mirrors/haproxy
1
0
Fork 0
mirror of https://git.haproxy.org/git/haproxy.git/ synced 2025-08-05 22:56:57 +02:00
Code Issues Projects Releases Wiki Activity
4f80543220
haproxy/reg-tests/ssl
History
William Lallemand e6657fd108 MEDIUM: ssl: don't load file by discovering them in crt-store 
In commit 55e9e9591 ("MEDIUM: ssl: temporarily load files by detecting
their presence in crt-store"), ssl_sock_load_pem_into_ckch() was
replaced by ssl_sock_load_files_into_ckch() in the crt-store loading.

But the side effect was that we always try to autodetect, and this is
not what we want. This patch reverse this, and add specific code in the
crt-list loading, so we could autodetect in crt-list like it was done
before, but still try to load files when a crt-store filename keyword is
specified.

Example:

These crt-list lines won't autodetect files:

    foobar.crt [key foobar.key issuer foobar.issuer ocsp-update on] *.foo.bar
    foobar.crt [key foobar.key] *.foo.bar

These crt-list lines will autodect files:

    foobar.pem [ocsp-update on] *.foo.bar
    foobar.pem
2024-05-21 18:30:45 +02:00
..
generate_certificates REGTESTS: ssl: Add test for "generate-certificates" SSL option 2022-02-09 12:10:32 +01:00
ocsp_update REGTESTS: ssl: Add OCSP related tests 2024-03-20 16:12:10 +01:00
add_ssl_crt-list.vtc REGTESTS: ssl: update common.pem with the new pki 2023-10-09 21:58:21 +02:00
bug-2265.crt BUG/MINOR: ssl/cli: can't find ".crt" files when replacing a certificate 2023-08-28 18:20:39 +02:00
ca-auth.crt REGTEST: ssl: test the client certificate authentication 2020-04-28 22:04:13 +02:00
cert1-example.com.pem.ecdsa REGTESTS: ssl: "set ssl cert" and multi-certificates bundle 2021-04-02 15:47:17 +02:00
cert1-example.com.pem.rsa REGTESTS: ssl: "set ssl cert" and multi-certificates bundle 2021-04-02 15:47:17 +02:00
cert2-example.com.pem.ecdsa REGTESTS: ssl: "set ssl cert" and multi-certificates bundle 2021-04-02 15:47:17 +02:00
cert2-example.com.pem.rsa REGTESTS: ssl: "set ssl cert" and multi-certificates bundle 2021-04-02 15:47:17 +02:00
client1.pem MINOR: ssl: add ssl_{c,s}_chain_der fetch methods 2020-08-07 15:38:40 +02:00
client2_expired.pem REGTEST: ssl: test the client certificate authentication 2020-04-28 22:04:13 +02:00
client3_revoked.pem REGTEST: ssl: test the client certificate authentication 2020-04-28 22:04:13 +02:00
client.ecdsa.pem REGTESTS: ssl: Add test for "curves" and "ecdhe" SSL options 2022-02-09 11:15:44 +01:00
common.4096.dh REGTESTS: ssl: Add tests for DH related options 2022-02-14 10:07:14 +01:00
common.crt REGTEST: ssl: test "set ssl cert" with separate key / crt 2020-10-23 18:41:08 +02:00
common.key REGTEST: ssl: test "set ssl cert" with separate key / crt 2020-10-23 18:41:08 +02:00
common.pem REGTESTS: ssl: update common.pem with the new pki 2023-10-09 21:58:21 +02:00
crl-auth.pem REGTEST: ssl: test the client certificate authentication 2020-04-28 22:04:13 +02:00
crt_store.vtc MEDIUM: ssl: don't load file by discovering them in crt-store 2024-05-21 18:30:45 +02:00
del_ssl_crt-list.vtc REGTESTS: ssl: update common.pem with the new pki 2023-10-09 21:58:21 +02:00
dynamic_server_ssl.vtc MEDIUM: server: remove experimental-mode for dynamic servers 2022-03-11 14:28:28 +01:00
ecdsa.crt REGTEST: ssl: test "set ssl cert" with separate key / crt 2020-10-23 18:41:08 +02:00
ecdsa.key REGTEST: ssl: test "set ssl cert" with separate key / crt 2020-10-23 18:41:08 +02:00
ecdsa.pem REGTEST: ssl: test the "set ssl cert" CLI command 2019-12-19 13:51:38 +01:00
filters.crt-list REGTEST: ssl: test wildcard and multi-type + exclusions 2020-11-06 14:59:36 +01:00
interCA1_crl_empty.pem REGTESTS: ssl: Add "set/commit ssl crl-file" test 2021-05-17 10:50:24 +02:00
interCA1_crl.pem REGTESTS: ssl: Add "set/commit ssl crl-file" test 2021-05-17 10:50:24 +02:00
interCA2_crl_empty.pem REGTESTS: ssl: Add "set/commit ssl crl-file" test 2021-05-17 10:50:24 +02:00
interCA2_crl.pem REGTESTS: ssl: Add "set/commit ssl crl-file" test 2021-05-17 10:50:24 +02:00
localhost.crt-list REGTEST: ssl: pollute the crt-list file 2020-04-01 20:10:53 +02:00
log_forward_ssl.vtc REGTESTS: ssl/log: test the log-forward with SSL 2022-09-13 17:03:30 +02:00
new_del_ssl_cafile.vtc MINOR: ssl/cli: implement "add ssl ca-file" 2022-08-19 19:58:53 +02:00
