1. 60289bf BUG/MAJOR: ssl/ocsp: crash with ocsp when old process exit or using ocsp CLI by William Lallemand · Mon Feb 26 17:53:02 2024 +0100
  2. 7fe93bd REGTESTS: ssl: Add OCSP related tests by Remi Tricot-Le Breton · Wed Feb 07 16:38:46 2024 +0100
  3. 871df0a REGTESTS: ssl: Fix empty line in cli command input by Remi Tricot-Le Breton · Wed Feb 07 16:38:47 2024 +0100
  4. d513644 BUG/MINOR: ssl/cli: can't find ".crt" files when replacing a certificate by William Lallemand · Mon Aug 28 17:12:14 2023 +0200
  5. 6e0c39d BUILD: ssl: ssl_c_r_dn fetches uses functiosn only available since 1.1.1 by William Lallemand · Mon May 15 12:05:55 2023 +0200
  6. df97f47 MINOR: ssl: add new sample ssl_c_r_dn by Abhijeet Rastogi · Sat May 13 20:04:45 2023 -0700
  7. a415e89 REGTESTS: ssl: simplify X509_V code check in ssl_client_auth.vtc by William Lallemand · Wed May 03 15:54:49 2023 +0200
  8. 5003ac7 MEDIUM: config: set useful ALPN defaults for HTTPS and QUIC by Willy Tarreau · Wed Apr 19 09:12:33 2023 +0200
  9. 2e3c04a REGTESTS: add a new "ssl_alpn" test to test ALPN negotiation by Willy Tarreau · Wed Apr 19 08:34:01 2023 +0200
  10. dafc068 MINOR: ssl: Accept certpath as param in "show ssl ocsp-response" CLI command by Remi Tricot-Le Breton · Mon Mar 13 15:56:34 2023 +0100
  11. a6c0a59 MINOR: ssl: Use ocsp update task for "update ssl ocsp-response" command by Remi Tricot-Le Breton · Mon Mar 13 15:56:32 2023 +0100
  12. 86d1e0b BUG/MINOR: ssl: Fix ocsp-update when using "add ssl crt-list" by Remi Tricot-Le Breton · Thu Mar 02 15:49:53 2023 +0100
  13. 5ab54c6 REGTESTS: ssl: Add test for new ocsp update cli commands by Remi Tricot-Le Breton · Thu Mar 02 15:49:51 2023 +0100
  14. 780504a REGTESTS: ssl: Fix ocsp update crt-lists by Remi Tricot-Le Breton · Tue Feb 28 17:46:30 2023 +0100
  15. 4ad6ee9 REGTESTS: Fix ssl_errors.vtc script to wait for connections close by Christopher Faulet · Tue Feb 21 11:24:04 2023 +0100
  16. 522841c REGTEST: ssl: Add test for 'update ssl ocsp-response' CLI command by Remi Tricot-Le Breton · Thu Jan 12 09:49:12 2023 +0100
  17. 2f275fb REGTESTS: ssl: Add tests for ocsp auto update mechanism by Remi Tricot-Le Breton · Tue Dec 20 11:11:16 2022 +0100
  18. 8f5699b REGTESTS: ssl: enable the ssl_reuse.vtc test for WolfSSL by William Lallemand · Tue Dec 20 15:27:33 2022 +0100
  19. 9fbc84e MINOR: ssl: x509_v_err_str converter transforms an integer to a X509_V_ERR name by William Lallemand · Thu Nov 03 18:56:37 2022 +0100
  20. 960fb74 MEDIUM: ssl: {ca,crt}-ignore-err can now use error constant name by William Lallemand · Thu Nov 03 16:31:50 2022 +0100
  21. 23bc0b2 REGTESTS: ssl/log: test the log-forward with SSL by William Lallemand · Tue Sep 13 12:41:29 2022 +0200
  22. 62c0b99 MINOR: ssl/cli: implement "add ssl ca-file" by William Lallemand · Fri Jul 29 17:50:58 2022 +0200
  23. b6189bc REGTESTS: ssl: fix grep invocation to use extended regex in ssl_generate_certificate.vtc by Ilya Shipitsin · Sat Aug 06 22:40:41 2022 +0500
