1berry/haproxy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

BUG/MINOR: ssl/cli: "show ssl crt-list" lacks sigals

Browse Source 
1d3c8223 ("MINOR: ssl: allow to change the server signature algorithm")
mplemented the sigals keyword in the crt-list but never the dump of the
keyword over the CLI.

Must be backported as far as 2.8.
This commit is contained in:
William Lallemand 2025-02-12 17:13:03 +01:00
parent 037d2e5498
commit 5a7cbb8d81
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/ssl_crtlist.c
View File

@ -966,6 +966,12 @@ static void dump_crtlist_conf(struct buffer *buf, const struct ssl_bind_conf *co
space++; space++;
} }
if (conf->sigalgs) {
if (space) chunk_appendf(buf, " ");
chunk_appendf(buf, "sigalgs %s", conf->sigalgs);
space++;
}
/* the crt-lists only support ssl-min-ver and ssl-max-ver */ /* the crt-lists only support ssl-min-ver and ssl-max-ver */
if (conf->ssl_methods_cfg.min) { if (conf->ssl_methods_cfg.min) {
if (space) chunk_appendf(buf, " "); if (space) chunk_appendf(buf, " ");