mirrors/haproxy
1
0
Fork 0
mirror of https://git.haproxy.org/git/haproxy.git/ synced 2025-09-22 22:31:28 +02:00
Code Issues Projects Releases Wiki Activity

DOC: ssl: add fetches and ACLs 'ssl_verify_crterr', 'ssl_verify_caerr', and 'ssl_verify_crterr_depth'

Browse Source
This commit is contained in:
Emeric Brun 2012-09-28 18:35:15 +02:00 committed by Willy Tarreau
parent f282a810b7
commit 3603fbe0af
1 changed files with 25 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
doc/configuration.txt
View File

@ -8190,6 +8190,20 @@ ssl_sni_req <regex>
haproxy and not to SSL contents being blindly forwarded. This requires that haproxy and not to SSL contents being blindly forwarded. This requires that
the SSL library is build with support for TLS extensions (check haproxy -vv). the SSL library is build with support for TLS extensions (check haproxy -vv).
ssl_verify_caerr <errorID>
Returns true when the incoming connection was made over an SSL/TLS data layer
and the ID of the first error detected during verify at depth > 0 match the
errorID.
ssl_verify_caerr_depth <depth>
Returns true when the incoming connection was made over an SSL/TLS data layer
and the depth of the first error detected during verify match the depth.
ssl_verify_crterr <errorID>
Returns true when the incoming connection was made over an SSL/TLS data layer
and the ID of the first error detected during verify at depth == 0 match the
errorID.
ssl_verify_result <errorID> ssl_verify_result <errorID>
Returns true when the incoming connection was made over an SSL/TLS data layer Returns true when the incoming connection was made over an SSL/TLS data layer
and the verify result match the errorID. and the verify result match the errorID.
@ -8808,6 +8822,17 @@ The list of currently supported pattern fetch functions is the following :
host name (253 chars or less). The SSL library must have been host name (253 chars or less). The SSL library must have been
built with support for TLS extensions (check haproxy -vv). built with support for TLS extensions (check haproxy -vv).
ssl_verify_caerr
Returns the ID of the first error detected during verify at
depth > 0 or 0 if no errors.
ssl_verify_caerr_depth
Returns the depth of the first error detected during verify.
ssl_verify_crterr
Returns the ID of the first error detected during verify at
depth == 0 or 0 if no errors.
ssl_verify_result ssl_verify_result
Returns the verify result errorID when the incoming connection Returns the verify result errorID when the incoming connection
was made over an SSL/TLS data layer. was made over an SSL/TLS data layer.