From ca0c84a50906105cfff23dcdd2e33a9a669c4e24 Mon Sep 17 00:00:00 2001
From: Remi Tricot-Le Breton <rlebreton@haproxy.com>
Date: Thu, 2 Mar 2023 15:49:52 +0100
Subject: [PATCH] MINOR: ssl: Add ocsp-update information to "show ssl
 crt-list"

The "show ssl crt-list <list>" CLI command did not manage the new
ocsp-update option yet.
---
 src/ssl_crtlist.c | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/src/ssl_crtlist.c b/src/ssl_crtlist.c
index aa7fdb2ed..e5a5c2454 100644
--- a/src/ssl_crtlist.c
+++ b/src/ssl_crtlist.c
@@ -909,6 +909,13 @@ static void dump_crtlist_sslconf(struct buffer *buf, const struct ssl_bind_conf
 		space++;
 	}
 
+	if (conf->ocsp_update != SSL_SOCK_OCSP_UPDATE_DFLT) {
+		if (space) chunk_appendf(buf, " ");
+		chunk_appendf(buf, "ocsp-update %s",
+		              conf->ocsp_update == SSL_SOCK_OCSP_UPDATE_OFF ? "off" : "on");
+		space++;
+	}
+
 	chunk_appendf(buf, "]");
 
 	return;