]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MINOR: ssl: support ssl-min-ver and ssl-max-ver with crt-list
authorEmmanuel Hocdet <manu@gandi.net>
Thu, 18 May 2017 10:46:50 +0000 (12:46 +0200)
committerWilly Tarreau <w@1wt.eu>
Fri, 2 Jun 2017 14:42:09 +0000 (16:42 +0200)
commitdf701a2adbc57670bb6fffd4744f5deae23d11e4
tree06133607614475dcbc61cd285c8518c0f5110a02
parent4aa615ff6bc5803ff4835f9e7f662a3437a52fd9
MINOR: ssl: support ssl-min-ver and ssl-max-ver with crt-list

SSL/TLS version can be changed per certificat if and only if openssl lib support
earlier callback on handshake and, of course, is implemented in haproxy. It's ok
for BoringSSL. For Openssl, version 1.1.1 have such callback and could support it.
doc/configuration.txt
include/types/listener.h
src/ssl_sock.c