Ajout de la conf pour l'utilisation de certificat Let's Encrypt
This commit is contained in:
parent
ac3118dd8d
commit
a19a174f19
1 changed files with 27 additions and 0 deletions
|
@ -580,6 +580,33 @@ eap {
|
|||
}
|
||||
}
|
||||
|
||||
tls-config tls-LEcert {
|
||||
private_key_file = ${certdir}/server.key
|
||||
certificate_file = ${certdir}/cert.pem
|
||||
ca_file = ${certdir}/fullchain.pem
|
||||
dh_file = ${certdir}/dh
|
||||
ca_path = ${cadir}
|
||||
cipher_list = "DEFAULT"
|
||||
cipher_server_preference = no
|
||||
tls_min_version = "1.0"
|
||||
tls_max_version = "1.2"
|
||||
ecdh_curve = "prime256v1"
|
||||
|
||||
cache {
|
||||
enable = yes
|
||||
lifetime = 1 # hours
|
||||
}
|
||||
|
||||
verify {
|
||||
}
|
||||
|
||||
ocsp {
|
||||
enable = no
|
||||
override_cert_url = yes
|
||||
url = "http://127.0.0.1/ocsp/"
|
||||
}
|
||||
}
|
||||
|
||||
## EAP-TLS
|
||||
#
|
||||
# As of Version 3.0, the TLS configuration for TLS-based
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue