On Wed, Mar 09, 2011 at 09:54:49AM +0100, Barina Tamas wrote:
Pl igy?
class Https(PsslProxy): def config(self): PsslProxy.config(self) self.stack_proxy=(Z_STACK_PROXY, Http) self.client_key_file="/etc/zorp/ssl/server/server.key" self.client_cert_file="/etc/zorp/ssl/server/server.crt" self.copy_to_server = TRUE; self.copy_to_client = TRUE; self.client_verify_type=PSSL_VERIFY_NONE self.server_verify_type=PSSL_VERIFY_REQUIRED_UNTRUSTED
Nekem igy mukodik (3.3.6-on): class IntraHttps(PsslProxy): class EmbeddedHttp(HttpProxy): def config(self): HttpProxy.config(self) self.transparent_mode = TRUE def config(self): self.server_need_ssl = TRUE self.server_verify_type = SSL_VERIFY_REQUIRED_TRUSTED self.server_ca_directory = '/etc/zorp/ca.crt' self.client_need_ssl = TRUE self.client_cert = '/etc/ssl/certs/server.crt' self.client_key = '/etc/ssl/private/server.key' self.client_verify_type = SSL_VERIFY_NONE self.stack_proxy = self.EmbeddedHttp self.server_verify_depth = 3 -- Udvozlettel Zsiga