tree a14e0b3d2538c53947e7bb9c01e64c37aa7f22dc
parent bdd3c79568a5e4d597df507ca86150353d24d667
author Remi Tricot-Le Breton <rlebreton@haproxy.com> 1671531070 +0100
committer William Lallemand <wlallemand@haproxy.org> 1671618067 +0100

MINOR: ssl: Add crt-list ocsp-update option

This option will define how the ocsp update mechanism behaves. The
option can either be set to 'on' or 'off' and can only be specified in a
crt-list entry so that we ensure that it concerns a single certificate.
The 'off' mode is the default one and corresponds to the old behavior
(no automatic update).
When the option is set to 'on', we will try to get an ocsp response
whenever an ocsp uri can be found in the frontend's certificate. The
only limitation of this mode is that the certificate's issuer will have
to be known in order for the OCSP certid to be built.

This patch only adds the parsing of the option. The full functionality
will come in a later commit.