]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MINOR: ssl: ssl-load-extra-files configure loading of files
authorWilliam Lallemand <wlallemand@haproxy.com>
Mon, 3 Feb 2020 16:15:52 +0000 (17:15 +0100)
committerWilliam Lallemand <wlallemand@haproxy.org>
Mon, 3 Feb 2020 16:50:26 +0000 (17:50 +0100)
commit3af48e706c662d95e4e2d49a1bd7e2763e1ef901
tree2f14f22810884be30515711afeb2728c4c6447ad
parent1c7c0d6b97513e79c304aaf834f83843f32a674d
MINOR: ssl: ssl-load-extra-files configure loading of files

This new setting in the global section alters the way HAProxy will look
for unspecified files (.ocsp, .sctl, .issuer, bundles) during the
loading of the SSL certificates.

By default, HAProxy discovers automatically a lot of files not specified
in the configuration, and you may want to disable this behavior if you
want to optimize the startup time.

This patch sets flags in global_ssl.extra_files and then check them
before trying to load an extra file.
doc/configuration.txt
src/ssl_sock.c