From: Jerome Magnin <jerome@layaute.net>
Date: Mon, 7 Sep 2020 09:55:57 +0000 (+0200)
Subject: DOC: ssl-load-extra-files only applies to certificates on bind lines
X-Git-Tag: v2.3-dev4~17
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=587be9ce306c34fca5987d6cd9febe3b966d5672;p=thirdparty%2Fhaproxy.git

DOC: ssl-load-extra-files only applies to certificates on bind lines

Be explicit about ssl-load-extra-files not applying to certificates
referenced with the crt keyword on server lines.

It must be backported in 2.2.
---

diff --git a/doc/configuration.txt b/doc/configuration.txt
index a8242793a6..c1f6f82197 100644
--- a/doc/configuration.txt
+++ b/doc/configuration.txt
@@ -1373,7 +1373,8 @@ ssl-dh-param-file <file>
 
 ssl-load-extra-files <none|all|bundle|sctl|ocsp|issuer|key>*
   This setting alters the way HAProxy will look for unspecified files during
-  the loading of the SSL certificates.
+  the loading of the SSL certificates associated to "bind" lines. It does not
+  apply to certificates used for client authentication on "server" lines.
 
   By default, HAProxy discovers automatically a lot of files not specified in
   the configuration, and you may want to disable this behavior if you want to