]> git.ipfire.org Git - thirdparty/haproxy.git/commitdiff
DOC: configuration: add missing openssl_version predicates
authorWilliam Lallemand <wlallemand@haproxy.com>
Fri, 14 Nov 2025 09:43:09 +0000 (10:43 +0100)
committerWilliam Lallemand <wlallemand@haproxy.com>
Fri, 14 Nov 2025 10:01:45 +0000 (11:01 +0100)
Add missing openssl_version_atleast() and  openssl_version_before()
predicates.

The predicates exist since 3aeb3f9347 ("MINOR: cfgcond: implements
openssl_version_atleast and openssl_version_before").

Must be backported in every stable versions.

doc/configuration.txt

index 3bc667a70fa04f1d1cc9cd0da9e1505fddbe3c3d..59ffcf74e52c15265ca11ce59fc3f0d47a672509 100644 (file)
@@ -1185,6 +1185,21 @@ The list of currently supported predicates is the following:
                             in the features list reported by "haproxy -vv"
                             (which means a <name> appears after a '+')
 
+  - openssl_version_atleast(<ver>) : returns true if the current openssl
+                            version is at least as recent as <ver> otherwise
+                            false.
+                            Libraries like LibreSSL, AWS-LC and WolfSSL also
+                            provide a pseudo OpenSSL version.
+                            Example:
+                              ssllib_name_startswith(OpenSSL) && openssl_version_atleast(1.1.1)
+
+  - openssl_version_before(<ver>) : returns true if the current openssl
+                            version is strictly older than <ver> otherwise
+                            false.
+                            Libraries like LibreSSL, AWS-LC and WolfSSL also
+                            provide a pseudo OpenSSL version.
+                            Example: openssl_version_before(3.5.0)
+
   - ssllib_name_startswith(<name>)  : return true if the SSL library name
                             HAProxy was linked with, starts with <name>.
                             Example: ssllib_name_startswith(wolfSSL)