From: Remi Tricot-Le Breton <rlebreton@haproxy.com>
Date: Thu, 2 Mar 2023 14:49:52 +0000 (+0100)
Subject: MINOR: ssl: Add ocsp-update information to "show ssl crt-list"
X-Git-Tag: v2.8-dev5~49
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=ca0c84a50906105cfff23dcdd2e33a9a669c4e24;p=thirdparty%2Fhaproxy.git

MINOR: ssl: Add ocsp-update information to "show ssl crt-list"

The "show ssl crt-list <list>" CLI command did not manage the new
ocsp-update option yet.
---

diff --git a/src/ssl_crtlist.c b/src/ssl_crtlist.c
index aa7fdb2edb..e5a5c24547 100644
--- a/src/ssl_crtlist.c
+++ b/src/ssl_crtlist.c
@@ -909,6 +909,13 @@ static void dump_crtlist_sslconf(struct buffer *buf, const struct ssl_bind_conf
 		space++;
 	}
 
+	if (conf->ocsp_update != SSL_SOCK_OCSP_UPDATE_DFLT) {
+		if (space) chunk_appendf(buf, " ");
+		chunk_appendf(buf, "ocsp-update %s",
+		              conf->ocsp_update == SSL_SOCK_OCSP_UPDATE_OFF ? "off" : "on");
+		space++;
+	}
+
 	chunk_appendf(buf, "]");
 
 	return;