]> git.ipfire.org Git - thirdparty/haproxy.git/commitdiff
MINOR: ssl: add a comment above the ssl_bind_conf keywords
authorWilliam Lallemand <wlallemand@haproxy.com>
Wed, 1 Apr 2020 15:42:47 +0000 (17:42 +0200)
committerWilliam Lallemand <wlallemand@haproxy.org>
Wed, 1 Apr 2020 18:10:53 +0000 (20:10 +0200)
Add a warning above the ssl_bind_conf keywords list so developers check
if their keywords are relevant for the list.

src/ssl_sock.c

index 17d793998d07b0bcba2fa70d813174991fcd7475..7be6d1ccf9d7543245fc7ccf7dbf1a6a2d58533d 100644 (file)
@@ -12716,6 +12716,9 @@ INITCALL1(STG_REGISTER, acl_register_keywords, &acl_kws);
  * the config parser can report an appropriate error when a known keyword was
  * not enabled.
  */
+
+/* the <ssl_bind_kws> keywords are used for crt-list parsing, they *MUST* be safe
+ * with their proxy argument NULL and must only fill the ssl_bind_conf */
 static struct ssl_bind_kw ssl_bind_kws[] = {
        { "allow-0rtt",            ssl_bind_parse_allow_0rtt,       0 }, /* allow 0-RTT */
        { "alpn",                  ssl_bind_parse_alpn,             1 }, /* set ALPN supported protocols */