mirrors/haproxy
1
0
Fork 0
mirror of https://git.haproxy.org/git/haproxy.git/ synced 2025-09-21 13:51:26 +02:00
Code Issues Projects Releases Wiki Activity
haproxy/reg-tests/ssl
History
Remi Tricot-Le Breton bc2c386992 BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one 
If the first active line of a crt-list file is also the first mentioned
certificate of a frontend that does not have the strict-sni option
enabled, then its certificate will be used as the default one. We then
do not want this instance to be removable since it would make a frontend
lose its default certificate.
Considering that a crt-list file can be used by multiple frontends, and
that its first mentioned certificate can be used as default certificate
for only a subset of those frontends, we do not want the line to be
removable for some frontends and not the others. So if any of the ckch
instances corresponding to a crt-list line is a default instance, the
removal of the crt-list line will be forbidden.

It can be backported as far as 2.2.
2021-03-26 13:06:39 +01:00
..
add_ssl_crt-list.vtc
BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list"
2021-03-23 19:29:46 +01:00
ca-auth.crt
REGTEST: ssl: test the client certificate authentication
2020-04-28 22:04:13 +02:00
client1.pem
MINOR: ssl: add ssl_{c,s}_chain_der fetch methods
2020-08-07 15:38:40 +02:00
client2_expired.pem
REGTEST: ssl: test the client certificate authentication
2020-04-28 22:04:13 +02:00
client3_revoked.pem
REGTEST: ssl: test the client certificate authentication
2020-04-28 22:04:13 +02:00
common.crt
REGTEST: ssl: test "set ssl cert" with separate key / crt
2020-10-23 18:41:08 +02:00
common.key
REGTEST: ssl: test "set ssl cert" with separate key / crt
2020-10-23 18:41:08 +02:00
common.pem
MINOR: ssl: add ssl_{c,s}_chain_der fetch methods
2020-08-07 15:38:40 +02:00
crl-auth.pem
REGTEST: ssl: test the client certificate authentication
2020-04-28 22:04:13 +02:00
del_ssl_crt-list.vtc
BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one
2021-03-26 13:06:39 +01:00
ecdsa.crt
REGTEST: ssl: test "set ssl cert" with separate key / crt
2020-10-23 18:41:08 +02:00
ecdsa.key
REGTEST: ssl: test "set ssl cert" with separate key / crt
2020-10-23 18:41:08 +02:00
ecdsa.pem
REGTEST: ssl: test the "set ssl cert" CLI command
2019-12-19 13:51:38 +01:00
filters.crt-list
REGTEST: ssl: test wildcard and multi-type + exclusions
2020-11-06 14:59:36 +01:00
localhost.crt-list
REGTEST: ssl: pollute the crt-list file
2020-04-01 20:10:53 +02:00
README
MINOR: reg-tests: Add a few regression testing files.
2018-06-20 10:03:24 +02:00
set_default_cert.crt-list
BUG/MINOR: ssl: Fix update of default certificate
2021-03-26 13:06:29 +01:00
set_default_cert.pem
BUG/MINOR: ssl: Fix update of default certificate
2021-03-26 13:06:29 +01:00
set_ssl_cert_noext.vtc
REGTEST: ssl: test "set ssl cert" with separate key / crt
2020-10-23 18:41:08 +02:00
set_ssl_cert.vtc
BUG/MINOR: ssl: Fix update of default certificate
2021-03-26 13:06:29 +01:00
set_ssl_server_cert.vtc
MINOR: ssl/cli: flush the server session cache upon 'commit ssl cert'
2021-02-03 18:51:01 +01:00
simple.crt-list
BUG/MEDIUM: ssl/crt-list: correctly insert crt-list line if crt already loaded
2020-11-06 16:39:39 +01:00
ssl_client_auth.vtc
REGTEST: ssl: test the client certificate authentication
2020-04-28 22:04:13 +02:00
ssl_client_samples.vtc
REGTEST: make ssl_client_samples and ssl_server_samples require to 2.2
2020-11-13 17:12:30 +01:00
ssl_crt-list_filters.vtc
REGTEST: ssl: mark reg-tests/ssl/ssl_crt-list_filters.vtc as broken
2020-11-10 22:40:24 +01:00
ssl_frontend_samples.vtc
REGTEST: ssl: tests the ssl_f_* sample fetches
2020-06-26 11:33:59 +02:00
ssl_server_samples.vtc
REGTEST: make ssl_client_samples and ssl_server_samples require to 2.2
2020-11-13 17:12:30 +01:00
ssl_simple_crt-list.vtc
CLEANUP: assorted typo fixes in the code and comments
2020-12-21 11:24:48 +01:00
wrong_ctx_storage.vtc
REGTEST: rename the reg test files.
2019-04-23 15:37:03 +02:00

README 

File list:
 - common.pem: PEM file which may be used by most of the VTC files.