stack
/
squid
1
0
Fork 0
Code Issues Pull Requests 1 Releases Wiki Activity

test: try https_prox
continuous-integration/drone/push Build is passing Details

This commit is contained in:
Giles Bradshaw 2020-08-06 10:06:26 +01:00
parent 1acb2e202d
commit c7a800fd75
4 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
.drone/drone-home.jsonnet
View File

@ -83,8 +83,8 @@ local publicSecrets = import 'lib/public-secrets.libsonnet';
'set -e', 'set -e',
"docker network prune -f", "docker network prune -f",
"cd /stack/squid/myCA", "cd /stack/squid/myCA",
'openssl genrsa -out CA_key.pem 2048', //'openssl genrsa -out CA_key.pem 2048',
'openssl req -x509 -days 600 -new -nodes -key CA_key.pem -out CA_crt.pem -extensions v3_ca -config openssl.cnf -subj "/C=US/ST=California/L=Mountain View/O=Google/OU=Enterprise/CN=MyCA"', //'openssl req -x509 -days 600 -new -nodes -key CA_key.pem -out CA_crt.pem -extensions v3_ca -config openssl.cnf -subj "/C=US/ST=California/L=Mountain View/O=Google/OU=Enterprise/CN=MyCA"',
'cd ..', 'cd ..',
"docker stack rm squid", "docker stack rm squid",
"sleep 60", "sleep 60",

2
.drone/drone-home.yml
View File

@ -50,8 +50,6 @@ steps:
- set -e - set -e
- docker network prune -f - docker network prune -f
- cd /stack/squid/myCA - cd /stack/squid/myCA
- openssl genrsa -out CA_key.pem 2048
- openssl req -x509 -days 600 -new -nodes -key CA_key.pem -out CA_crt.pem -extensions v3_ca -config openssl.cnf -subj "/C=US/ST=California/L=Mountain View/O=Google/OU=Enterprise/CN=MyCA"
- cd .. - cd ..
- docker stack rm squid - docker stack rm squid
- sleep 60 - sleep 60

1
docker-compose.yml
View File

@ -15,6 +15,7 @@ services:
- ./myCA/CA_key.pem:/apps/CA_key.pem - ./myCA/CA_key.pem:/apps/CA_key.pem
ports: ports:
- 3128:3128 - 3128:3128
- 3129:3129
networks: networks:
- appnet - appnet
- externalnet - externalnet

1
docker/squid.intercept.conf
View File

@ -29,6 +29,7 @@ htcp_access deny all
visible_hostname git.local-domain visible_hostname git.local-domain
http_port 3128 ssl-bump generate-host-certificates=on cert=/apps/CA_crt.pem key=/apps/CA_key.pem options=NO_SSLv3 dhparams=/apps/dhparam.pem http_port 3128 ssl-bump generate-host-certificates=on cert=/apps/CA_crt.pem key=/apps/CA_key.pem options=NO_SSLv3 dhparams=/apps/dhparam.pem
https_port 3129 ssl-bump generate-host-certificates=on cert=/apps/CA_crt.pem key=/apps/CA_key.pem options=NO_SSLv3 dhparams=/apps/dhparam.pem
always_direct allow all always_direct allow all
acl excluded_sites ssl::server_name .wellsfargo.com acl excluded_sites ssl::server_name .wellsfargo.com