]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MEDIUM: ssl: add client certificate authentication support
authorEmeric Brun <ebrun@exceliance.fr>
Thu, 20 Sep 2012 16:23:56 +0000 (18:23 +0200)
committerWilly Tarreau <w@1wt.eu>
Tue, 2 Oct 2012 06:04:49 +0000 (08:04 +0200)
commitd94b3fe98f92a5f95a078a8f53e24bd0a02eff02
tree8baacd58227889b02c7c1ba22aa9f14770397714
parent7fb34422fe97706916acea059343cc21a9d6e5ef
MEDIUM: ssl: add client certificate authentication support

Add keyword 'verify' on bind:
'verify none': authentication disabled (default)
'verify optional': accept connection without certificate
                   and process a verify if the client sent a certificate
'verify required': reject connection without certificate
                   and process a verify if the client send a certificate

Add keyword 'cafile' on bind:
'cafile <path>' path to a client CA file used to verify.
'crlfile <path>' path to a client CRL file used to verify.
include/types/listener.h
src/cfgparse.c
src/haproxy.c
src/ssl_sock.c