#68 从目录中加载额外的证书和crl。

conf/tfe/tfe.conf

@@ -4,9 +4,14 @@ uxdomain=/home/server_unixsocket_file
 ssl_max_version=tls12
 no_session_ticket=0
 log_master_key=1
+trusted_cert_file=./conf/tls-ca-bundle.pem
+trusted_cert_dir=./conf/trusted_storage
 key_log_file=./sslkeylog.log
+no_alpn=1
 
 [key_keeper]
+#Mode: debug - generate cert with ca_path, normal - generate cert with cert store
+#mode = normal
 mode = debug
 cert_store_host=192.168.11.100
 cert_store_port=9991
@@ -17,8 +22,9 @@ untrusted_ca_path=conf/mesalab-ca-untrust.pem
 passthrough_all_tcp=0
 
 [tcp]
-so_keepalive=1
+so_keepalive=0
 tcp_keepcnt=8
 tcp_keepintvl=15
 tcp_keepidle=30
 tcp_user_timeout=30
+