Quantcast
Channel: Serverphorums.com - HAProxy
Viewing all articles
Browse latest Browse all 5112

[PATCH] MINOR: ssl: support ssl-min-ver and ssl-max-ver with crt-list (no replies)

$
0
0
Hi,

This patch depend of " [Patches] TLS methods configuration reworked »..

Actually it will only work with BoringSSL because haproxy use a special ssl_sock_switchctx_cbk
with a BoringSSL callback to select certificat before any handshake negotiation.
This feature (and others depend of this ssl_sock_switchctx_cbk) could work with openssl 1.1.1 and
the new callback https://www.openssl.org/docs/manmaster/man3/SSL_CTX_set_early_cb.html.

++
Manu

Viewing all articles
Browse latest Browse all 5112

Trending Articles