RepoMirrors/haproxy
1
0
Fork 0
mirror of http://git.haproxy.org/git/haproxy.git/ synced 2024-12-24 21:52:17 +00:00
Code Issues Packages Projects Releases Wiki Activity
652a6f18b2
haproxy/reg-tests/ssl
History
William Lallemand e6657fd108 MEDIUM: ssl: don't load file by discovering them in crt-store 
In commit 55e9e9591 ("MEDIUM: ssl: temporarily load files by detecting
their presence in crt-store"), ssl_sock_load_pem_into_ckch() was
replaced by ssl_sock_load_files_into_ckch() in the crt-store loading.

But the side effect was that we always try to autodetect, and this is
not what we want. This patch reverse this, and add specific code in the
crt-list loading, so we could autodetect in crt-list like it was done
before, but still try to load files when a crt-store filename keyword is
specified.

Example:

These crt-list lines won't autodetect files:

    foobar.crt [key foobar.key issuer foobar.issuer ocsp-update on] *.foo.bar
    foobar.crt [key foobar.key] *.foo.bar

These crt-list lines will autodect files:

    foobar.pem [ocsp-update on] *.foo.bar
    foobar.pem
2024-05-21 18:30:45 +02:00
..
generate_certificates REGTESTS: ssl: Add test for "generate-certificates" SSL option 2022-02-09 12:10:32 +01:00
ocsp_update REGTESTS: ssl: Add OCSP related tests 2024-03-20 16:12:10 +01:00
add_ssl_crt-list.vtc REGTESTS: ssl: update common.pem with the new pki 2023-10-09 21:58:21 +02:00
bug-2265.crt BUG/MINOR: ssl/cli: can't find ".crt" files when replacing a certificate 2023-08-28 18:20:39 +02:00
ca-auth.crt
cert1-example.com.pem.ecdsa
cert1-example.com.pem.rsa
cert2-example.com.pem.ecdsa
cert2-example.com.pem.rsa
client1.pem
client2_expired.pem
client3_revoked.pem
client.ecdsa.pem REGTESTS: ssl: Add test for "curves" and "ecdhe" SSL options 2022-02-09 11:15:44 +01:00
common.4096.dh REGTESTS: ssl: Add tests for DH related options 2022-02-14 10:07:14 +01:00
common.crt
common.key
common.pem REGTESTS: ssl: update common.pem with the new pki 2023-10-09 21:58:21 +02:00
crl-auth.pem
crt_store.vtc MEDIUM: ssl: don't load file by discovering them in crt-store 2024-05-21 18:30:45 +02:00
del_ssl_crt-list.vtc REGTESTS: ssl: update common.pem with the new pki 2023-10-09 21:58:21 +02:00
dynamic_server_ssl.vtc MEDIUM: server: remove experimental-mode for dynamic servers 2022-03-11 14:28:28 +01:00
ecdsa.crt
ecdsa.key
ecdsa.pem
filters.crt-list
interCA1_crl_empty.pem
interCA1_crl.pem
interCA2_crl_empty.pem
interCA2_crl.pem
localhost.crt-list
log_forward_ssl.vtc REGTESTS: ssl/log: test the log-forward with SSL 2022-09-13 17:03:30 +02:00
new_del_ssl_cafile.vtc MINOR: ssl/cli: implement "add ssl ca-file" 2022-08-19 19:58:53 +02:00
new_del_ssl_crlfile.vtc
ocsp_auto_update.vtc REGTESTS: ocsp-update: change the reg-test to support the new crt-store mode 2024-05-17 17:35:51 +02:00
ocsp_compat_check.vtc REGTESTS: ocsp-update: change the reg-test to support the new crt-store mode 2024-05-17 17:35:51 +02:00
README
rootCA_crl.pem
set_cafile_client.pem
set_cafile_interCA1.crt
set_cafile_interCA2.crt
set_cafile_rootCA.crt
set_cafile_server.pem
set_default_cert.crt-list
set_default_cert.pem
set_ssl_bug_2265.vtc REGTESTS: ssl: update common.pem with the new pki 2023-10-09 21:58:21 +02:00
set_ssl_cafile.vtc REGTESTS: wolfssl: temporarly disable some failing reg-tests 2023-10-09 23:05:18 +02:00
set_ssl_cert_bundle.vtc
set_ssl_cert_noext.vtc
set_ssl_cert.vtc REGTESTS: ssl: update common.pem with the new pki 2023-10-09 21:58:21 +02:00
set_ssl_crlfile.vtc REGTESTS: wolfssl: temporarly disable some failing reg-tests 2023-10-09 23:05:18 +02:00
set_ssl_server_cert.vtc REGTESTS: wolfssl: temporarly disable some failing reg-tests 2023-10-09 23:05:18 +02:00
show_ocsp_server.pem
show_ocsp_server.pem.issuer
show_ocsp_server.pem.ocsp
show_ocsp_server.pem.ocsp.revoked
show_ssl_ocspresponse.vtc REGTESTS: ssl: Fix empty line in cli command input 2024-02-07 17:10:49 +01:00
simple.crt-list
ssl_alpn.vtc MEDIUM: config: set useful ALPN defaults for HTTPS and QUIC 2023-04-19 09:52:20 +02:00
ssl_client_auth.vtc REGTESTS: ssl: simplify X509_V code check in ssl_client_auth.vtc 2023-05-03 15:54:49 +02:00
ssl_client_samples.vtc BUILD: ssl: ssl_c_r_dn fetches uses functiosn only available since 1.1.1 2023-05-15 12:07:52 +02:00
ssl_crt-list_filters.vtc REGTESTS: ssl: update the filters test for TLSv1.3 and sigalgs 2023-10-26 19:23:04 +02:00
ssl_curve_name.vtc MEDIUM: ssl: new sample fetch method to get curve name 2023-07-17 15:45:41 +02:00
ssl_curves.vtc MINOR: ssl: add support for 'curves' keyword on server lines 2023-09-07 23:29:10 +02:00
ssl_default_server.vtc
ssl_dh.vtc REGTESTS: ssl: disable ssl_dh.vtc for WolfSSL 2023-10-09 22:11:37 +02:00
ssl_errors.vtc REGTESTS: Fix ssl_errors.vtc script to wait for connections close 2023-02-21 11:44:55 +01:00
ssl_frontend_samples.vtc REGTESTS: ssl: update common.pem with the new pki 2023-10-09 21:58:21 +02:00
ssl_generate_certificate.vtc REGTESTS: ssl: skip generate-certificates test w/ wolfSSL 2023-09-20 16:02:16 +02:00
ssl_reuse.vtc REGTESTS: ssl: enable the ssl_reuse.vtc test for WolfSSL 2022-12-20 15:28:37 +01:00
ssl_server_samples.vtc REGTESTS: ssl: update common.pem with the new pki 2023-10-09 21:58:21 +02:00
ssl_simple_crt-list.vtc
wrong_ctx_storage.vtc

README 

File list:
 - common.pem: PEM file which may be used by most of the VTC files.