  24. 2f2a288 REGTESTS: ssl: adopt tests to OpenSSL-3.0.N by Ilya Shipitsin · Sun Jul 24 00:05:45 2022 +0500
  25. 0865160 REGTESTS: ssl: adopt tests to OpenSSL-3.0.N by Ilya Shipitsin · Sun Jul 24 00:01:32 2022 +0500
  26. ae6547f REGTESTS: ssl: add the same cert for client/server by William Lallemand · Mon Jun 20 18:01:30 2022 +0200
  27. cb6c5f4 BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list by William Lallemand · Mon Jun 20 16:51:53 2022 +0200
  28. 85c0ff5 REGTESTS: ssl: Update error messages that changed with OpenSSLv3.1.0-dev by Remi Tricot-Le Breton · Thu Apr 21 12:06:42 2022 +0200
  29. 1d6338e MEDIUM: ssl: Disable DHE ciphers by default by Remi Tricot-Le Breton · Tue Apr 12 11:31:55 2022 +0200
  30. 76e8b70 MEDIUM: server: remove experimental-mode for dynamic servers by Amaury Denoyelle · Wed Mar 09 15:07:31 2022 +0100
  31. 42f2a51 REGTESTS: server: close an occasional race on dynamic_server_ssl.vtc by Willy Tarreau · Wed Feb 16 10:45:23 2022 +0100
  32. 17b7384 REGTESTS: ssl: Add tests for DH related options by Remi Tricot-Le Breton · Fri Feb 11 12:04:46 2022 +0100
  33. 3f269bb REGTESTS: ssl: Add test for "generate-certificates" SSL option by Remi Tricot-Le Breton · Tue Feb 08 17:45:57 2022 +0100
  34. eb561ce REGTESTS: ssl: Add test for "curves" and "ecdhe" SSL options by Remi Tricot-Le Breton · Tue Feb 08 17:45:55 2022 +0100
  35. 8de3eff REGTESTS: ssl: skip show_ssl_ocspresponse.vtc when BoringSSL is used by Ilya Shipitsin · Mon Jan 31 09:49:47 2022 +0500
  36. aab8d25 REGTESTS: ssl: Fix ssl_errors regtest with OpenSSL 1.0.2 by Remi Tricot-Le Breton · Tue Jan 11 17:29:24 2022 +0100
  37. a996763 BUG/MINOR: ssl: Store client SNI in SSL context in case of ClientHello error by Remi Tricot-Le Breton · Fri Jan 07 17:12:01 2022 +0100
  38. 37d3e38 CLEANUP: assorted typo fixes in the code and comments by Ilya Shipitsin · Fri Jan 07 14:46:15 2022 +0500
  39. acd546b REGTESTS: ssl: update of a crt with server deletion by William Lallemand · Thu Dec 30 14:57:32 2021 +0100
  40. 0387632 REGTESTS: ssl: fix ssl_default_server.vtc by William Lallemand · Wed Dec 29 18:16:27 2021 +0100
  41. 2c776f1 BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server by William Lallemand · Tue Dec 28 18:47:17 2021 +0100
  42. fc11266 REGTESTS: ssl: use X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY for cert check by Ilya Shipitsin · Sat Dec 04 14:32:23 2021 +0500
  43. e15ab93 REGTESTS: ssl: test the TLS resumption by William Lallemand · Wed Nov 17 02:52:51 2021 +0100
  44. f673923 REGTESTS: extend the default I/O timeouts and make them overridable by Willy Tarreau · Thu Nov 18 17:46:22 2021 +0100
  45. 419c117 REGTEST: set retries count to zero for all tests that expect at 503 by Willy Tarreau · Thu Nov 18 17:15:59 2021 +0100
  46. ed9f48e REGTESTS: ssl_crt-list_filters: feature cmd incorrectly set by William Lallemand · Wed Nov 17 02:49:16 2021 +0100
