tree b646b2f8459fec2a8bbb41844dea682d1525158b
parent e0d3c0008690b9fa076172d8c31bf0e1d383cd55
author Remi Tricot-Le Breton <rlebreton@haproxy.com> 1633095416 +0200
committer William Lallemand <wlallemand@haproxy.org> 1634222292 +0200

MINOR: jwt: Insert public certificates into dedicated JWT tree

A JWT signed with the RSXXX or ESXXX algorithm (RSA or ECDSA) requires a
public certificate to be verified and to ensure it is valid. Those
certificates must not be read on disk at runtime so we need a caching
mechanism into which those certificates will be loaded during init.
This is done through a dedicated ebtree that is filled during
configuration parsing. The path to the public certificates will need to
be explicitely mentioned in the configuration so that certificates can
be loaded as early as possible.
This tree is different from the ckch one because ckch entries are much
bigger than the public certificates used in JWT validation process.