Force the crowdsec bouncer to only use the Google CA for lua_ssl_trusted_certificate for the captcha ban type.

This Fixes the memory leak/crash when loading ca-certificates.cert

Author: LePresidente

local-build.sh

@@ -9,7 +9,7 @@ RESET='\E[0m'
 DOCKER_IMAGE=nginxproxymanager/nginx-full
 
 export OPENRESTY_VERSION=1.19.9.1
-export CROWDSEC_OPENRESTY_BOUNCER_VERSION=0.1.7
+export CROWDSEC_OPENRESTY_BOUNCER_VERSION=0.1.11
 export LUA_VERSION=5.1.5
 export LUAROCKS_VERSION=3.3.1
 

scripts/install-crowdsec_openresty_bouncer

@@ -21,7 +21,7 @@ tar xzf crowdsec-openresty-bouncer.tgz --strip 1 -C /tmp/crowdsec
 rm -rf /tmp/crowdsec-openresty-bouncer.tgz
 cd /tmp/crowdsec
 
-bash ./install.sh --NGINX_CONF_DIR=/etc/nginx/conf.d --LIB_PATH=/etc/nginx/lualib --CONFIG_PATH=/defaults/crowdsec --DATA_PATH=/defaults/crowdsec --docker
+bash ./install.sh --NGINX_CONF_DIR=/etc/nginx/conf.d --LIB_PATH=/etc/nginx/lualib --CONFIG_PATH=/defaults/crowdsec --DATA_PATH=/defaults/crowdsec --SSL_CERTS_PATH=/etc/ssl/certs/GTS_root_R1.pem --docker
 sed -i 's|ENABLED=.*|ENABLED=false|' /defaults/crowdsec/crowdsec-openresty-bouncer.conf
 rm -rf /tmp/crowdsec