tree 859dabc562c51040df29fc2031ca0121dd72a33c
parent 7566e30477bf5ea4206bda5950d2d83108c4a3dc
author Dave McCowan <11235david@gmail.com> 1406731153 -0400
committer Willy Tarreau <w@1wt.eu> 1408772129 +0200
encoding latin1

MEDIUM: connection: add new bit in Proxy Protocol V2

There are two sample commands to get information about the presence of a
client certificate.
ssl_fc_has_crt is true if there is a certificate present in the current
connection
ssl_c_used is true if there is a certificate present in the session.
If a session has stopped and resumed, then ssl_c_used could be true, while
ssl_fc_has_crt is false.

In the client byte of the TLS TLV of Proxy Protocol V2, there is only one
bit to indicate whether a certificate is present on the connection.  The
attached patch adds a second bit to indicate the presence for the session.

This maintains backward compatibility.

[wt: this should be backported to 1.5 to help maintain compatibility
 between versions]