From: Guillaume Castagnino Date: Thu, 13 Sep 2012 13:02:53 +0000 (+0200) Subject: DOC: duplicate ssl_sni section X-Git-Tag: v1.5-dev13~293 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=aeff252dcac84a82d1688e8ac3d00dad85ca4a50;p=thirdparty%2Fhaproxy.git DOC: duplicate ssl_sni section I noticed that the ssl_sni section is duplicated in configuration. Here is the (very) small fix. --- diff --git a/doc/configuration.txt b/doc/configuration.txt index 7be333505f..227b50f6b8 100644 --- a/doc/configuration.txt +++ b/doc/configuration.txt @@ -8085,15 +8085,6 @@ req_ssl_ver SSL data layer, so this will not work with "bind" lines having the "ssl" option. -ssl_sni - Returns true when the incoming connection was made over an SSL/TLS data layer - which deciphered it and found a Server Name Indication TLS extension sent by - the client, matching the specified string. In HTTPS, the SNI field (when - present) is equal to the requested host name. This match is different from - req_ssl_sni above in that it applies to the connection being deciphered by - haproxy and not to SSL contents being blindly forwarded. This requires that - the SSL library is build with support for TLS extensions (check haproxy -vv). - ssl_has_sni This is used to check for presence of a Server Name Indication TLS extension in an incoming connection was made over an SSL/TLS data layer. Returns true