Mercurial > hg > nginx-tests

comparison ssl_engine_keys.t @ 1328:a682c219af45

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Tests: updated ssl_engine_keys.t test. After merge with libp11, pkcs11 engine shared object was renamed from "engine_pkcs11.so" to "pkcs11.so". Changed configuration accordingly. Additionally, changed "init" to "1" in the engine configuration. This keeps pkcs11 engine loaded and prevents segmentation faults observed during nginx shutdown. While here, restored correct order of ssl_certificate and ssl_certificate_key.
author Maxim Dounin <mdounin@mdounin.ru>
date Tue, 22 May 2018 17:46:59 +0300
parents 0af58b78df35
children 44973a23b031
comparison
equal deleted inserted replaced
1327:ecbd984ffe04 1328:a682c219af45
45 server { 45 server {
46 listen 127.0.0.1:8081 ssl; 46 listen 127.0.0.1:8081 ssl;
47 listen 127.0.0.1:8080; 47 listen 127.0.0.1:8080;
48 server_name localhost; 48 server_name localhost;
49 49
50 ssl_certificate localhost.crt;
50 ssl_certificate_key engine:pkcs11:slot_0-id_00; 51 ssl_certificate_key engine:pkcs11:slot_0-id_00;
51 ssl_certificate localhost.crt;
52 52
53 location / { 53 location / {
54 # index index.html by default 54 # index index.html by default
55 } 55 }
56 location /proxy { 56 location /proxy {
79 [engine_section] 79 [engine_section]
80 pkcs11 = pkcs11_section 80 pkcs11 = pkcs11_section
81 81
82 [pkcs11_section] 82 [pkcs11_section]
83 engine_id = pkcs11 83 engine_id = pkcs11
84 dynamic_path = /usr/local/lib/engines/engine_pkcs11.so 84 dynamic_path = /usr/local/lib/engines/pkcs11.so
85 MODULE_PATH = /usr/local/lib/softhsm/libsofthsm.so 85 MODULE_PATH = /usr/local/lib/softhsm/libsofthsm.so
86 init = 0 86 init = 1
87 PIN = 1234 87 PIN = 1234
88 88
89 [ req ] 89 [ req ]
90 default_bits = 1024 90 default_bits = 1024
91 encrypt_key = no 91 encrypt_key = no