mirror of
https://git.haproxy.org/git/haproxy.git/
synced 2026-03-14 11:31:59 +01:00
Move acme_EVP_PKEY_gen() implementation to ssl_gencrt.c and rename it to ssl_EVP_PKEY_gen(). Also extract from acme_gen_tmp_x509() the generic part to implement ssl_gen_x509() into ssl_gencrt.c. To generate a self-signed expired certificate ssl_EVP_PKEY_gen() must be used to generate the private key. Then, ssl_gen_x509() must be called with the private key as argument. acme_gen_tmp_x509() is also modified to called these two functions to generate a temporary certificate has done before modifying this part. Such an expired self-signed certificate should not be use on the field but only during testing and development steps.