Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[ansible/artifactory] Enable OCSP stapling support artifactory_nginx_ssl #358

Open
wants to merge 6 commits into
base: master
Choose a base branch
from
Open

[ansible/artifactory] Enable OCSP stapling support artifactory_nginx_ssl #358

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
9bbdf90
Fix for #355
bbaassssiiee Dec 21, 2023
df45878
README
bbaassssiiee Dec 21, 2023
2509971
CHANGELOG
bbaassssiiee Dec 21, 2023
cd07f82
Merge branch 'master' into feature/355
bbaassssiiee Jul 18, 2024
09def14
Merge branch 'master' into feature/355
bbaassssiiee Aug 12, 2024
a29216f
Merge branch 'master' into feature/355
bbaassssiiee Aug 20, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions Ansible/ansible_collections/jfrog/platform/CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,9 @@
# JFrog Platform Ansible Collection Changelog
All changes to this collection will be documented in this file.

## [10.19.4] - Aug 20, 2024
* artifactory_nginx_ssl - OCSP stapling support [GH-358](https://github.com/jfrog/JFrog-Cloud-Installers/pull/358)

## [10.19.3] - Aug 16, 2024
* Product Updates/fixes

Expand Down Expand Up @@ -38,6 +41,7 @@ All changes to this collection will be documented in this file.
## [10.17.2] - March 7, 2024
* Fix - ansible.cfg issue


## [10.17.1] - Feb 29, 2024
* Artifactory - Upgrade fails during the Check artifactory version [GH-369](https://github.com/jfrog/JFrog-Cloud-Installers/pull/369)

Expand Down
3 changes: 2 additions & 1 deletion Ansible/ansible_collections/jfrog/platform/roles/artifactory_nginx_ssl/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,7 @@ The artifactory_nginx_ssl role installs and configures nginx for SSL.
* _ssl_certificate_path_: This is the full directory path for the SSL certificate, excluding _ssl_certificate_.
* _ssl_certificate_key_: This is the filename of the SSL private key.
* _ssl_certificate_key_path_: This is the full directory path for the SSL private key, excluding _ssl_certificate_key_.
* _ssl_certificate_fullchain_: Boolean, enables OCSP stapling if _ssl_certificate_ has the full chain.
* _nginx_worker_processes_: The worker_processes configuration for nginx. Defaults to 1.
* _artifactory_docker_registry_subdomain_: Whether to add a redirect directive to the nginx config for the use of docker
subdomains.
subdomains.
2 changes: 2 additions & 0 deletions Ansible/ansible_collections/jfrog/platform/roles/artifactory_nginx_ssl/defaults/main.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,3 +18,5 @@ ssl_certificate_path: /etc/pki/tls/certs
ssl_certificate_key_path: /etc/pki/tls/private
ssl_certificate: cert.pem
ssl_certificate_key: cert.key
# if ssl_certificate has the full certificate chain then OCSP stapling can be enabled
ssl_certificate_fullchain: false
7 changes: 6 additions & 1 deletion ...ible_collections/jfrog/platform/roles/artifactory_nginx_ssl/templates/artifactory.conf.j2
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,8 +13,13 @@
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
ssl_certificate {{ ssl_certificate_path }}/{{ ssl_certificate }};
ssl_certificate_key {{ ssl_certificate_key_path }}/{{ ssl_certificate_key }};
{% if ssl_certificate_fullchain %}
ssl_stapling on;
ssl_stapling_verify on;
{% endif %}
ssl_session_cache shared:SSL:1m;
ssl_prefer_server_ciphers on;

## server configuration
server {
listen 443 ssl http2;
Expand Down Expand Up @@ -47,4 +52,4 @@
proxy_pass http://artifactory-direct;
}
}
}
}
Loading