]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MINOR: ssl: allow to change the server signature algorithm
authorWilliam Lallemand <wlallemand@haproxy.org>
Thu, 4 May 2023 13:33:55 +0000 (15:33 +0200)
committerWilliam Lallemand <wlallemand@haproxy.org>
Thu, 4 May 2023 20:43:18 +0000 (22:43 +0200)
commit1d3c822300003bf40f4d723109c690ad2944baf2
tree56de699b9368a48cd4b6bea7023cc72baa440bb4
parente69919d1bacaeae78a02fa2a7173a0f2d67ab470
MINOR: ssl: allow to change the server signature algorithm

This patch introduces the "sigalgs" keyword for the bind line, which
allows to configure the list of server signature algorithms negociated
during the handshake. Also available as "ssl-default-bind-sigalgs" in
the default section.

This patch was originally written by Bruno Henc.
doc/configuration.txt
include/haproxy/listener-t.h
include/haproxy/openssl-compat.h
include/haproxy/ssl_sock-t.h
src/cfgparse-ssl.c
src/ssl_crtlist.c
src/ssl_sock.c