MEDIUM: ssl: add basic support for OpenSSL crypto engine
This patch adds the global 'ssl-engine' keyword. First arg is an engine
identifier followed by a list of default_algorithms the engine will
operate.
If the openssl version is too old, an error is reported when the option
is used.
diff --git a/src/haproxy.c b/src/haproxy.c
index 5ccebd1..6ecae25 100644
--- a/src/haproxy.c
+++ b/src/haproxy.c
@@ -109,6 +109,7 @@
#include <proto/task.h>
#include <proto/dns.h>
#include <proto/vars.h>
+#include <proto/ssl_sock.h>
/* list of config files */
static struct list cfg_cfgfiles = LIST_HEAD_INIT(cfg_cfgfiles);
@@ -2161,6 +2162,9 @@
for (proc = 0; proc < global.nbproc; proc++)
while (waitpid(-1, NULL, 0) == -1 && errno == EINTR);
}
+#ifndef OPENSSL_NO_DH
+ ssl_free_dh();
+#endif
exit(0); /* parent must leave */
}