]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MEDIUM: ssl: Add certificate password callback that calls external command
authorRemi Tricot-Le Breton <rlebreton@haproxy.com>
Tue, 28 Oct 2025 17:00:45 +0000 (18:00 +0100)
committerWilliam Lallemand <wlallemand@haproxy.com>
Wed, 29 Oct 2025 09:54:17 +0000 (10:54 +0100)
commit478dd7bad0be11fa21be23aa13a8398dce174a3f
tree13255d8eb56d0d6cd43cadf3ba572156619cb127
parenta0116836226a313e564210de4856ad663d9442f1
MEDIUM: ssl: Add certificate password callback that calls external command

When a certificate is protected by a password, we can provide the
password via the dedicated pem_password_cb param provided to
PEM_read_bio_PrivateKey.
HAProxy will fetch the password automatically during init by calling a
user-defined external command that should dump the right password on its
standard output (see new 'ssl-passphrase-cmd' global option).
doc/configuration.txt
include/haproxy/ssl_sock-t.h
include/haproxy/ssl_sock.h
src/cfgparse-ssl.c
src/ssl_ckch.c
src/ssl_sock.c