Merge pull request #6635
a1df1e8
[docs] add libevent dependency to build-osx.md (Jonas Schnelli)d6a92dd
[release notes] mention apache reverse proxy to re-enable SSL (Jonas Schnelli)
This commit is contained in:
commit
3224936bed
2 changed files with 31 additions and 1 deletions
|
@ -32,7 +32,7 @@ Instructions: Homebrew
|
||||||
|
|
||||||
#### Install dependencies using Homebrew
|
#### Install dependencies using Homebrew
|
||||||
|
|
||||||
brew install autoconf automake berkeley-db4 libtool boost miniupnpc openssl pkg-config protobuf qt5
|
brew install autoconf automake berkeley-db4 libtool boost miniupnpc openssl pkg-config protobuf qt5 libevent
|
||||||
|
|
||||||
NOTE: Building with Qt4 is still supported, however, could result in a broken UI. As such, building with Qt5 is recommended.
|
NOTE: Building with Qt4 is still supported, however, could result in a broken UI. As such, building with Qt5 is recommended.
|
||||||
|
|
||||||
|
|
|
@ -27,6 +27,36 @@ Then, to tunnel a SSL connection on 28332 to a RPC server bound on localhost on
|
||||||
|
|
||||||
It can also be set up system-wide in inetd style.
|
It can also be set up system-wide in inetd style.
|
||||||
|
|
||||||
|
Another way to re-attain SSL would be to setup a httpd reverse proxy. This solution
|
||||||
|
would allow the use of different authentication, loadbalancing, on-the-fly compression and
|
||||||
|
caching. A sample config for apache2 could look like:
|
||||||
|
|
||||||
|
Listen 443
|
||||||
|
|
||||||
|
NameVirtualHost *:443
|
||||||
|
<VirtualHost *:443>
|
||||||
|
|
||||||
|
SSLEngine On
|
||||||
|
SSLCertificateFile /etc/apache2/ssl/server.crt
|
||||||
|
SSLCertificateKeyFile /etc/apache2/ssl/server.key
|
||||||
|
|
||||||
|
<Location /bitcoinrpc>
|
||||||
|
ProxyPass http://127.0.0.1:8332/
|
||||||
|
ProxyPassReverse http://127.0.0.1:8332/
|
||||||
|
# optional enable digest auth
|
||||||
|
# AuthType Digest
|
||||||
|
# ...
|
||||||
|
|
||||||
|
# optional bypass bitcoind rpc basic auth
|
||||||
|
# RequestHeader set Authorization "Basic <hash>"
|
||||||
|
# get the <hash> from the shell with: base64 <<< bitcoinrpc:<password>
|
||||||
|
</Location>
|
||||||
|
|
||||||
|
# Or, balance the load:
|
||||||
|
# ProxyPass / balancer://balancer_cluster_name
|
||||||
|
|
||||||
|
</VirtualHost>
|
||||||
|
|
||||||
Random-cookie RPC authentication
|
Random-cookie RPC authentication
|
||||||
---------------------------------
|
---------------------------------
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue