]> git.ipfire.org Git - thirdparty/haproxy.git/commitdiff
BUG/MINOR: ssl/cli: "show ssl crt-list" lacks client-sigals
authorWilliam Lallemand <wlallemand@haproxy.com>
Wed, 12 Feb 2025 16:09:21 +0000 (17:09 +0100)
committerWilliam Lallemand <wlallemand@haproxy.com>
Wed, 12 Feb 2025 16:16:50 +0000 (17:16 +0100)
b6ae2aafde43 ("MINOR: ssl: allow to change the signature algorithm for
client authentication") implemented the client-sigals keyword in the
crt-list but never the dump of the keyword over the CLI.

Must be backported as far as 2.8.

src/ssl_crtlist.c

index 189d6e6ca147bc80cbcc299361cfb455e08b884b..1cda1cf450362a4ca787f6ffb38f6ee3c57d8f65 100644 (file)
@@ -960,6 +960,12 @@ static void dump_crtlist_conf(struct buffer *buf, const struct ssl_bind_conf *co
                space++;
        }
 
+       if (conf->client_sigalgs) {
+               if (space) chunk_appendf(buf, " ");
+               chunk_appendf(buf, "client-sigalgs %s", conf->client_sigalgs);
+               space++;
+       }
+
        /* the crt-lists only support ssl-min-ver and ssl-max-ver */
        if (conf->ssl_methods_cfg.min) {
                if (space) chunk_appendf(buf, " ");