respect SSL_CERT_FILE

3scale · Oct 23, 2017 · ca8e14a · ca8e14a
1 parent 79b1573
commit ca8e14a
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 2 deletions.
diff --git a/apicast/.s2i/environment b/apicast/.s2i/environment
@@ -1 +1,2 @@
 OPENSSL_VERIFY=false
+SSL_CERT_FILE=/etc/ssl/certs/ca-bundle.crt
diff --git a/apicast/.s2iignore b/apicast/.s2iignore
@@ -1,3 +1,3 @@
-.s2i
+.s2i/bin
 conf/ca-bundle.crt
 apicast.d/proxy_ssl.conf
diff --git a/apicast/libexec/run b/apicast/libexec/run
@@ -2,7 +2,9 @@
 
 ssl=$(mktemp -q)
 
+certificate=${SSL_CERT_FILE:-"$(pwd)/conf/ca-bundle.crt"}
+
 echo "lua_ssl_verify_depth 5;" >> "${ssl}"
-echo "lua_ssl_trusted_certificate \"$(pwd)/conf/ca-bundle.crt\";" >> "${ssl}"
+echo "lua_ssl_trusted_certificate \"${certificate}\";" >> "${ssl}"
 
 exec resty --http-include "${ssl}" "libexec/$(basename "$0").lua" "$@"
Original file line number	Diff line number	Diff line change
		@@ -1 +1,2 @@
		OPENSSL_VERIFY=false
		SSL_CERT_FILE=/etc/ssl/certs/ca-bundle.crt