haproxy/include/types
Christopher Faulet 31af49d62b MEDIUM: ssl: Add options to forge SSL certificates
With this patch, it is possible to configure HAProxy to forge the SSL
certificate sent to a client using the SNI servername. We do it in the SNI
callback.

To enable this feature, you must pass following BIND options:

 * ca-sign-file <FILE> : This is the PEM file containing the CA certitifacte and
   the CA private key to create and sign server's certificates.

 * (optionally) ca-sign-pass <PASS>: This is the CA private key passphrase, if
   any.

 * generate-certificates: Enable the dynamic generation of certificates for a
   listener.

Because generating certificates is expensive, there is a LRU cache to store
them. Its size can be customized by setting the global parameter
'tune.ssl.ssl-ctx-cache-size'.
2015-06-12 18:06:59 +02:00
..
acl.h REORG/MAJOR: session: rename the "session" entity to "stream" 2015-04-06 11:23:56 +02:00
applet.h MEDIUM: Add support for updating TLS ticket keys via socket 2015-05-16 11:28:04 +02:00
arg.h MINOR: args: implement a new arg type for regex : ARGT_REG 2015-01-22 14:24:53 +01:00
auth.h MAJOR: auth: Change the internal authentication system. 2014-03-17 18:06:06 +01:00
backend.h MEDIUM: backend: add the crc32 hash algorithm for load balancing 2015-01-20 19:48:14 +01:00
capture.h MINOR: capture: extend the captures to support non-header keys 2014-06-13 16:32:48 +02:00
channel.h MEDIUM: stream: move HTTP request body analyser before process_common 2015-05-02 00:10:44 +02:00
checks.h MINOR: include comment in tcpcheck error log 2015-05-12 11:04:39 +02:00
compression.h MAJOR: compression: integrate support for libslz 2015-03-29 03:32:06 +02:00
connection.h MAJOR: namespace: add Linux network namespace support 2014-11-21 07:51:57 +01:00
counters.h MEDIUM: session: maintain per-backend and per-server time statistics 2014-06-17 17:15:56 +02:00
fd.h BUG/MEDIUM: polling: fix possible CPU hogging of worker processes after receiving SIGUSR1. 2014-05-20 14:57:36 +02:00
freq_ctr.h
global.h MEDIUM: ssl: Add options to forge SSL certificates 2015-06-12 18:06:59 +02:00
hdr_idx.h
hlua.h MINOR: lua: map system integration in Lua 2015-04-07 15:56:21 +02:00
lb_chash.h
lb_fas.h
lb_fwlc.h
lb_fwrr.h
lb_map.h
listener.h MEDIUM: ssl: Add options to forge SSL certificates 2015-06-12 18:06:59 +02:00
log.h MEDIUM: logs: Add HTTP request-line log format directives 2015-04-28 21:03:05 +02:00
mailers.h MEDIUM: Allow configuration of email alerts 2015-02-03 00:24:16 +01:00
map.h MEDIUM: map: uses HAProxy facilities to store default value 2015-03-13 14:10:30 +01:00
obj_type.h CLEANUP: applet: rename struct si_applet to applet 2015-04-23 17:56:16 +02:00
pattern.h MEDIUM: pattern: add a revision to all pattern expressions 2015-04-29 19:15:24 +02:00
peers.h MAJOR: peers: peers protocol version 2.0 2015-05-29 15:50:33 +02:00
pipe.h
port_range.h
proto_http.h MEDIUM: http: implement http-response redirect rules 2015-05-28 17:45:43 +02:00
proto_tcp.h MINOR: tcp: add custom actions that can continue tcp-(request|response) processing 2015-05-29 17:49:48 +02:00
protocol.h MEDIUM: listener: implement a per-protocol pause() function 2014-07-08 01:13:34 +02:00
proxy.h MINOR: proxy: add a flag to memorize that the proxy's ID was forced 2015-05-27 16:51:28 +02:00
queue.h REORG/MAJOR: session: rename the "session" entity to "stream" 2015-04-06 11:23:56 +02:00
sample.h MEDIUM: sample: change the prototype of sample-fetches functions 2015-05-11 20:03:08 +02:00
server.h MEDIUM: protocol: automatically pick the proto associated to the connection. 2015-02-28 23:12:31 +01:00
session.h MEDIUM: session: remove the task pointer from the session 2015-04-06 11:37:32 +02:00
signal.h
ssl_sock.h MEDIUM: Add support for updating TLS ticket keys via socket 2015-05-16 11:28:04 +02:00
stick_table.h REORG/MAJOR: session: rename the "session" entity to "stream" 2015-04-06 11:23:56 +02:00
stream.h BUG/MAJOR: tcp/http: fix current_rule assignment when restarting over a ruleset 2015-04-20 13:46:20 +02:00
stream_interface.h MINOR: stream-int: add two flags to indicate an applet's wishes regarding I/O 2015-04-23 17:56:17 +02:00
task.h
template.h