]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MEDIUM: ssl/cli: "dump ssl cert" allow to dump a certificate in PEM format
authorWilliam Lallemand <wlallemand@haproxy.com>
Mon, 9 Sep 2024 14:34:50 +0000 (16:34 +0200)
committerWilliam Lallemand <wlallemand@haproxy.com>
Mon, 9 Sep 2024 14:54:48 +0000 (16:54 +0200)
commit021ac6a108a9489fb1f9968cfbc07ade86b25eb2
treea030b270d735b2552f747597aa30042266dc5b6d
parent68cfb222b559b909415c9aa92114ca42c9a93459
MEDIUM: ssl/cli: "dump ssl cert" allow to dump a certificate in PEM format

The new "dump ssl cert" CLI command allows to dump a certificate stored
into HAProxy memory. Until now it was only possible to dump the
description of the certificate using "show ssl cert", but with this new
command you can dump the PEM content on the filesystem.

This command is only available on a admin stats socket.

$ echo "@1 dump ssl cert cert.pem" | socat /tmp/master.sock -
-----BEGIN PRIVATE KEY-----
[...]
-----END PRIVATE KEY-----
-----BEGIN CERTIFICATE-----
[...]
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
[...]
-----END CERTIFICATE-----
doc/management.txt
src/ssl_ckch.c