From: William Lallemand <wlallemand@haproxy.com>
Date: Wed, 12 Feb 2025 16:13:03 +0000 (+0100)
Subject: BUG/MINOR: ssl/cli: "show ssl crt-list" lacks sigals
X-Git-Tag: v3.2-dev6~27
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=5a7cbb8d8115770c4776836fdf727b26d490d2ad;p=thirdparty%2Fhaproxy.git

BUG/MINOR: ssl/cli: "show ssl crt-list" lacks sigals

1d3c8223 ("MINOR: ssl: allow to change the server signature algorithm")
mplemented the sigals keyword in the crt-list but never the dump of the
keyword over the CLI.

Must be backported as far as 2.8.
---

diff --git a/src/ssl_crtlist.c b/src/ssl_crtlist.c
index 1cda1cf45..f19864fd3 100644
--- a/src/ssl_crtlist.c
+++ b/src/ssl_crtlist.c
@@ -966,6 +966,12 @@ static void dump_crtlist_conf(struct buffer *buf, const struct ssl_bind_conf *co
 		space++;
 	}
 
+	if (conf->sigalgs) {
+		if (space) chunk_appendf(buf, " ");
+		chunk_appendf(buf, "sigalgs %s", conf->sigalgs);
+		space++;
+	}
+
 	/* the crt-lists only support ssl-min-ver and ssl-max-ver */
 	if (conf->ssl_methods_cfg.min) {
 		if (space) chunk_appendf(buf, " ");