mirrors/haproxy
1
0
Fork 0
mirror of https://git.haproxy.org/git/haproxy.git/ synced 2025-08-09 00:27:08 +02:00
Code Issues Projects Releases Wiki Activity

DOC: ssl: add fetch and ACL 'ssl_verify_result'

Browse Source
This commit is contained in:
Emeric Brun 2012-09-28 18:14:24 +02:00 committed by Willy Tarreau
parent baf8ffb673
commit c68af8db6f
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
doc/configuration.txt
View File

@ -8190,6 +8190,10 @@ ssl_sni_req <regex>
haproxy and not to SSL contents being blindly forwarded. This requires that
the SSL library is build with support for TLS extensions (check haproxy -vv).
ssl_verify_result <errorID>
Returns true when the incoming connection was made over an SSL/TLS data layer
and the verify result match the errorID.
wait_end
Waits for the end of the analysis period to return true. This may be used in
conjunction with content analysis to avoid returning a wrong verdict early.
@ -8804,6 +8808,10 @@ The list of currently supported pattern fetch functions is the following :
host name (253 chars or less). The SSL library must have been
built with support for TLS extensions (check haproxy -vv).
ssl_verify_result
Returns the verify result errorID when the incoming connection
was made over an SSL/TLS data layer.
url This extracts the request's URL as presented in the request. A
typical use is with prefetch-capable caches, and with portals
which need to aggregate multiple information from databases and