Browse Source

admin: Require identity for remote (fix #4478)

master
Matthew Holt 3 years ago
parent
commit
b4bfa29be2
No known key found for this signature in database GPG Key ID: 2A349DD577D586A5
  1. 3
      admin.go

3
admin.go

@ -466,6 +466,9 @@ func replaceRemoteAdminServer(ctx Context, cfg *Config) error {
}
// create TLS config that will enforce mutual authentication
if identityCertCache == nil {
return fmt.Errorf("cannot enable remote admin without a certificate cache; configure identity management to initialize a certificate cache")
}
cmCfg := cfg.Admin.Identity.certmagicConfig(remoteLogger, false)
tlsConfig := cmCfg.TLSConfig()
tlsConfig.NextProtos = nil // this server does not solve ACME challenges

Loading…
Cancel
Save