Comments (2)
If you're just testing, I have an Ubuntu-based Docker image which works very well on CentOS 7. See here if you're interested.
It's mostly targeting testing rather than production, so it just drops you into a shell with eotk set up and ready to go when you run it, though it could be converted relatively easily for a production deployment.
When it comes to CentOS, it looks like the default build flags for the Red Hat provided nginx build don't include some of the modules EOTK relies on (ngx_subs_filter
in particular), whereas Ubuntu's do. For a native CentOS script, we'd need to manually compile nginx with the relevant modules.
The Docker method lets you avoid installing a compiler and a bunch of dependencies on your CentOS host, which you might not want to do for various reasons.
Hopefully this helps somebody at least.
Edit: If you have Docker already installed, you can run this in a single line with:
docker run -it --cap-drop=all --name eotk ajhaydock/eotk
(With the obvious caveat that I'm strictly not advocating the use of public containers from Docker Hub for anything other than initial basic testing.)
from eotk.
Here's a patch that I think works...
--- a/lib.d/make-selfsigned-wildcard-ssl-cert.sh
+++ b/lib.d/make-selfsigned-wildcard-ssl-cert.sh
@@ -23,9 +23,14 @@ DAYS=30 # cert lifetime
BREW_OPENSSL=/usr/local/opt/openssl/bin/openssl
+CENTOS_OPENSSL_CNF=/etc/pki/tls/openssl.cnf
+
if [ -f $BREW_OPENSSL ] ; then
OPENSSL=$BREW_OPENSSL
OPENSSL_CONFIG=/usr/local/etc/openssl/openssl.cnf
+elif [ -f $CENTOS_OPENSSL_CNF ]; then
+ OPENSSL=openssl
+ OPENSSL_CONFIG=$CENTOS_OPENSSL_CNF
else
OPENSSL=openssl
OPENSSL_CONFIG=/etc/ssl/openssl.cnf
from eotk.
Related Issues (20)
- .
- error: the only supported value for ONION_VERSION is 3 HOT 4
- Installing SSL certificate with eotk for an existing onion address and server with Caddy docker HOT 5
- Ok HOT 1
- GCC fatal error on Ubuntu 20.04.06
- eotk genkey fails with newer Tor version HOT 3
- Globally tweak nginx.conf files HOT 1
- deal with Timing-Allow-Origin in header rewrites HOT 1
- redirect_host is rewriting the URL to redirect to HOT 1
- Could not generate website HOT 1
- only http modus? HOT 2
- Log files with origin domains HOT 1
- 'resty.core' on Rasbian Stretch HOT 4
- Cannot prevent a subdomain from being unonionized HOT 3
- Create a debug-dump endpoint, optionally enable-able HOT 1
- Deployment of EOTK on Free Software Foundation Europe HOT 3
- SSL for production question HOT 19
- Request To fix Typo and Broken link HOT 2
- Overhaul the SSL_proof mechanism to include endpoints irrespective of HTTPS
- Question about using multiple certificates with subdomains HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from eotk.