docs: add ssl setup instructions to README.md

This commit is contained in:
Rainer Killinger
2019-03-22 11:24:04 +01:00
committed by Rainer Killinger
parent b624ed3426
commit bf5eeb6a5a

View File

@@ -24,6 +24,12 @@ syntax: `127.0.0.1:3000-3500:3000` in docker-compose or docker ports configurati
port to the host's loopback on any port between 3000-3500. The proxy will see in the docker.sock which port to the host's loopback on any port between 3000-3500. The proxy will see in the docker.sock which
port and ip was chosen. Internal loopback should be 127.0.0.1 tho. port and ip was chosen. Internal loopback should be 127.0.0.1 tho.
For a working https configuration you need to have a valid certificate ***including the intemediate certificas without the root*** (*.crt file ) and its private key (*.key file) in two ***seperate*** files. In addition to your certificate you need to provide the certificate chain ***including*** the root certificate. [Read up on](https://medium.com/@superseb/get-your-certificate-chain-right-4b117a9c0fce) how to [create this chain](https://blog.pki.dfn.de/2015/06/ocsp-stapling-in-nginx/) (*.crt file) or ask your admins to provide you one. The final and easiest requirement of the ssl setup is to create custom Diffie-Hellman parameters in a file:
```sh
openssl dhparam -out dhparams.pem 4096
```
## Configuration (Status Codes) ## Configuration (Status Codes)
Config files can be added by multiple universities (adding files like `config/default-b-tu`) and selected via the Config files can be added by multiple universities (adding files like `config/default-b-tu`) and selected via the