You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@trafficcontrol.apache.org by de...@apache.org on 2018/06/14 18:05:21 UTC

[trafficcontrol] 09/20: config fixes

This is an automated email from the ASF dual-hosted git repository.

dewrich pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/trafficcontrol.git

commit a14fef8a24978cf061db5f00013b0c5ed2efb7b0
Author: Dan Kirkwood <da...@gmail.com>
AuthorDate: Tue Jun 5 20:01:43 2018 +0000

    config fixes
---
 infrastructure/cdn-in-a-box/traffic_ops/Dockerfile-go | 1 +
 infrastructure/cdn-in-a-box/traffic_ops/config.sh     | 9 +++++----
 2 files changed, 6 insertions(+), 4 deletions(-)

diff --git a/infrastructure/cdn-in-a-box/traffic_ops/Dockerfile-go b/infrastructure/cdn-in-a-box/traffic_ops/Dockerfile-go
index b270863..b8a1fac 100644
--- a/infrastructure/cdn-in-a-box/traffic_ops/Dockerfile-go
+++ b/infrastructure/cdn-in-a-box/traffic_ops/Dockerfile-go
@@ -26,6 +26,7 @@ RUN yum -y install nmap-ncat openssl
 
 RUN mkdir -p /opt/traffic_ops/app/bin /opt/traffic_ops/app/conf/production
 COPY --from=trafficops-perl /opt/traffic_ops/app/bin/traffic_ops_golang /opt/traffic_ops/app/bin/traffic_ops_golang 
+COPY --from=trafficops-perl /usr/local/go /usr/local/go
 
 EXPOSE 443
 WORKDIR /opt/traffic_ops/app
diff --git a/infrastructure/cdn-in-a-box/traffic_ops/config.sh b/infrastructure/cdn-in-a-box/traffic_ops/config.sh
index 3c2efe0..6e92c82 100755
--- a/infrastructure/cdn-in-a-box/traffic_ops/config.sh
+++ b/infrastructure/cdn-in-a-box/traffic_ops/config.sh
@@ -42,11 +42,14 @@ do
 	if [[ -z $$v ]]; then echo "$v is unset"; exit 1; fi
 done
 
+key=/server.key
+crt=/server.crt
+
 cat <<-EOF >/opt/traffic_ops/app/conf/cdn.conf
 {
     "hypnotoad" : {
         "listen" : [
-            "https://[::]:60443?cert=$crt&key=$key&verify=0x00&ciphers=AES128-GCM-SHA256:HIGH:!RC4:!MD5:!aNULL:!EDH:!ED"
+            "https://trafficops-perl:60443?cert=$crt&key=$key&verify=0x00&ciphers=AES128-GCM-SHA256:HIGH:!RC4:!MD5:!aNULL:!EDH:!ED"
         ],
         "user" : "trafops",
         "group" : "trafops",
@@ -55,6 +58,7 @@ cat <<-EOF >/opt/traffic_ops/app/conf/cdn.conf
         "workers" : 12
     },
     "traffic_ops_golang" : {
+	"insecure": true,
         "port" : "443",
         "proxy_timeout" : 60,
         "proxy_keep_alive" : 60,
@@ -120,8 +124,5 @@ production:
   open: host=$DB_SERVER port=$DB_PORT user=$DB_USER password=$DB_USER_PASS dbname=$DB_NAME sslmode=disable
 EOF
 
-key=/server.key
-crt=/server.crt
-
 openssl req -newkey rsa:2048 -nodes -keyout $key -x509 -days 365 -out $crt -subj "/C=$CERT_COUNTRY/ST=$CERT_STATE/L=$CERT_CITY/O=$CERT_COMPANY"
 chown trafops:trafops $key $crt

-- 
To stop receiving notification emails like this one, please contact
dewrich@apache.org.