tree 70f74fc48b64c3494504d9384ed455b9118cd392
parent 59ad1a2e7584669d591ccd290fd027e8c190ebe4
author Emeric Brun <ebrun@exceliance.fr> 1390994674 +0100
committer Willy Tarreau <w@1wt.eu> 1391011695 +0100
encoding latin1

MEDIUM: ssl: Set verify 'required' as global default for servers side.

If no CA file specified on a server line, the config parser will show an error.

Adds an cmdline option '-dV' to re-set verify 'none' as global default on
servers side (previous behavior).

Also adds 'ssl-server-verify' global statement to set global default to
'none' or 'required'.

WARNING: this changes the default verify mode from "none" to "required" on
the server side, and it *will* break insecure setups.