new_del_ssl_crlfile.vtc REGTESTS: extend the default I/O timeouts and make them overridable 2021-11-18 17:57:11 +01:00
ocsp_auto_update.vtc REGTESTS: ocsp-update: change the reg-test to support the new crt-store mode 2024-05-17 17:35:51 +02:00
ocsp_compat_check.vtc REGTESTS: ocsp-update: change the reg-test to support the new crt-store mode 2024-05-17 17:35:51 +02:00
README MINOR: reg-tests: Add a few regression testing files. 2018-06-20 10:03:24 +02:00
rootCA_crl.pem REGTESTS: ssl: Add "set/commit ssl crl-file" test 2021-05-17 10:50:24 +02:00
set_cafile_client.pem REGTESTS: ssl: Add new ca-file update tests 2021-05-17 10:50:24 +02:00
set_cafile_interCA1.crt REGTESTS: ssl: Add new ca-file update tests 2021-05-17 10:50:24 +02:00
set_cafile_interCA2.crt REGTESTS: ssl: Add new ca-file update tests 2021-05-17 10:50:24 +02:00
set_cafile_rootCA.crt REGTESTS: ssl: Add new ca-file update tests 2021-05-17 10:50:24 +02:00
set_cafile_server.pem REGTESTS: ssl: Add new ca-file update tests 2021-05-17 10:50:24 +02:00
set_default_cert.crt-list BUG/MINOR: ssl: Fix update of default certificate 2021-03-26 13:06:29 +01:00
set_default_cert.pem BUG/MINOR: ssl: Fix update of default certificate 2021-03-26 13:06:29 +01:00
set_ssl_bug_2265.vtc REGTESTS: ssl: update common.pem with the new pki 2023-10-09 21:58:21 +02:00
set_ssl_cafile.vtc REGTESTS: wolfssl: temporarly disable some failing reg-tests 2023-10-09 23:05:18 +02:00
set_ssl_cert_bundle.vtc REGTESTS: extend the default I/O timeouts and make them overridable 2021-11-18 17:57:11 +01:00
set_ssl_cert_noext.vtc REGTESTS: extend the default I/O timeouts and make them overridable 2021-11-18 17:57:11 +01:00
set_ssl_cert.vtc REGTESTS: ssl: update common.pem with the new pki 2023-10-09 21:58:21 +02:00
set_ssl_crlfile.vtc REGTESTS: wolfssl: temporarly disable some failing reg-tests 2023-10-09 23:05:18 +02:00
set_ssl_server_cert.vtc REGTESTS: wolfssl: temporarly disable some failing reg-tests 2023-10-09 23:05:18 +02:00
show_ocsp_server.pem REGTESTS: ssl: Add "show ssl ocsp-response" test 2021-06-10 16:44:11 +02:00
show_ocsp_server.pem.issuer REGTESTS: ssl: Add "show ssl ocsp-response" test 2021-06-10 16:44:11 +02:00
show_ocsp_server.pem.ocsp REGTESTS: ssl: Add "show ssl ocsp-response" test 2021-06-10 16:44:11 +02:00
show_ocsp_server.pem.ocsp.revoked REGTESTS: ssl: Add "show ssl ocsp-response" test 2021-06-10 16:44:11 +02:00
show_ssl_ocspresponse.vtc REGTESTS: ssl: Fix empty line in cli command input 2024-02-07 17:10:49 +01:00
simple.crt-list BUG/MEDIUM: ssl/crt-list: correctly insert crt-list line if crt already loaded 2020-11-06 16:39:39 +01:00
ssl_alpn.vtc MEDIUM: config: set useful ALPN defaults for HTTPS and QUIC 2023-04-19 09:52:20 +02:00
ssl_client_auth.vtc REGTESTS: ssl: simplify X509_V code check in ssl_client_auth.vtc 2023-05-03 15:54:49 +02:00
ssl_client_samples.vtc BUILD: ssl: ssl_c_r_dn fetches uses functiosn only available since 1.1.1 2023-05-15 12:07:52 +02:00
ssl_crt-list_filters.vtc REGTESTS: ssl: update the filters test for TLSv1.3 and sigalgs 2023-10-26 19:23:04 +02:00
ssl_curve_name.vtc MEDIUM: ssl: new sample fetch method to get curve name 2023-07-17 15:45:41 +02:00
ssl_curves.vtc MINOR: ssl: add support for 'curves' keyword on server lines 2023-09-07 23:29:10 +02:00
ssl_default_server.vtc REGTESTS: ssl: fix ssl_default_server.vtc 2021-12-29 18:20:19 +01:00
ssl_dh.vtc REGTESTS: ssl: disable ssl_dh.vtc for WolfSSL 2023-10-09 22:11:37 +02:00
ssl_errors.vtc REGTESTS: Fix ssl_errors.vtc script to wait for connections close 2023-02-21 11:44:55 +01:00
ssl_frontend_samples.vtc REGTESTS: ssl: update common.pem with the new pki 2023-10-09 21:58:21 +02:00
ssl_generate_certificate.vtc REGTESTS: ssl: skip generate-certificates test w/ wolfSSL 2023-09-20 16:02:16 +02:00
ssl_reuse.vtc REGTESTS: ssl: enable the ssl_reuse.vtc test for WolfSSL 2022-12-20 15:28:37 +01:00
ssl_server_samples.vtc REGTESTS: ssl: update common.pem with the new pki 2023-10-09 21:58:21 +02:00
ssl_simple_crt-list.vtc REGTESTS: extend the default I/O timeouts and make them overridable 2021-11-18 17:57:11 +01:00
wrong_ctx_storage.vtc MEDIUM: config: Deprecate tune.ssl.capture-cipherlist-size 2021-08-26 19:52:04 +02:00

README 

File list:
 - common.pem: PEM file which may be used by most of the VTC files.