]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MAJOR: ssl: use the msg callback mecanism for backend connections
authorWilliam Lallemand <wlallemand@haproxy.com>
Fri, 19 Apr 2024 12:18:32 +0000 (14:18 +0200)
committerWilliam Lallemand <wlallemand@haproxy.com>
Fri, 19 Apr 2024 12:48:44 +0000 (14:48 +0200)
commit1494cd71379b556ef9fa37f487d0083f33b2e2d0
tree474f32a0788363835dfb82f145b047ca1cdeeea7
parenta7caa14a643da10e26c6248915626c8d79374883
MAJOR: ssl: use the msg callback mecanism for backend connections

Backend SSL connections never used the ssl_sock_msg_callbacks() which
prevent the use of keylog on the server side.

The impact should be minimum, though it add a major callback system for
protocol analysis, which is the same used on frontend connections.

https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_set_msg_callback.html

The patch add a call to SSL_CTX_set_msg_callback() in
ssl_sock_prepare_srv_ssl_ctx() the same way it's done for bind lines in
ssl_sock_prepare_ctx().
src/ssl_sock.c