mirror of
https://git.haproxy.org/git/haproxy.git/
synced 2025-08-09 00:27:08 +02:00
DOC: ssl: add fetch and ACL 'ssl_verify_result'
This commit is contained in:
parent
baf8ffb673
commit
c68af8db6f
@ -8190,6 +8190,10 @@ ssl_sni_req <regex>
|
|||||||
haproxy and not to SSL contents being blindly forwarded. This requires that
|
haproxy and not to SSL contents being blindly forwarded. This requires that
|
||||||
the SSL library is build with support for TLS extensions (check haproxy -vv).
|
the SSL library is build with support for TLS extensions (check haproxy -vv).
|
||||||
|
|
||||||
|
ssl_verify_result <errorID>
|
||||||
|
Returns true when the incoming connection was made over an SSL/TLS data layer
|
||||||
|
and the verify result match the errorID.
|
||||||
|
|
||||||
wait_end
|
wait_end
|
||||||
Waits for the end of the analysis period to return true. This may be used in
|
Waits for the end of the analysis period to return true. This may be used in
|
||||||
conjunction with content analysis to avoid returning a wrong verdict early.
|
conjunction with content analysis to avoid returning a wrong verdict early.
|
||||||
@ -8804,6 +8808,10 @@ The list of currently supported pattern fetch functions is the following :
|
|||||||
host name (253 chars or less). The SSL library must have been
|
host name (253 chars or less). The SSL library must have been
|
||||||
built with support for TLS extensions (check haproxy -vv).
|
built with support for TLS extensions (check haproxy -vv).
|
||||||
|
|
||||||
|
ssl_verify_result
|
||||||
|
Returns the verify result errorID when the incoming connection
|
||||||
|
was made over an SSL/TLS data layer.
|
||||||
|
|
||||||
url This extracts the request's URL as presented in the request. A
|
url This extracts the request's URL as presented in the request. A
|
||||||
typical use is with prefetch-capable caches, and with portals
|
typical use is with prefetch-capable caches, and with portals
|
||||||
which need to aggregate multiple information from databases and
|
which need to aggregate multiple information from databases and
|
||||||
|
Loading…
Reference in New Issue
Block a user