chris/frigate
1
0
Fork 0
forked from Github/frigate
Code Pull Requests Packages Activity

improve tls implementation (#11690)

Browse Source 
* improve tls implementation

* update docs
This commit is contained in:
Blake Blackshear
2024-06-02 07:48:28 -05:00
committed by GitHub
parent beefc51361
commit e431031112
13 changed files with 92 additions and 37 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
docker/main/rootfs/etc/s6-overlay/s6-rc.d/certsync/run
View File

@@ -10,16 +10,21 @@ echo "[INFO] Starting certsync..."
lefile="/etc/letsencrypt/live/frigate/fullchain.pem"
tls_enabled=`python3 /usr/local/nginx/get_tls_settings.py | jq -r .enabled`
while true
do
if [[ "$tls_enabled" == 'false' ]]; then
sleep 9999
continue
fi
if [ ! -e $lefile ]
then
echo "[ERROR] TLS certificate does not exist: $lefile"
fi
leprint=`openssl x509 -in $lefile -fingerprint -noout || echo 'failed'`
leprint=`openssl x509 -in $lefile -fingerprint -noout 2>&1 || echo 'failed'`
case "$leprint" in
*Fingerprint*)
@@ -29,7 +34,7 @@ do
;;
esac
liveprint=`echo | openssl s_client -showcerts -connect 127.0.0.1:443 2>&1 | openssl x509 -fingerprint | grep -i fingerprint || echo 'failed'`
liveprint=`echo | openssl s_client -showcerts -connect 127.0.0.1:8080 2>&1 | openssl x509 -fingerprint 2>&1 | grep -i fingerprint || echo 'failed'`
case "$liveprint" in
*Fingerprint*)