Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Using https with termination in haproxy/nginx

See original GitHub issue

I’m trying to use the docker in my docker environment where SSL is terminated in haproxy. How can I convince oidc-server-mock to give me https url’s when calling .well-known/openid-configuration urls?

I found IssuerUrl in https://identityserver4.readthedocs.io/en/latest/reference/options.html but i don’t seem to be able to pass this to the docker.

Issue Analytics

State:
Created 3 years ago
Comments:7 (4 by maintainers)

Top GitHub Comments

1reaction

AleF83commented, Feb 3, 2021

Hey, You can set issuerUrl using SERVER_OPTIONS_INLINE/PATH environment variable. See example here:

https://github.com/Soluto/oidc-server-mock/blob/f265c212303e66de6e3a57c26b37d58be2552108/e2e/docker-compose.yml#L12

So this is the answer

0reactions

808brinkscommented, Feb 3, 2021

Ah yes. The point is in my setup haproxy terminates ssl and nginx is setup in a reverse proxy. So I don’t need the mock to listen on the SSL port(433) I just need it to reply with urls like it is.

So in the well-known I would want "issuer": "https://openid-mock.docker" etc. Even though the mock is actually running no port 80 with container name openid-mock.

Top Results From Across the Web

HAProxy SSL Termination (Offloading) Everything to Know

The HAProxy load balancer provides high-performance SSL termination, allowing you to encrypt and decrypt traffic. You can quickly and easily enable SSL/TLS ...

Optimizing HAProxy SSL Termination (with Nginx backend ...

HAProxy forces HTTPS for verification, then terminates SSL, and communicates HTTP to backend Nginx servers. Nginx servers are identical and ...

Mixing mode tcp and http - SSL termination and Passthrough

That got everything working just fine. At the time I wanted to terminate all SSL at HAProxy. Works beautifully. I'm standing up a...

HAPROXY vs Nginx for load balancing websites w/SSL ...

Haproxy can let you proxy 443 without terminating SSL by using the SNI header, which can be useful depending on your setup. Upvote...

How Nginx and HAProxy works

SSL /TLS termination: Both NGINX and HAProxy can be configured to handle SSL/TLS encryption and decryption, allowing for secure communication between the client ......