mirror of
https://git.haproxy.org/git/haproxy.git/
synced 2025-09-21 13:51:26 +02:00
DOC: configuration: replace "crt" by "ssl-f-use" in listeners
Replace the "crt" keyword from the frontend section with a "ssl-f-use" keyword, "crt" could be ambigous in case we don't want to put a certificate filename.
This commit is contained in:
parent
c7f29afcea
commit
feb1a9ea17
@ -7258,63 +7258,6 @@ cookie <name> [ rewrite | insert | prefix ] [ indirect ] [ nocache ]
|
|||||||
|
|
||||||
See also : "balance source", "capture cookie", "server" and "ignore-persist".
|
See also : "balance source", "capture cookie", "server" and "ignore-persist".
|
||||||
|
|
||||||
crt <crtname> [<sslbindconf> ...]*
|
|
||||||
Assignate a certificate to the current frontend.
|
|
||||||
|
|
||||||
May be used in the following contexts: tcp, http
|
|
||||||
|
|
||||||
May be used in sections : defaults | frontend | listen | backend
|
|
||||||
no | yes | yes | no
|
|
||||||
|
|
||||||
Arguments :
|
|
||||||
<sslbindconf> supports the following keywords from the bind line
|
|
||||||
(see Section 5.1. Bind options):
|
|
||||||
|
|
||||||
- allow-0rtt
|
|
||||||
- alpn
|
|
||||||
- ca-file
|
|
||||||
- ca-verify-file
|
|
||||||
- ciphers
|
|
||||||
- ciphersuites
|
|
||||||
- client-sigalgs
|
|
||||||
- crl-file
|
|
||||||
- curves
|
|
||||||
- ecdhe
|
|
||||||
- no-alpn
|
|
||||||
- no-ca-names
|
|
||||||
- npn
|
|
||||||
- sigalgs
|
|
||||||
- ssl-min-ver
|
|
||||||
- ssl-max-ver
|
|
||||||
- verify
|
|
||||||
|
|
||||||
sslbindconf also supports the following keywords from the crt-store load
|
|
||||||
keyword (see Section 3.12.1. Load options):
|
|
||||||
|
|
||||||
- key
|
|
||||||
- ocsp
|
|
||||||
- issuer
|
|
||||||
- sctl
|
|
||||||
- ocsp-update
|
|
||||||
|
|
||||||
Assignate a certificate <crtname> to a crt-list created automatically with the
|
|
||||||
frontend name and prefixed by @ (ex: '@frontend1').
|
|
||||||
|
|
||||||
This implicit crt-list will be assigned to every "ssl" bind lines in a
|
|
||||||
frontend that does not already have the "crt" or the "crt-list" line.
|
|
||||||
crt-list commands from the stats socket are effective with this crt-list, so
|
|
||||||
one could replace, remove or add certificates and SSL options to it.
|
|
||||||
|
|
||||||
Example :
|
|
||||||
|
|
||||||
frontend https
|
|
||||||
bind :443 ssl
|
|
||||||
crt foobar.pem.rsa sigalgs "RSA-PSS+SHA256"
|
|
||||||
crt test.foobar.pem
|
|
||||||
crt test2.foobar.crt key test2.foobar.key ocsp test2.foobar.ocsp ocsp-update on
|
|
||||||
|
|
||||||
See also : "crt-list" and "crt".
|
|
||||||
|
|
||||||
declare capture [ request | response ] len <length>
|
declare capture [ request | response ] len <length>
|
||||||
Declares a capture slot.
|
Declares a capture slot.
|
||||||
|
|
||||||
@ -12656,6 +12599,63 @@ stats admin { if | unless } <cond>
|
|||||||
See also : "stats enable", "stats auth", "stats http-request", section 3.4
|
See also : "stats enable", "stats auth", "stats http-request", section 3.4
|
||||||
about userlists and section 7 about ACL usage.
|
about userlists and section 7 about ACL usage.
|
||||||
|
|
||||||
|
ssl-f-use [<sslbindconf> ...]*
|
||||||
|
Assignate a certificate to the current frontend.
|
||||||
|
|
||||||
|
May be used in the following contexts: tcp, http
|
||||||
|
|
||||||
|
May be used in sections : defaults | frontend | listen | backend
|
||||||
|
no | yes | yes | no
|
||||||
|
|
||||||
|
Arguments :
|
||||||
|
<sslbindconf> supports the following keywords from the bind line
|
||||||
|
(see Section 5.1. Bind options):
|
||||||
|
|
||||||
|
- allow-0rtt
|
||||||
|
- alpn
|
||||||
|
- ca-file
|
||||||
|
- ca-verify-file
|
||||||
|
- ciphers
|
||||||
|
- ciphersuites
|
||||||
|
- client-sigalgs
|
||||||
|
- crl-file
|
||||||
|
- curves
|
||||||
|
- ecdhe
|
||||||
|
- no-alpn
|
||||||
|
- no-ca-names
|
||||||
|
- npn
|
||||||
|
- sigalgs
|
||||||
|
- ssl-min-ver
|
||||||
|
- ssl-max-ver
|
||||||
|
- verify
|
||||||
|
|
||||||
|
sslbindconf also supports the following keywords from the crt-store load
|
||||||
|
keyword (see Section 3.12.1. Load options):
|
||||||
|
|
||||||
|
- crt
|
||||||
|
- key
|
||||||
|
- ocsp
|
||||||
|
- issuer
|
||||||
|
- sctl
|
||||||
|
- ocsp-update
|
||||||
|
|
||||||
|
Assignate a certificate <crtname> to a crt-list created automatically with the
|
||||||
|
frontend name and prefixed by @ (ex: '@frontend1').
|
||||||
|
|
||||||
|
This implicit crt-list will be assigned to every "ssl" bind lines in a
|
||||||
|
frontend that does not already have the "crt" or the "crt-list" line.
|
||||||
|
crt-list commands from the stats socket are effective with this crt-list, so
|
||||||
|
one could replace, remove or add certificates and SSL options to it.
|
||||||
|
|
||||||
|
Example :
|
||||||
|
|
||||||
|
frontend https
|
||||||
|
bind :443 ssl
|
||||||
|
ssl-f-use crt foobar.pem.rsa sigalgs "RSA-PSS+SHA256"
|
||||||
|
ssl-f-use crt test.foobar.pem
|
||||||
|
ssl-f-use crt test2.foobar.crt key test2.foobar.key ocsp test2.foobar.ocsp ocsp-update on
|
||||||
|
|
||||||
|
See also : "crt-list" and "crt".
|
||||||
|
|
||||||
stats auth <user>:<passwd>
|
stats auth <user>:<passwd>
|
||||||
Enable statistics with authentication and grant access to an account
|
Enable statistics with authentication and grant access to an account
|
||||||
|
Loading…
x
Reference in New Issue
Block a user