
URL: https://github.com/apache/apisix/issues/9109#issuecomment-1475488227
So what are the SAN sections in the certificate that you want the APISIX to return?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] tokers commented on issue #9109: help request: Can Apisix support IP certificates
Posted by "tokers (via GitHub)" <gi...@apache.org>.
tokers commented on issue #9109:
URL: https://github.com/apache/apisix/issues/9109#issuecomment-1475111687
Did you try to add the ip addresses to the SNI list of the SSL object?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] aiyiyi121 commented on issue #9109: help request: Can Apisix support IP certificates
Posted by "aiyiyi121 (via GitHub)" <gi...@apache.org>.
aiyiyi121 commented on issue #9109:
URL: https://github.com/apache/apisix/issues/9109#issuecomment-1475235520
> Did you try to add the ip addresses to the SNI list of the SSL object?
I'm sure it has been added to the SNI list of the SSL object.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] aiyiyi121 commented on issue #9109: help request: Can Apisix support IP certificates
Posted by "aiyiyi121 (via GitHub)" <gi...@apache.org>.
aiyiyi121 commented on issue #9109:
URL: https://github.com/apache/apisix/issues/9109#issuecomment-1475233106
> Did you try to add the ip addresses to the SNI list of the SSL object?
I'm sure it has been added to the SNI list of the SSL object.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] aiyiyi121 commented on issue #9109: help request: Can Apisix support IP certificates
Posted by "aiyiyi121 (via GitHub)" <gi...@apache.org>.
aiyiyi121 commented on issue #9109:
URL: https://github.com/apache/apisix/issues/9109#issuecomment-1475501895
This certificate contains three IPs, and I hope that the authentication information it returns contains the IP address I requested.
For example, when I request nginx, it can return the correct IP certificate information
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] aiyiyi121 commented on issue #9109: help request: Can Apisix support IP certificates
Posted by "aiyiyi121 (via GitHub)" <gi...@apache.org>.
aiyiyi121 commented on issue #9109:
URL: https://github.com/apache/apisix/issues/9109#issuecomment-1475238778
> Also, could you checkout the specific reason that your browser reports the unsafe event.
When I access through `https://ip`, its certificate was identified as another domain name certificate that I added. Cleaning up the cache is still the case.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org