- 1024393 MINOR: ssl: add a new global option "tune.ssl.hard-maxrecord" by Thomas Prückl · 2 years, 7 months ago
- 7e2e4f8 CLEANUP: tree-wide: remove 25 occurrences of unneeded fcntl.h by Willy Tarreau · 2 years, 7 months ago
- d7bfbe2 BUILD: ssl: add USE_ENGINE and disable the openssl engine by default by William Lallemand · 2 years, 8 months ago
- 2c776f1 BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server by William Lallemand · 3 years ago
- 0d1dd0e BUILD: cfgparse-ssl: add missing errors.h by Willy Tarreau · 3 years, 2 months ago
- 79b90e8 MINOR: server: enable more keywords for ssl checks for dynamic servers by Amaury Denoyelle · 3 years, 2 months ago
- 310a260 MEDIUM: config: Deprecate tune.ssl.capture-cipherlist-size by Marcin Deranek · 3 years, 5 months ago
- 34897d2 MINOR: ssl: support ssl keyword for dynamic servers by Amaury Denoyelle · 3 years, 7 months ago
- 71f9a06 MINOR: ssl: enable a series of ssl keywords for dynamic servers by Amaury Denoyelle · 3 years, 7 months ago
- fde8260 MINOR: ssl: support crl arg for dynamic servers by Amaury Denoyelle · 3 years, 6 months ago
- 93be21e MINOR: ssl: support crt arg for dynamic servers by Amaury Denoyelle · 3 years, 6 months ago
- 4825502 MINOR: ssl: support ca-file arg for dynamic servers by Amaury Denoyelle · 3 years, 7 months ago
- 7addf56 MINOR: ssl: split parse functions for alpn/check-alpn by Amaury Denoyelle · 3 years, 6 months ago
- 36aa451 MINOR: ssl: render file-access optional on server crt loading by Amaury Denoyelle · 3 years, 6 months ago
- 1f9333b MINOR: ssl: check allocation in parse npn/sni by Amaury Denoyelle · 3 years, 6 months ago
- cbbf87f MINOR: ssl: check allocation in parse ciphers/ciphersuites/verifyhost by Amaury Denoyelle · 3 years, 7 months ago
- 949c94e MINOR: ssl: check allocation in ssl_sock_init_srv by Amaury Denoyelle · 3 years, 7 months ago
- 722180a BUILD: make tune.ssl.keylog available again by William Lallemand · 3 years, 6 months ago
- 0bb4824 MINOR: ssl: Add a cafile_entry type field by Remi Tricot-Le Breton · 3 years, 8 months ago
- af8820a CLEANUP: ssl: Move ssl_store related code to ssl_ckch.c by Remi Tricot-Le Breton · 3 years, 8 months ago
- cc81eca BUILD: config: cfgparse-ssl.c needs tools.h by Willy Tarreau · 3 years, 7 months ago
- 2b71810 CLEANUP: lists/tree-wide: rename some list operations to avoid some confusion by Willy Tarreau · 3 years, 7 months ago
- a0fd35b BUILD: ssl: guard ecdh functions with SSL_CTX_set_tmp_ecdh macro by Ilya Shipitsin · 3 years, 9 months ago
- fb00f31 BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list" by Remi Tricot-Le Breton · 3 years, 8 months ago
- 76e10e7 MINOR: server: prepare parsing for dynamic servers by Amaury Denoyelle · 3 years, 9 months ago
- 0182516 CLEANUP: config: make the cfg_keyword parsers take a const for the defproxy by Willy Tarreau · 3 years, 9 months ago
- 61cfdf4 CLEANUP: tree-wide: replace free(x);x=NULL with ha_free(&x) by Willy Tarreau · 3 years, 9 months ago
- bb470aa MINOR: ssl: Remove client_crt member of the server's ssl context by Remi Tricot-Le Breton · 3 years, 10 months ago
- d817dc7 MEDIUM: ssl: Load client certificates in a ckch for backend servers by Remi Tricot-Le Breton · 3 years, 10 months ago
- e5ff141 CLEANUP: Compare the return value of `XXXcmp()` functions with zero by Tim Duesterhus · 4 years ago
- e50afbd MINOR: cfgparse: Do not modify the QUIC xprt when parsing "ssl". by Frédéric Lécaille · 4 years ago
- f34ed0b BUILD: SSL: guard TLS13 ciphersuites with HAVE_SSL_CTX_SET_CIPHERSUITES by Ilya Shipitsin · 4 years ago
- bdec3ba BUILD: ssl: use SSL_MODE_ASYNC macro instead of OPENSSL_VERSION by Ilya Shipitsin · 4 years, 1 month ago
- f637044 MEDIUM: cli/ssl: configure ssl on server at runtime by William Dauchy · 4 years, 1 month ago
- fc52f52 MINOR: ssl: create common ssl_ctx init by William Dauchy · 4 years, 1 month ago
- 0aa8c29 BUILD: ssl: use feature macros for detecting ec curves manipulation support by Ilya Shipitsin · 4 years, 1 month ago
- 04a5a44 BUILD: ssl: use HAVE_OPENSSL_KEYLOG instead of OpenSSL versions by Ilya Shipitsin · 4 years, 1 month ago
- 8e8581e MINOR: ssl: 'ssl-load-extra-del-ext' removes the certificate extension by William Lallemand · 4 years, 1 month ago
- 9a1d839 BUG/MINOR: ssl: ssl-skip-self-issued-ca requires >= 1.0.2 by William Lallemand · 4 years, 4 months ago
- 7d42ef5 WIP/MINOR: ssl: add sample fetches for keylog in frontend by William Lallemand · 4 years, 5 months ago
- 6be7849 REORG: include: move cfgparse.h to haproxy/cfgparse.h by Willy Tarreau · 4 years, 6 months ago
- 209108d REORG: include: move ssl_sock.h to haproxy/ssl_sock{,-t}.h by Willy Tarreau · 4 years, 6 months ago
- 213e990 REORG: include: move listener.h to haproxy/listener{,-t}.h by Willy Tarreau · 4 years, 6 months ago
- 6019fab REORG: include: move openssl-compat.h from common/ to haproxy/ by Willy Tarreau · 4 years, 6 months ago
- 8d36697 REORG: include: move base64.h, errors.h and hash.h from common to to haproxy/ by Willy Tarreau · 4 years, 6 months ago
- 4c7e4b7 REORG: include: update all files to use haproxy/api.h or api-t.h if needed by Willy Tarreau · 4 years, 6 months ago
- 8177ad9 MINOR: ssl: split config and runtime variable for ssl-{min,max}-ver by William Lallemand · 4 years, 7 months ago
- 5520d6f BUILD: ssl: fix build without OPENSSL_NO_ENGINE by William Lallemand · 4 years, 7 months ago
- dad3105 REORG: ssl: move ssl configuration to cfgparse-ssl.c by William Lallemand · 4 years, 7 months ago