haproxy

mirror of http://git.haproxy.org/git/haproxy.git/ synced 2024-12-22 04:10:48 +00:00

History

William Lallemand e6657fd108 MEDIUM: ssl: don't load file by discovering them in crt-store In commit `55e9e9591` ("MEDIUM: ssl: temporarily load files by detecting their presence in crt-store"), ssl_sock_load_pem_into_ckch() was replaced by ssl_sock_load_files_into_ckch() in the crt-store loading. But the side effect was that we always try to autodetect, and this is not what we want. This patch reverse this, and add specific code in the crt-list loading, so we could autodetect in crt-list like it was done before, but still try to load files when a crt-store filename keyword is specified. Example: These crt-list lines won't autodetect files: foobar.crt [key foobar.key issuer foobar.issuer ocsp-update on] .foo.bar foobar.crt [key foobar.key] .foo.bar These crt-list lines will autodect files: foobar.pem [ocsp-update on] *.foo.bar foobar.pem		2024-05-21 18:30:45 +02:00
..
generate_certificates
ocsp_update	REGTESTS: ssl: Add OCSP related tests	2024-03-20 16:12:10 +01:00
add_ssl_crt-list.vtc	REGTESTS: ssl: update common.pem with the new pki	2023-10-09 21:58:21 +02:00
bug-2265.crt	BUG/MINOR: ssl/cli: can't find ".crt" files when replacing a certificate	2023-08-28 18:20:39 +02:00
ca-auth.crt
cert1-example.com.pem.ecdsa
cert1-example.com.pem.rsa
cert2-example.com.pem.ecdsa
cert2-example.com.pem.rsa
client1.pem
client2_expired.pem
client3_revoked.pem
client.ecdsa.pem
common.4096.dh
common.crt
common.key
common.pem	REGTESTS: ssl: update common.pem with the new pki	2023-10-09 21:58:21 +02:00
crl-auth.pem
crt_store.vtc	MEDIUM: ssl: don't load file by discovering them in crt-store	2024-05-21 18:30:45 +02:00
del_ssl_crt-list.vtc	REGTESTS: ssl: update common.pem with the new pki	2023-10-09 21:58:21 +02:00
dynamic_server_ssl.vtc
ecdsa.crt
ecdsa.key
ecdsa.pem
filters.crt-list
interCA1_crl_empty.pem
interCA1_crl.pem
interCA2_crl_empty.pem
interCA2_crl.pem
localhost.crt-list
log_forward_ssl.vtc
new_del_ssl_cafile.vtc
new_del_ssl_crlfile.vtc
ocsp_auto_update.vtc	REGTESTS: ocsp-update: change the reg-test to support the new crt-store mode	2024-05-17 17:35:51 +02:00
ocsp_compat_check.vtc	REGTESTS: ocsp-update: change the reg-test to support the new crt-store mode	2024-05-17 17:35:51 +02:00
README
rootCA_crl.pem
set_cafile_client.pem
set_cafile_interCA1.crt
set_cafile_interCA2.crt
set_cafile_rootCA.crt
set_cafile_server.pem
set_default_cert.crt-list
set_default_cert.pem
set_ssl_bug_2265.vtc	REGTESTS: ssl: update common.pem with the new pki	2023-10-09 21:58:21 +02:00
set_ssl_cafile.vtc	REGTESTS: wolfssl: temporarly disable some failing reg-tests	2023-10-09 23:05:18 +02:00
set_ssl_cert_bundle.vtc
set_ssl_cert_noext.vtc
set_ssl_cert.vtc	REGTESTS: ssl: update common.pem with the new pki	2023-10-09 21:58:21 +02:00
set_ssl_crlfile.vtc	REGTESTS: wolfssl: temporarly disable some failing reg-tests	2023-10-09 23:05:18 +02:00
set_ssl_server_cert.vtc	REGTESTS: wolfssl: temporarly disable some failing reg-tests	2023-10-09 23:05:18 +02:00
show_ocsp_server.pem
show_ocsp_server.pem.issuer
show_ocsp_server.pem.ocsp
show_ocsp_server.pem.ocsp.revoked
show_ssl_ocspresponse.vtc	REGTESTS: ssl: Fix empty line in cli command input	2024-02-07 17:10:49 +01:00
simple.crt-list
ssl_alpn.vtc	MEDIUM: config: set useful ALPN defaults for HTTPS and QUIC	2023-04-19 09:52:20 +02:00
ssl_client_auth.vtc	REGTESTS: ssl: simplify X509_V code check in ssl_client_auth.vtc	2023-05-03 15:54:49 +02:00
ssl_client_samples.vtc	BUILD: ssl: ssl_c_r_dn fetches uses functiosn only available since 1.1.1	2023-05-15 12:07:52 +02:00
ssl_crt-list_filters.vtc	REGTESTS: ssl: update the filters test for TLSv1.3 and sigalgs	2023-10-26 19:23:04 +02:00
ssl_curve_name.vtc	MEDIUM: ssl: new sample fetch method to get curve name	2023-07-17 15:45:41 +02:00
ssl_curves.vtc	MINOR: ssl: add support for 'curves' keyword on server lines	2023-09-07 23:29:10 +02:00
ssl_default_server.vtc
ssl_dh.vtc	REGTESTS: ssl: disable ssl_dh.vtc for WolfSSL	2023-10-09 22:11:37 +02:00
ssl_errors.vtc
ssl_frontend_samples.vtc	REGTESTS: ssl: update common.pem with the new pki	2023-10-09 21:58:21 +02:00
ssl_generate_certificate.vtc	REGTESTS: ssl: skip generate-certificates test w/ wolfSSL	2023-09-20 16:02:16 +02:00
ssl_reuse.vtc
ssl_server_samples.vtc	REGTESTS: ssl: update common.pem with the new pki	2023-10-09 21:58:21 +02:00
ssl_simple_crt-list.vtc
wrong_ctx_storage.vtc

README

File list:
 - common.pem: PEM file which may be used by most of the VTC files.