tree b8dc32b9bf05380a2757ef8d87f29be12f65d846
parent 6ce0232a78cf6f94d82a6614317689523877b286
author Shimi Gersner <sgersner@microsoft.com> 1598180292 +0300
committer William Lallemand <wlallemand@haproxy.org> 1598366166 +0200

MEDIUM: ssl: Support certificate chaining for certificate generation

haproxy supports generating SSL certificates based on SNI using a provided
CA signing certificate. Because CA certificates may be signed by multiple
CAs, in some scenarios, it is neccesary for the server to attach the trust chain
in addition to the generated certificate.

The following patch adds the ability to serve the entire trust chain with
the generated certificate. The chain is loaded from the provided
`ca-sign-file` PEM file.