* Reworked evhtp restconf config to only use clixon-restconf.yang and marked local restconf options as obsolete
* Extended clicon-config with clixon-restconf for local config * Removed obsolete CLICON_TRANSACTION_MOD
This commit is contained in:
parent
3d10c3bfcb
commit
0b948248e4
42 changed files with 308 additions and 887 deletions
|
|
@ -99,15 +99,22 @@ For example, in FreeBSD, add:
|
|||
|
||||
## https
|
||||
|
||||
For fcgi/nginx you need to setup https in the nginx config file, independently of clixon.
|
||||
|
||||
If you use evhtp with `configure --with-restconf=evhtp`, you can prepend the tests with RCPROTO=https which will run all restconf tests with SSL https and server certs.
|
||||
|
||||
Ensure the server keys are in order, as follows.
|
||||
|
||||
If you already have server certs, ensure CLICON_SSL_SERVER_CERT and CLICON_SSL_SERVER_KEY points to them.
|
||||
If you already have server certs, ensure the RESTCONF variable in lib.sh points to them, by default the config is
|
||||
```
|
||||
<server-cert-path>/etc/ssl/certs/clixon-server-crt.pem</server-cert-path>
|
||||
<server-key-path>/etc/ssl/private/clixon-server-key.pem</server-key-path>
|
||||
<server-ca-cert-path>/etc/ssl/certs/clixon-ca-crt.pem</server-ca-cert-path>
|
||||
```
|
||||
|
||||
If you do not have them, generate self-signed certs, eg as follows:
|
||||
```
|
||||
openssl req -x509 -nodes -newkey rsa:4096 -keyout /etc/ssl/private/clixon-server-key.pem -out /etc/ssl/certs/clixon-server-crt.pem -days 365
|
||||
```
|
||||
|
||||
There are also client-cert tests, eg test_ssl*.sh
|
||||
There are also client-cert tests, eg `test_ssl_certs.sh`
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue