diff --git a/ansible/roles/traffic-engine/files/helm/conf/ssl_main.conf b/ansible/roles/traffic-engine/files/helm/conf/ssl_main.conf new file mode 100644 index 00000000..c756724c --- /dev/null +++ b/ansible/roles/traffic-engine/files/helm/conf/ssl_main.conf @@ -0,0 +1,7 @@ +[SSL] +MAX_CACHE_LEN=10240 +{{- if eq .Values.decoders.SSL_CERT .Values.define_enable_val_yes }} +PARSE_CERTIFICATE_DETAIL=1 +{{- else }} +PARSE_CERTIFICATE_DETAIL=0 +{{- end }} diff --git a/ansible/roles/traffic-engine/files/helm/templates/_config.tpl b/ansible/roles/traffic-engine/files/helm/templates/_config.tpl index e8ff7287..4909b8c2 100644 --- a/ansible/roles/traffic-engine/files/helm/templates/_config.tpl +++ b/ansible/roles/traffic-engine/files/helm/templates/_config.tpl @@ -151,6 +151,7 @@ enable_breakpad_upload=0 cp /opt/tsg/config/necessary_plug_list.conf /opt/tsg/sapp/etc/necessary_plug_list.conf cp /opt/tsg/config/http_main.conf /opt/tsg/sapp/conf/http/http_main.conf cp /opt/tsg/config/mail.conf /opt/tsg/sapp/conf/mail/mail.conf + cp /opt/tsg/config/ssl_main.conf /opt/tsg/sapp/conf/ssl/ssl_main.conf {{- end -}} {{- define "traffic-engine.proxy.copy-config-to-dest" -}} diff --git a/ansible/roles/traffic-engine/files/helm/templates/sapp.yaml b/ansible/roles/traffic-engine/files/helm/templates/sapp.yaml index cf57fb3a..2a37a13b 100644 --- a/ansible/roles/traffic-engine/files/helm/templates/sapp.yaml +++ b/ansible/roles/traffic-engine/files/helm/templates/sapp.yaml @@ -19,4 +19,5 @@ data: firewall.inf: {{ tpl (.Files.Get "conf/firewall.inf") . | quote }} necessary_plug_list.conf: {{ tpl (.Files.Get "conf/necessary_plug_list.conf") . | quote }} http_main.conf: {{ tpl (.Files.Get "conf/http_main.conf") . | quote }} - mail.conf: {{ tpl (.Files.Get "conf/mail.conf") . | quote }} \ No newline at end of file + mail.conf: {{ tpl (.Files.Get "conf/mail.conf") . | quote }} + ssl_main.conf: {{ tpl (.Files.Get "conf/ssl_main.conf") . | quote }} \ No newline at end of file diff --git a/ansible/roles/traffic-engine/files/helm/values.yaml b/ansible/roles/traffic-engine/files/helm/values.yaml index ec840ff4..f5d2f469 100644 --- a/ansible/roles/traffic-engine/files/helm/values.yaml +++ b/ansible/roles/traffic-engine/files/helm/values.yaml @@ -159,6 +159,7 @@ decoders: MAIL_BASE64: yes FTP: yes SSL: yes + SSL_CERT: yes RTP: yes SIP: yes SSH: yes