A+ HTTPS with the SSL termination proxy

[Paul Gear]

On 21/04/17 01:28, Merlijn Sebrechts wrote:
> Hi all
>
>
> Want to have A+ HTTPS for your juju-managed webservice? Want to secure
> a webservice with a password? The SSL termination proxy charm
> <https://jujucharms.com/u/tengu-team/ssl-termination-proxy/> to your
> rescue!
>
> It's a reverse proxy that encrypts traffic using a Let's Encrypt
> certificate with optional Basic Authentication. Deploy the charm, set
> fqdn, connect to your webservice, and go! The deployed proxy gets an
> A+ ssl rating on the Qualis SSL Server Test.
>
> It's not ready yet to be promulgated but it should work fine for demo
> deployment so give it a test drive if you're interested.
>
> If anyone wants to work together on this charm to expand its scope,
> let me know! I'm thinking about stuff like pluggable authentication
> backends, pluggable DNS backends, support for more protocols such as
> websockets, ...

Hi Merlijn,

I really liked your idea, so I thought I'd give your charm a spin.  I
found a couple minor niggles, which I'll write you some bug reports
about shortly.

Overall, it worked pretty well for me, and got the promised A+ rating on
Qualys SSL Labs right out of the box.  Thanks for making the charm!

-- 
Regards,
Paul Gear
Site Reliability Engineer
Canonical - Information Systems

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/juju/attachments/20170421/3f3528c7/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 837 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/juju/attachments/20170421/3f3528c7/attachment.pgp>