test(ci): create certificate chain in tmp dir

the haproxy container boot script has no permission writing to
the mounted dir.
This commit is contained in:
Zaiming Shi 2021-08-10 19:58:57 +02:00 committed by Rory Z
parent 4abb3e65eb
commit 1d755f1272
2 changed files with 4 additions and 3 deletions

View File

@ -23,7 +23,8 @@ services:
- bash - bash
- -c - -c
- | - |
cat /usr/local/etc/haproxy/certs/cert.pem /usr/local/etc/haproxy/certs/key.pem > /usr/local/etc/haproxy/certs/emqx.pem set -x
cat /usr/local/etc/haproxy/certs/cert.pem /usr/local/etc/haproxy/certs/key.pem > /tmp/emqx.pem
haproxy -f /usr/local/etc/haproxy/haproxy.cfg haproxy -f /usr/local/etc/haproxy/haproxy.cfg
emqx1: emqx1:

View File

@ -87,13 +87,13 @@ backend emqx_ws_back
frontend emqx_ssl frontend emqx_ssl
mode tcp mode tcp
option tcplog option tcplog
bind *:8883 ssl crt /usr/local/etc/haproxy/certs/emqx.pem ca-file /usr/local/etc/haproxy/certs/cacert.pem verify required no-sslv3 bind *:8883 ssl crt /tmp/emqx.pem ca-file /usr/local/etc/haproxy/certs/cacert.pem verify required no-sslv3
default_backend emqx_ssl_back default_backend emqx_ssl_back
frontend emqx_wss frontend emqx_wss
mode tcp mode tcp
option tcplog option tcplog
bind *:8084 ssl crt /usr/local/etc/haproxy/certs/emqx.pem ca-file /usr/local/etc/haproxy/certs/cacert.pem verify required no-sslv3 bind *:8084 ssl crt /tmp/emqx.pem ca-file /usr/local/etc/haproxy/certs/cacert.pem verify required no-sslv3
default_backend emqx_wss_back default_backend emqx_wss_back
backend emqx_ssl_back backend emqx_ssl_back