From e9cc7d004d946d261f8fbee8884e7f3cab4a1f44 Mon Sep 17 00:00:00 2001 From: benoitc Date: Tue, 13 Sep 2011 06:14:58 +0200 Subject: add https support. --- configure | 2 ++ rel/overlay/etc/default.ini | 15 +++++++++++++++ 2 files changed, 17 insertions(+) diff --git a/configure b/configure index 43231b62..0e299604 100755 --- a/configure +++ b/configure @@ -62,6 +62,7 @@ cat > rel/bigcouch.config << EOF {user, "$BIGCOUCH_USER"}. {node_name, "-name bigcouch"}. {cluster_port, 5984}. +{cluster_ssl, 6984}. {backend_port, 5986}. EOF @@ -81,6 +82,7 @@ cat > rel/dev$i.config << EOF {view_dir, "$DIRPATH/rel/tmpdata/dev$i"}. {node_name, "-name dev$i@127.0.0.1"}. {cluster_port, `expr 10000 \* $i + 5984`}. +{cluster_ssl, `expr 10000 \* $i + 6984`}. {backend_port, `expr 10000 \* $i + 5986`}. EOF done diff --git a/rel/overlay/etc/default.ini b/rel/overlay/etc/default.ini index 81c363da..c143ac2d 100644 --- a/rel/overlay/etc/default.ini +++ b/rel/overlay/etc/default.ini @@ -17,6 +17,21 @@ port = {{cluster_port}} backlog = 512 docroot = {{prefix}}/share/www +[chttps] +;cert_file = /full/path/to/server_cert.pem +;key_file = /full/path/to/server_key.pem +;password = somepassword +; set to true to validate peer certificates +verify_ssl_certificates = false +; Path to file containing PEM encoded CA certificates (trusted +; certificates used for verifying a peer certificate). May be omitted if +; you do not want to verify the peer. +;cacert_file = /full/path/to/cacertf +; The verification fun (optionnal) if not specidied, the default +; verification fun will be used. +;verify_fun = {Module, VerifyFun} +ssl_certificate_max_depth = 1 + [httpd] port = {{backend_port}} bind_address = 127.0.0.1 -- cgit v1.2.3