From 730d43eb723243b87465201f2d59117500abfdd6 Mon Sep 17 00:00:00 2001 From: Alec Muffett Date: Mon, 22 Jun 2020 14:07:44 +0100 Subject: [PATCH] commit: note about mkcert --- demo.d/tpo.tconf | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/demo.d/tpo.tconf b/demo.d/tpo.tconf index 96ce979..89e664c 100644 --- a/demo.d/tpo.tconf +++ b/demo.d/tpo.tconf @@ -10,6 +10,11 @@ set preserve_csv tld-tpo,torproject\\.org,i,torproject.org # where to get DNS from set nginx_resolver 8.8.8.8 8.8.4.4 ipv6=off +# uncomment this if you use / have `mkcert` installed and it is in the +# standard $PATH; otherwise EOTK will use `openssl` to generate +# self-signed certificates... +# set ssl_mkcert 1 + # use EOTK internally to uplift port80 to port443 so that cleartext # never crosses the network; this assumes that any http://foo/bar.html # will have an identical URL on the HTTPS site