mirrors/haproxy
1
0
Fork 0
mirror of https://git.haproxy.org/git/haproxy.git/ synced 2025-10-27 22:51:02 +01:00
Code Issues Projects Releases Wiki Activity
haproxy/reg-tests/ssl
History
Remi Tricot-Le Breton fb00f31af4 BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list" 
If an unknown CA file was first mentioned in an "add ssl crt-list" CLI
command, it would result in a call to X509_STORE_load_locations which
performs a disk access which is forbidden during runtime. The same would
happen if a "ca-verify-file" or "crl-file" was specified. This was due
to the fact that the crt-list file parsing and the crt-list related CLI
commands parsing use the same functions.
The patch simply adds a new parameter to all the ssl_bind parsing
functions so that they know if the call is made during init or by the
CLI, and the ssl_store_load_locations function can then reject any new
cafile_entry creation coming from a CLI call.

It can be backported as far as 2.2.
2021-03-23 19:29:46 +01:00
..
add_ssl_crt-list.vtc
BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list"
2021-03-23 19:29:46 +01:00
ca-auth.crt
REGTEST: ssl: test the client certificate authentication
2020-04-28 22:04:13 +02:00
client1.pem
MINOR: ssl: add ssl_{c,s}_chain_der fetch methods
2020-08-07 15:38:40 +02:00
client2_expired.pem
REGTEST: ssl: test the client certificate authentication
2020-04-28 22:04:13 +02:00
client3_revoked.pem
REGTEST: ssl: test the client certificate authentication
2020-04-28 22:04:13 +02:00
common.crt
REGTEST: ssl: test "set ssl cert" with separate key / crt
2020-10-23 18:41:08 +02:00
common.key
REGTEST: ssl: test "set ssl cert" with separate key / crt
2020-10-23 18:41:08 +02:00
common.pem
MINOR: ssl: add ssl_{c,s}_chain_der fetch methods
2020-08-07 15:38:40 +02:00
crl-auth.pem
REGTEST: ssl: test the client certificate authentication
2020-04-28 22:04:13 +02:00
ecdsa.crt
REGTEST: ssl: test "set ssl cert" with separate key / crt
2020-10-23 18:41:08 +02:00
ecdsa.key
REGTEST: ssl: test "set ssl cert" with separate key / crt
2020-10-23 18:41:08 +02:00
ecdsa.pem
REGTEST: ssl: test the "set ssl cert" CLI command
2019-12-19 13:51:38 +01:00
filters.crt-list
REGTEST: ssl: test wildcard and multi-type + exclusions
2020-11-06 14:59:36 +01:00
localhost.crt-list
REGTEST: ssl: pollute the crt-list file
2020-04-01 20:10:53 +02:00
README
MINOR: reg-tests: Add a few regression testing files.
2018-06-20 10:03:24 +02:00
set_ssl_cert_noext.vtc
REGTEST: ssl: test "set ssl cert" with separate key / crt
2020-10-23 18:41:08 +02:00
set_ssl_cert.vtc
BUG/MEDIUM: ssl/cli: abort ssl cert is freeing the old store
2021-02-01 17:58:21 +01:00
set_ssl_server_cert.vtc
MINOR: ssl/cli: flush the server session cache upon 'commit ssl cert'
2021-02-03 18:51:01 +01:00
simple.crt-list
BUG/MEDIUM: ssl/crt-list: correctly insert crt-list line if crt already loaded
2020-11-06 16:39:39 +01:00
ssl_client_auth.vtc
REGTEST: ssl: test the client certificate authentication
2020-04-28 22:04:13 +02:00
ssl_client_samples.vtc
REGTEST: make ssl_client_samples and ssl_server_samples require to 2.2
2020-11-13 17:12:30 +01:00
ssl_crt-list_filters.vtc
REGTEST: ssl: mark reg-tests/ssl/ssl_crt-list_filters.vtc as broken
2020-11-10 22:40:24 +01:00
ssl_frontend_samples.vtc
REGTEST: ssl: tests the ssl_f_* sample fetches
2020-06-26 11:33:59 +02:00
ssl_server_samples.vtc
REGTEST: make ssl_client_samples and ssl_server_samples require to 2.2
2020-11-13 17:12:30 +01:00
ssl_simple_crt-list.vtc
CLEANUP: assorted typo fixes in the code and comments
2020-12-21 11:24:48 +01:00
wrong_ctx_storage.vtc
REGTEST: rename the reg test files.
2019-04-23 15:37:03 +02:00

README 

File list:
 - common.pem: PEM file which may be used by most of the VTC files.