Skip to content

Commit defc8be

Browse files
Include keycloak certs in forward-proxy image
1 parent 088eec1 commit defc8be

File tree

4 files changed

+7
-3
lines changed

4 files changed

+7
-3
lines changed

selenium/bin/components/forward-proxy

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,7 @@ init_forward-proxy() {
1414
PROXY_PORT=9092
1515

1616
print "> HTTPD_CONFIG: ${HTTPD_CONFIG_DIR}"
17+
print "> PROXIED_OAUTH_PROVIDER: ${TEST_CONFIG_DIR}/${PROXIED_OAUTH_PROVIDER}"
1718
print "> OAUTH_PROVIDER_URL: ${OAUTH_PROVIDER_URL}"
1819
print "> PROXY_HOSTNAME: ${PROXY_HOSTNAME}"
1920
print "> PROXY_PORT: ${PROXY_PORT}"
@@ -33,6 +34,7 @@ start_forward-proxy() {
3334
${BIN_DIR}/gen-httpd-conf ${HTTPD_CONFIG_DIR} $ENV_FILE $MOUNT_HTTPD_CONFIG_DIR/httpd.conf
3435
print "> EFFECTIVE HTTPD_CONFIG_FILE: $MOUNT_HTTPD_CONFIG_DIR/httpd.conf"
3536
cp ${HTTPD_CONFIG_DIR}/*.pem $MOUNT_HTTPD_CONFIG_DIR
37+
cp ${TEST_CONFIG_DIR}/${PROXIED_OAUTH_PROVIDER}/*.pem $MOUNT_HTTPD_CONFIG_DIR
3638

3739
docker run \
3840
--detach \

selenium/test/oauth/env.docker.forward-proxy

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,3 +2,4 @@ export FORWARD_PROXY_CERTS=/usr/local/apache2/conf
22
export FORWARD_PROXY_CA_CERT=${FORWARD_PROXY_CERTS}/ca_forward-proxy_certificate.pem
33
export FORWARD_PROXY_URL=https://forward-proxy:9092
44
export OAUTH_PROVIDER_URL=${KEYCLOAK_URL}
5+
export PROXIED_OAUTH_PROVIDER=keycloak
Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
export FORWARD_PROXY_CERTS=selenium/test/oauth/forward-proxy
22
export FORWARD_PROXY_CA_CERT=${FORWARD_PROXY_CERTS}/ca_forward-proxy_certificate.pem
33
export FORWARD_PROXY_URL=https://forward-proxy:9092
4-
export OAUTH_PROVIDER_URL=${KEYCLOAK_URL}
4+
export OAUTH_PROVIDER_URL=${KEYCLOAK_URL}
5+
export PROXIED_OAUTH_PROVIDER=keycloak

selenium/test/oauth/forward-proxy/httpd.conf

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -343,7 +343,7 @@ LogLevel warn
343343
# define per-<VirtualHost> access logfiles, transactions will be
344344
# logged therein and *not* in this file.
345345
#
346-
CustomLog /proc/self/fd/1 common
346+
CustomLog logs/access_log common
347347

348348
#
349349
# If you prefer a logfile with access, agent, and referer information
@@ -506,7 +506,7 @@ SSLRandomSeed connect builtin
506506
SSLEngine on
507507
SSLCertificateKeyFile /usr/local/apache2/conf/server_forward-proxy_key.pem
508508
SSLCertificateFile /usr/local/apache2/conf/server_forward-proxy_certificate.pem
509-
SSLProxyMachineCertificateFile /usr/local/apache2/conf/server_forward-proxy_certificate.pem
509+
SSLProxyCACertificateFile /usr/local/apache2/conf/ca_keycloak_certificate.pem
510510
SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
511511
SSLProxyEngine On
512512

0 commit comments

Comments
 (0)