fix #1691

MAIF · Aug 28, 2023 · bdbf356 · bdbf356
1 parent 9bef728
commit bdbf356
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 1 deletion.
diff --git a/otoroshi/app/netty/config.scala b/otoroshi/app/netty/config.scala
@@ -100,7 +100,11 @@ object ReactorNettyServerConfig {
         .filterNot(_.isEmpty),
       clientAuth = {
         val auth = env.configuration
-          .getOptionalWithFileSupport[String]("otoroshi.ssl.fromOutside.clientAuth")
+            .getOptionalWithFileSupport[String]("otoroshi.ssl.fromOutside.netty.clientAuth")
+            .orElse(
+              env.configuration
+                .getOptionalWithFileSupport[String]("otoroshi.ssl.fromOutside.clientAuth")
+            )
           .flatMap(ClientAuth.apply)
           .getOrElse(ClientAuth.None)
         if (DynamicSSLEngineProvider.logger.isDebugEnabled)

diff --git a/otoroshi/build.sbt b/otoroshi/build.sbt
@@ -335,6 +335,7 @@ reStart / javaOptions ++= Seq(
   "-Dotoroshi.instance.name=dev",
   "-Dotoroshi.vaults.enabled=true",
   "-Dotoroshi.ssl.fromOutside.clientAuth=Want",
+  //"-Dotoroshi.ssl.fromOutside.clientAuth=Need",
   "-Dotoroshi.inmemory.modern=true",
   "-Dotoroshi.wasm.cache.ttl=2000",
   "-Dotoroshi.next.experimental.netty-server.enabled=true",

diff --git a/otoroshi/conf/application.conf b/otoroshi/conf/application.conf
@@ -1181,6 +1181,9 @@ otoroshi {
       clientAuth = "None"
       clientAuth = ${?SSL_OUTSIDE_CLIENT_AUTH}
       clientAuth = ${?OTOROSHI_SSL_OUTSIDE_CLIENT_AUTH}
+      netty {
+        clientAuth = ${?OTOROSHI_SSL_OUTSIDE_NETTY_CLIENT_AUTH}
+      }
     }
     # the default trust mode
     trust {