RepoMirrors/haproxy
1
0
Fork 0
mirror of http://git.haproxy.org/git/haproxy.git/ synced 2025-03-11 05:48:41 +00:00
Code Issues Packages Projects Releases Wiki Activity

DOC: management: fix typos and paragraph ordering in 'show ssl sni'

Browse Source 
Fixes small typos, uppercase and paragraph ordering in the 'show ssl
sni' section.
This commit is contained in:
William Lallemand 2024-12-10 10:21:47 +01:00
parent d61cac4ed1
commit 9681fe0dba
1 changed files with 8 additions and 10 deletions

18
doc/management.txt
View File

@ -3764,25 +3764,23 @@ show ssl providers
show ssl sni [-f <frontend>]
Dump every SNI configured for the designated frontend, or all frontends if no
frontend was specified. It allows to see what SNI are offered for a frontend,
and to identify if a SNI is defined multiple time by multiple certificates for
and to identify if a SNI is defined multiple times by multiple certificates for
the same frontend.
Columns are separated by a single \t, allowing to parse it simply.
The frontend/bind column shows the frontend name followed by the bind line
position in the configuration (file:linenum).
The SNI column shows the SNI, it can be either a CN, a SAN or a positive
filter from a crt-list. Negative filters are not displayed.
The 'type' column shows the encryption algorithm type, it can be "rsa", "ecdsa" or "dsa".
The 'Frontend/Bind' column shows the frontend name followed by the bind line
position in the configuration (frontend/file:linenum).
The 'SNI' column shows the SNI, it can be either a CN, a SAN or a filter from a crt-list.
The default certificates of a bind line, (which are either declared
explicitely by 'default-crt' or is implicitely the first certificate of a bind
line when no 'strict-sni' is used) shows the '*' character in the SNI column.
The 'filename' column can be either a filename from the configuration, or an
alias declarated in a crt-store.
The 'Type' column shows the encryption algorithm type, it can be "rsa", "ecdsa" or "dsa".
The 'Filename' column can be either a filename from the configuration, or an
alias declared in a crt-store.
The 'NotAfter' and 'NotBefore' columns are directly extracted from the X509
leaf certificate.