mirrors/haproxy
1
0
Fork 0
mirror of https://git.haproxy.org/git/haproxy.git/ synced 2025-09-22 22:31:28 +02:00
Code Issues Projects Releases Wiki Activity

DOC: ssl: add fetches and ACLs 'ssl_verify_crterr', 'ssl_verify_caerr', and 'ssl_verify_crterr_depth'

Browse Source
This commit is contained in:
Emeric Brun 2012-09-28 18:35:15 +02:00 committed by Willy Tarreau
parent f282a810b7
commit 3603fbe0af
1 changed files with 25 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
doc/configuration.txt
View File

@ -8190,6 +8190,20 @@ ssl_sni_req <regex>
haproxy and not to SSL contents being blindly forwarded. This requires that
the SSL library is build with support for TLS extensions (check haproxy -vv).
ssl_verify_caerr <errorID>
Returns true when the incoming connection was made over an SSL/TLS data layer
and the ID of the first error detected during verify at depth > 0 match the
errorID.
ssl_verify_caerr_depth <depth>
Returns true when the incoming connection was made over an SSL/TLS data layer
and the depth of the first error detected during verify match the depth.
ssl_verify_crterr <errorID>
Returns true when the incoming connection was made over an SSL/TLS data layer
and the ID of the first error detected during verify at depth == 0 match the
errorID.
ssl_verify_result <errorID>
Returns true when the incoming connection was made over an SSL/TLS data layer
and the verify result match the errorID.
@ -8808,6 +8822,17 @@ The list of currently supported pattern fetch functions is the following :
host name (253 chars or less). The SSL library must have been
built with support for TLS extensions (check haproxy -vv).
ssl_verify_caerr
Returns the ID of the first error detected during verify at
depth > 0 or 0 if no errors.
ssl_verify_caerr_depth
Returns the depth of the first error detected during verify.
ssl_verify_crterr
Returns the ID of the first error detected during verify at
depth == 0 or 0 if no errors.
ssl_verify_result
Returns the verify result errorID when the incoming connection
was made over an SSL/TLS data layer.