RepoMirrors/haproxy
1
0
Fork 0
mirror of http://git.haproxy.org/git/haproxy.git/ synced 2024-12-22 20:32:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

MINOR: ssl: add "crt" in the cert_exts array

Browse Source 
The cert_exts array does handle "crt" the default way, however
you might stil want to look for these extensions in the array.
This commit is contained in:
William Lallemand 2022-03-30 12:01:32 +02:00
parent e60c7d6e59
commit 26654e7a59
2 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
include/haproxy/ssl_ckch-t.h
View File

@ -135,6 +135,7 @@ struct cafile_entry {
enum { enum {
CERT_TYPE_PEM = 0, CERT_TYPE_PEM = 0,
CERT_TYPE_CRT,
CERT_TYPE_KEY, CERT_TYPE_KEY,
#if ((defined SSL_CTRL_SET_TLSEXT_STATUS_REQ_CB && !defined OPENSSL_NO_OCSP) || defined OPENSSL_IS_BORINGSSL) #if ((defined SSL_CTRL_SET_TLSEXT_STATUS_REQ_CB && !defined OPENSSL_NO_OCSP) || defined OPENSSL_IS_BORINGSSL)
CERT_TYPE_OCSP, CERT_TYPE_OCSP,

1
src/ssl_ckch.c
View File

@ -1118,6 +1118,7 @@ int ssl_store_load_locations_file(char *path, int create_if_none, enum cafile_ty
struct cert_exts cert_exts[] = { struct cert_exts cert_exts[] = {
{ "", CERT_TYPE_PEM, &ssl_sock_load_pem_into_ckch }, /* default mode, no extensions */ { "", CERT_TYPE_PEM, &ssl_sock_load_pem_into_ckch }, /* default mode, no extensions */
{ "crt", CERT_TYPE_CRT, &ssl_sock_load_pem_into_ckch },
{ "key", CERT_TYPE_KEY, &ssl_sock_load_key_into_ckch }, { "key", CERT_TYPE_KEY, &ssl_sock_load_key_into_ckch },
#if ((defined SSL_CTRL_SET_TLSEXT_STATUS_REQ_CB && !defined OPENSSL_NO_OCSP) || defined OPENSSL_IS_BORINGSSL) #if ((defined SSL_CTRL_SET_TLSEXT_STATUS_REQ_CB && !defined OPENSSL_NO_OCSP) || defined OPENSSL_IS_BORINGSSL)
{ "ocsp", CERT_TYPE_OCSP, &ssl_sock_load_ocsp_response_from_file }, { "ocsp", CERT_TYPE_OCSP, &ssl_sock_load_ocsp_response_from_file },