]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MEDIUM: ssl: add support for SNI and wildcard certificates
authorEmeric Brun <ebrun@exceliance.fr>
Fri, 7 Sep 2012 15:30:07 +0000 (17:30 +0200)
committerWilly Tarreau <w@1wt.eu>
Mon, 10 Sep 2012 07:27:02 +0000 (09:27 +0200)
commitfc0421fde990a28018054aa2c5c85eb89ec59400
treeb6d5fb7b07404d05102f5cd2370b45a4189b1dd9
parent61aaad06e85ae7f46cf5589bce8bc7f9331e7962
MEDIUM: ssl: add support for SNI and wildcard certificates

A side effect of this change is that the "ssl" keyword on "bind" lines is now
just a boolean and that "crt" is needed to designate certificate files or
directories.

Note that much refcounting was needed to have the free() work correctly due to
the number of cert aliases which can make a context be shared by multiple names.
include/proto/ssl_sock.h
include/types/protocols.h
include/types/ssl_sock.h [new file with mode: 0644]
src/cfgparse.c
src/haproxy.c
src/ssl_sock.c