mirror of
https://github.com/hanzozt/zt.git
synced 2026-10-30 15:04:55 +00:00
* fix #2984 identity/router enrollment do not return full chains - router extend via REST/ctrl now return full chains - identity extend via REST now return full chains - updates tests to allow for chain lengths - modifies verification to look at the first cert in the chain (leaf) - modifies edge routers to not start extension if new certs can't be saved - adds network-jwt tests
50 lines
1.2 KiB
YAML
50 lines
1.2 KiB
YAML
v: 3
|
|
|
|
identity:
|
|
cert: etc/ca/intermediate/certs/002-client.cert.pem
|
|
server_cert: etc/ca/intermediate/certs/002-server.cert.pem
|
|
key: etc/ca/intermediate/private/002.key.pem
|
|
ca: etc/ca/intermediate/certs/ca-chain.cert.pem
|
|
|
|
#trace:
|
|
# path: 002.trace
|
|
|
|
ctrl:
|
|
endpoint: tls:127.0.0.1:6262
|
|
|
|
csr:
|
|
country: US
|
|
province: NC
|
|
locality: Charlotte
|
|
organization: NetFoundry
|
|
organizationalUnit: Ziti
|
|
sans:
|
|
dns:
|
|
- "localhost"
|
|
ip:
|
|
- "127.0.0.1"
|
|
/
|
|
link:
|
|
listeners:
|
|
- binding: transport
|
|
bind: tls:127.0.0.1:6002
|
|
advertise: tls:127.0.0.1:6002
|
|
#bind: transwarptls:127.0.0.1:6002
|
|
#advertise: transwarptls:127.0.0.1:6002
|
|
options:
|
|
outQueueSize: 16
|
|
dialers:
|
|
- binding: transport
|
|
options:
|
|
outQueueSize: 32
|
|
|
|
transport:
|
|
westworld3:
|
|
profile_version: 1
|
|
#tx_portal_min_sz: 16384
|
|
#tx_portal_max_sz: 1073741824
|
|
#instrument:
|
|
# name: metrics
|
|
# path: /tmp/westworld3
|
|
# snapshot_ms: 250
|
|
# enabled: true |