1berry/haproxy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

BUG/MINOR: ssl/cli: "show ssl crt-list" lacks client-sigals

Browse Source 
b6ae2aafde43 ("MINOR: ssl: allow to change the signature algorithm for
client authentication") implemented the client-sigals keyword in the
crt-list but never the dump of the keyword over the CLI.

Must be backported as far as 2.8.
This commit is contained in:
William Lallemand 2025-02-12 17:09:21 +01:00
parent 561319bd1c
commit 037d2e5498
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/ssl_crtlist.c
View File

@ -960,6 +960,12 @@ static void dump_crtlist_conf(struct buffer *buf, const struct ssl_bind_conf *co
space++;
}
if (conf->client_sigalgs) {
if (space) chunk_appendf(buf, " ");
chunk_appendf(buf, "client-sigalgs %s", conf->client_sigalgs);
space++;
}
/* the crt-lists only support ssl-min-ver and ssl-max-ver */
if (conf->ssl_methods_cfg.min) {
if (space) chunk_appendf(buf, " ");