]> git.ipfire.org Git - thirdparty/squid.git/commit - src/format/Format.cc
Add %ssl::<cert macro for logging server X.509 certificate (#316)
authorDaris A Nevil <daris@nevil.org>
Mon, 17 Dec 2018 17:38:01 +0000 (17:38 +0000)
committerSquid Anubis <squid-anubis@squid-cache.org>
Wed, 19 Dec 2018 21:50:18 +0000 (21:50 +0000)
commit12b5040fcbad2abc0d3269a3a14568285a48fdc6
treee77ff0556706b154937616cfa76207431eca4c69
parentfb76c8ac23a4dd0a17f0ae73d1f9eadc83d451f6
Add %ssl::<cert macro for logging server X.509 certificate (#316)

We have chosen the PEM format instead of, for example, raw DER format
because most programs exchange certificates using PEM format and because
logging raw binary values would be unusual for Squid logformat.

The current support is limited to SslBump step3 which parses and stores
the peer certificate. TODO: Support all from-Squid TLS connections.
src/cf.data.pre
src/format/ByteCode.h
src/format/Format.cc
src/format/Token.cc
src/ssl/support.cc
src/ssl/support.h
src/tests/stub_libsslsquid.cc
test-suite/squidconf/external_acl_type