Commit Graph

3 Commits (96bcd89c95c9a02803aac35ebbf813eaeee67a06)

Author SHA1 Message Date
Matthew Vivian 836b0be3c2 feat: Add IPv6 support to OCSP responder
The OCSP responder in OpenSSL (in Alpine) only supports IPv4 so I've used socat as a proxy to listen in IPv4 and IPv6 then forward to the OCSP responder on localhost using IPv4.
2024-11-21 14:09:03 +01:00
Matthew Vivian a2ac9c45f0 fix: Support OCSP in dualstack mode
I considered adding IPv6 support to the OCSP responder but it would add more files and complexity for (I think) little gain.

Instead this change keeps the OCSP responder on IPv4 only, but makes sure it's properly configured in the hosts file even when using the -6 flag. The OCSP responder will always use IPv4, other services will be able to reach it via IPv4 regardless of whether they're using IPv6 for their own communication.
2024-11-21 14:09:03 +01:00
Guus der Kinderen 3b4862328b Add dualstack support
This adds support for IPv6, by giving all `start.sh` scripts an `-6` argument, that causes a dualstack configuration to be loaded.

Each individual docker-compose file has been split out. Now, each file no longer defines any networking. Instead, one of two networking fragments is expected to be merged in.

When starting Openfire, a Hazelcast configuration option is passed through to the Openfire process to denote preference for IPv4 or IPv6. This passing through depends on the change in Openfire, that is introduced by 2634d4a83a

Minor other changes have been applied, that mostly make the start scripts more consistent amongst each-other.

fixes #61
2024-11-05 09:47:10 +00:00