RepoMirrors/haproxy
1
0
Fork 0
mirror of http://git.haproxy.org/git/haproxy.git/ synced 2025-04-24 20:08:01 +00:00
Code Issues Packages Projects Releases Wiki Activity

MINOR: ssl: Add certificate path to 'show ssl ocsp-response' output

Browse Source 
The ocsp-related CLI commands tend to work with OCSP_CERTIDs as well as
certificate paths so the path should also be added to the output of the
"show ssl ocsp-response" command when no certid or path is provided.
This commit is contained in:
Remi Tricot-Le Breton 2023-03-13 15:56:35 +01:00 committed by William Lallemand
parent dafc068f12
commit 7716f27736
2 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
doc/management.txt
View File

@ -3434,8 +3434,9 @@ show ssl crt-list [-n] [<filename>]
show ssl ocsp-response [[text|base64] <id|path>] show ssl ocsp-response [[text|base64] <id|path>]
Display the IDs of the OCSP tree entries corresponding to all the OCSP Display the IDs of the OCSP tree entries corresponding to all the OCSP
responses used in HAProxy, as well as the issuer's name and key hash and the responses used in HAProxy, as well as the corresponding frontend
serial number of the certificate for which the OCSP response was built. certificate's path, the issuer's name and key hash and the serial number of
the certificate for which the OCSP response was built.
If a valid <id> or the <path> of a valid frontend certificate is provided, If a valid <id> or the <path> of a valid frontend certificate is provided,
display the contents of the corresponding OCSP response. When an <id> is display the contents of the corresponding OCSP response. When an <id> is
provided, it it possible to define the format in which the data is dumped. provided, it it possible to define the format in which the data is dumped.
@ -3449,6 +3450,7 @@ show ssl ocsp-response [[text|base64] <id|path>]
$ echo "show ssl ocsp-response" | socat /var/run/haproxy.master - $ echo "show ssl ocsp-response" | socat /var/run/haproxy.master -
# Certificate IDs # Certificate IDs
Certificate ID key : 303b300906052b0e03021a050004148a83e0060faff709ca7e9b95522a2e81635fda0a0414f652b0e435d5ea923851508f0adbe92d85de007a0202100a Certificate ID key : 303b300906052b0e03021a050004148a83e0060faff709ca7e9b95522a2e81635fda0a0414f652b0e435d5ea923851508f0adbe92d85de007a0202100a
Certificate path : /path_to_cert/foo.pem
Certificate ID: Certificate ID:
Issuer Name Hash: 8A83E0060FAFF709CA7E9B95522A2E81635FDA0A Issuer Name Hash: 8A83E0060FAFF709CA7E9B95522A2E81635FDA0A
Issuer Key Hash: F652B0E435D5EA923851508F0ADBE92D85DE007A Issuer Key Hash: F652B0E435D5EA923851508F0ADBE92D85DE007A

3
src/ssl_ocsp.c
View File

@ -1582,6 +1582,9 @@ static int cli_io_handler_show_ocspresponse(struct appctx *appctx)
} }
chunk_appendf(trash, "\n"); chunk_appendf(trash, "\n");
/* Dump the certificate path */
chunk_appendf(trash, "Certificate path : %s\n", ocsp->path);
p = ocsp->key_data; p = ocsp->key_data;
/* Decode the certificate ID (serialized into the key). */ /* Decode the certificate ID (serialized into the key). */