mirrors/haproxy
1
0
Fork 0
mirror of https://git.haproxy.org/git/haproxy.git/ synced 2025-11-08 12:31:21 +01:00
Code Issues Projects Releases Wiki Activity

DOC: acme: crt-store allows you to start without a certificate

Browse Source 
If your acme certificate is declared in a crt-store, and the certificate
file does not exist on the disk, HAProxy will start with a temporary key
pair.
This commit is contained in:
William Lallemand 2025-11-06 13:34:36 +01:00
parent 5fe4677231
commit 05036180d9
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
doc/configuration.txt
View File

@ -30805,6 +30805,12 @@ acme <string>
This is an experimental feature which needs the
"expose-experimental-directives" keyword in the global section.
When using the "acme" keyword in a crt-store, it is possible to start without
an existing certificate on the disk. Instead, a temporary key pair will be
used until the ACME certificate is generated. This behavior is exclusives to
crt-stores, neither a crt-list line nor an ssl-f-use line can achieve the
same without declaring a crt-store first.
See also Section 12.8 ("ACME") and "domains" in this section.
alias <string>