]> git.ipfire.org Git - thirdparty/dovecot/core.git/commitdiff
lib-master: Fill master_service_connection_haproxy.ssl_client_cert flag
authorTimo Sirainen <timo.sirainen@open-xchange.com>
Thu, 23 Apr 2026 10:51:52 +0000 (10:51 +0000)
committertimo.sirainen <timo.sirainen@open-xchange.com>
Thu, 30 Apr 2026 10:26:00 +0000 (10:26 +0000)
It's TRUE if HAProxy verified the client certificate was valid.
Previously the field was always set to FALSE.

src/lib-master/master-service-haproxy.c

index 519cd7944a307e125c1ef7d924bba5080c9ccc9f..94272724d55bd3f31922bb243b19450ebebb6459 100644 (file)
@@ -231,6 +231,7 @@ master_service_haproxy_parse_ssl_tlv(struct master_service_haproxy_conn *hpconn,
                 (PP2_CLIENT_CERT_CONN | PP2_CLIENT_CERT_SESS)) != 0;
        bool client_cert_verified =
                client_cert_present && ssl_kv->verify == 0;
+       hpconn->conn.haproxy.ssl_client_cert = client_cert_verified;
 
        /* try parse some more */
        for(size_t i = 0; i < ssl_kv->len;) {