mirrors/haproxy
1
0
Fork 0
mirror of https://git.haproxy.org/git/haproxy.git/ synced 2025-09-23 23:01:24 +02:00
Code Issues Projects Releases Wiki Activity

DOC: Document new socket commands "show tls-keys" and "set ssl tls-key"

Browse Source 
Signed-off-by: Nenad Merdanovic <nmerdan@anine.io>
This commit is contained in:
Nenad Merdanovic 2015-05-09 08:46:02 +02:00 committed by Willy Tarreau
parent 200b0facde
commit c6985f0f6c
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
doc/configuration.txt
View File

@ -14772,6 +14772,13 @@ set ssl ocsp-response <response>
echo "set ssl ocsp-response $(base64 -w 10000 resp.der)" | \ echo "set ssl ocsp-response $(base64 -w 10000 resp.der)" | \
socat stdio /var/run/haproxy.stat socat stdio /var/run/haproxy.stat
set ssl tls-key <id> <tlskey>
Set the next TLS key for the <id> listener to <tlskey>. This key becomes the
ultimate key, while the penultimate one is used for encryption (others just
decrypt). The oldest TLS key present is overwritten. <id> is either a numeric
#<id> or <file> returned by "show tls-keys". <tlskey> is a base64 encoded 48
bit TLS ticket key (ex. openssl rand -base64 48).
set table <table> key <key> [data.<data_type> <value>]* set table <table> key <key> [data.<data_type> <value>]*
Create or update a stick-table entry in the table. If the key is not present, Create or update a stick-table entry in the table. If the key is not present,
an entry is inserted. See stick-table in section 4.2 to find all possible an entry is inserted. See stick-table in section 4.2 to find all possible
@ -15006,6 +15013,11 @@ show table <name> [ data.<type> <operator> <value> ] | [ key <key> ]
| fgrep 'key=' | cut -d' ' -f2 | cut -d= -f2 > abusers-ip.txt | fgrep 'key=' | cut -d' ' -f2 | cut -d= -f2 > abusers-ip.txt
( or | awk '/key/{ print a[split($2,a,"=")]; }' ) ( or | awk '/key/{ print a[split($2,a,"=")]; }' )
show tls-keys
Dump all loaded TLS ticket keys. The TLS ticket key reference ID and the
file from which the keys have been loaded is shown. Both of those can be
used to update the TLS keys using "set ssl tls-key".
shutdown frontend <frontend> shutdown frontend <frontend>
Completely delete the specified frontend. All the ports it was bound to will Completely delete the specified frontend. All the ports it was bound to will
be released. It will not be possible to enable the frontend anymore after be released. It will not be possible to enable the frontend anymore after