Willy Tarreau 71d058c288 MINOR: ssl: add a new error codes for wrong server certificates ...

If a server presents an unexpected certificate to haproxy, that is, a
certificate that doesn't match the expected name as configured in
verifyhost or as requested using SNI, we want to store that precious
information. Fortunately we have access to the connection in the
verification callback so it's possible to store an error code there.

For this purpose we use CO_ER_SSL_MISMATCH_SNI (for when the cert name
didn't match the one requested using SNI) and CO_ER_SSL_MISMATCH for
when it doesn't match verifyhost.

2017-07-28 11:50:16 +02:00

..

common

MINOR: memory: remove macros

2017-07-21 09:54:03 +02:00

import

CLEANUP: da: move global settings out of the global section

2016-12-21 21:30:54 +01:00

proto

MINOR: ssl: add a new error codes for wrong server certificates

2017-07-28 11:50:16 +02:00

types

MINOR: ssl: add a new error codes for wrong server certificates

2017-07-28 11:50:16 +02:00