From: Remi Tricot-Le Breton <rlebreton@haproxy.com>
Date: Thu, 2 Oct 2025 13:32:46 +0000 (+0200)
Subject: MINOR: ssl: Dump options in "show ssl cert"
X-Git-Tag: v3.3-dev10~24
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=daa36adc6e416e59c077a47840acf8c127983881;p=thirdparty%2Fhaproxy.git

MINOR: ssl: Dump options in "show ssl cert"

Dump the values of the 'ocsp-update' and 'jwt' flags in the output of
'show ssl cert' CLI command.
---

diff --git a/src/ssl_ckch.c b/src/ssl_ckch.c
index d64f46a25..f720f3729 100644
--- a/src/ssl_ckch.c
+++ b/src/ssl_ckch.c
@@ -2246,6 +2246,9 @@ static int cli_io_handler_show_cert_detail(struct appctx *appctx)
 		chunk_appendf(out, "SCTL filename: ");
 		chunk_appendf(out, "%s\n", ckchs->conf.sctl);
 	}
+	chunk_appendf(out, "Option: ocsp-update %s\n",
+	              ckchs->conf.ocsp_update_mode ? "on": "off");
+	chunk_appendf(out, "Option: jwt %s\n", ckchs->conf.jwt ? "on": "off");
 
 	chunk_appendf(out, "Status: ");
 	if (ckchs->data->cert == NULL)