]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MEDIUM: ssl: improve crt-list format to support negation
authorEmmanuel Hocdet <manu@gandi.net>
Tue, 7 May 2013 18:20:06 +0000 (20:20 +0200)
committerWilly Tarreau <w@1wt.eu>
Tue, 7 May 2013 20:11:54 +0000 (22:11 +0200)
commit7c41a1b59b005a75914121a604ede449374b8de7
treef96c61f3950b7321f99f7fd02388d2195b02c752
parent2b5702030daf1f6394cc7c7e0c2cda9ef90ae2e1
MEDIUM: ssl: improve crt-list format to support negation

Improve the crt-list file format to allow a rule to negate a certain SNI :

        <crtfile> [[!]<snifilter> ...]

This can be useful when a domain supports a wildcard but you don't want to
deliver the wildcard cert for certain specific domains.
doc/configuration.txt
include/types/ssl_sock.h
src/ssl_sock.c