change to use wildcard certificates
This commit is contained in:
		
							parent
							
								
									0272c062d3
								
							
						
					
					
						commit
						452c255314
					
				
					 4 changed files with 24 additions and 14 deletions
				
			
		| 
						 | 
				
			
			@ -51,8 +51,8 @@ server {
 | 
			
		|||
	http2 on;
 | 
			
		||||
	server_name ${NGINX_SERVERNAME};
 | 
			
		||||
 | 
			
		||||
	ssl_certificate /etc/nginx/ssl/certs/sso.base23.de.crt;
 | 
			
		||||
	ssl_certificate_key /etc/nginx/ssl/certs/sso.base23.de.key;
 | 
			
		||||
	ssl_certificate /etc/nginx/ssl/certs/_.base23.de.crt;
 | 
			
		||||
	ssl_certificate_key /etc/nginx/ssl/certs/_.base23.de.key;
 | 
			
		||||
	ssl_session_timeout ${NGINX_SSL_SESSION_TIMEOUT};
 | 
			
		||||
	ssl_session_cache ${NGINX_SSL_SESSION_CACHE};
 | 
			
		||||
 | 
			
		||||
| 
						 | 
				
			
			@ -71,7 +71,7 @@ server {
 | 
			
		|||
	ssl_stapling_verify ${NGINX_SSL_STAPLING_VERIFY};
 | 
			
		||||
 | 
			
		||||
	# verify chain of trust of OCSP response using Root CA and Intermediate certs
 | 
			
		||||
	ssl_trusted_certificate /etc/nginx/ssl/certs/sso.base23.de.issuer.crt;
 | 
			
		||||
	ssl_trusted_certificate /etc/nginx/ssl/certs/_.base23.de.issuer.crt;
 | 
			
		||||
 | 
			
		||||
	# replace with the IP address of your resolver
 | 
			
		||||
	resolver ${NGINX_RESOLVER};
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
		Loading…
	
	Add table
		Add a link
		
	
		Reference in a new issue