mirror of
https://github.com/jupyterhub/jupyterhub.git
synced 2025-10-12 12:33:02 +00:00
Use Certipy's trust graph to set up internal_ssl
With changes to CHP requiring a second, different authority, the complexity of managing trust within JupyterHub has risen. To solve this, Certipy now has a feature to specify what components should trust what and builds trust bundles accordingly.
This commit is contained in:
@@ -63,12 +63,10 @@ def app(request, io_loop, ssl_tmpdir):
|
||||
ssl_enabled = getattr(request.module, "ssl_enabled", False)
|
||||
|
||||
if ssl_enabled:
|
||||
internal_authority_name = 'hub'
|
||||
external_certs = ssl_setup(str(ssl_tmpdir), internal_authority_name)
|
||||
external_certs = ssl_setup(str(ssl_tmpdir), 'hub-ca')
|
||||
mocked_app = MockHub.instance(
|
||||
log_level=logging.DEBUG,
|
||||
internal_ssl=True,
|
||||
internal_authority_name=internal_authority_name,
|
||||
internal_certs_location=str(ssl_tmpdir))
|
||||
|
||||
@gen.coroutine
|
||||
|
Reference in New Issue
Block a user