]> git.ipfire.org Git - thirdparty/haproxy.git/commitdiff
BUG/MINOR: ssl/cli: "show ssl crt-list" lacks sigals
authorWilliam Lallemand <wlallemand@haproxy.com>
Wed, 12 Feb 2025 16:13:03 +0000 (17:13 +0100)
committerWilliam Lallemand <wlallemand@haproxy.com>
Wed, 12 Feb 2025 16:16:50 +0000 (17:16 +0100)
1d3c8223 ("MINOR: ssl: allow to change the server signature algorithm")
mplemented the sigals keyword in the crt-list but never the dump of the
keyword over the CLI.

Must be backported as far as 2.8.

src/ssl_crtlist.c

index 1cda1cf450362a4ca787f6ffb38f6ee3c57d8f65..f19864fd389d0244a9800b8fe92bb6a73067ec4c 100644 (file)
@@ -966,6 +966,12 @@ static void dump_crtlist_conf(struct buffer *buf, const struct ssl_bind_conf *co
                space++;
        }
 
+       if (conf->sigalgs) {
+               if (space) chunk_appendf(buf, " ");
+               chunk_appendf(buf, "sigalgs %s", conf->sigalgs);
+               space++;
+       }
+
        /* the crt-lists only support ssl-min-ver and ssl-max-ver */
        if (conf->ssl_methods_cfg.min) {
                if (space) chunk_appendf(buf, " ");