  47. 68574dd MEDIUM: log: add the client's SNI to the default HTTPS log format by Willy Tarreau · Fri Nov 05 19:14:55 2021 +0100
  48. 6f74976 MEDIUM: connection: rename fc_conn_err and bc_conn_err to fc_err and bc_err by Willy Tarreau · Fri Nov 05 17:07:03 2021 +0100
  49. bd6b4be CLEANUP: assorted typo fixes in the code and comments by Ilya Shipitsin · Fri Oct 15 16:18:21 2021 +0500
  50. 1d58b01 MINOR: ssl: add ssl_fc_is_resumed to "option httpslog" by William Lallemand · Thu Oct 14 14:27:48 2021 +0200
  51. e5dfd40 REGTESTS: ssl: re-enable set_ssl_cert_bundle.vtc by William Lallemand · Thu Oct 14 11:06:16 2021 +0200
  52. e1b6109 REGTESTS: ssl: Use mostly TLSv1.2 in ssl_errors test by Remi Tricot-Le Breton · Wed Oct 13 11:21:02 2021 +0200
  53. d12e13a REGTESTS: ssl: Reenable ssl_errors test for OpenSSL only by Remi Tricot-Le Breton · Mon Oct 11 15:34:14 2021 +0200
  54. d266cda REGTESTS: ssl: Fix ssl_errors test for OpenSSL v3 by Remi Tricot-Le Breton · Mon Oct 11 15:34:13 2021 +0200
  55. 1ac65f8 REGTESTS: ssl: Fix references to removed option in test description by Remi Tricot-Le Breton · Mon Oct 11 15:34:11 2021 +0200
  56. f542941 REGTESTS: ssl: wrong feature cmd in show_ssl_ocspresponse.vtc by William Lallemand · Thu Sep 30 18:45:18 2021 +0200
  57. 2655f2b REGTESTS: ssl: show_ssl_ocspresponse w/ freebsd won't use base64 by William Lallemand · Thu Sep 30 17:57:04 2021 +0200
  58. 8d26438 REGTESTS: ssl: enable ssl_crt-list_filters.vtc again by William Lallemand · Thu Sep 30 15:07:27 2021 +0200
  59. 2f52fdb REGTESTS: ssl: enable show_ssl_ocspresponse.vtc again by William Lallemand · Thu Sep 30 11:19:29 2021 +0200
  60. 1fe0fad MINOR: ssl: Rename ssl_bc_hsk_err to ssl_bc_err by Remi Tricot-Le Breton · Wed Sep 29 18:56:52 2021 +0200
  61. b061fb3 REGTESTS: ssl: Add tests for bc_conn_err and ssl_bc_hsk_err sample fetches by Remi Tricot-Le Breton · Wed Sep 01 15:52:16 2021 +0200
  62. fe21fe7 MINOR: log: Add new "error-log-format" option by Remi Tricot-Le Breton · Tue Aug 31 12:08:52 2021 +0200
  63. 310a260 MEDIUM: config: Deprecate tune.ssl.capture-cipherlist-size by Marcin Deranek · Tue Jul 13 19:04:24 2021 +0200
  64. cbad112 REGTESTS: Remove REQUIRE_VERSION=1.5 from all tests by Tim Duesterhus · Wed Aug 25 19:17:28 2021 +0200
  65. 74f6ab6 MEDIUM: ssl: Keep a reference to the client's certificate for use in logs by Remi Tricot-Le Breton · Thu Aug 19 18:06:30 2021 +0200
  66. 56f1f75 MINOR: log: rename 'dontloglegacyconnerr' to 'log-error-via-logformat' by William Lallemand · Mon Aug 02 10:25:30 2021 +0200
  67. 4f59c67 REGTESTS: ssl: ssl_errors.vtc does not work with old openssl version by William Lallemand · Thu Jul 29 16:00:24 2021 +0200
  68. 54f6383 REGTESTS: ssl: Add tests for the connection and SSL error fetches by Remi Tricot-Le Breton · Thu Jul 29 09:45:54 2021 +0200
  69. 0498fa4 BUG/MINOR: ssl: Default-server configuration ignored by server by Remi Tricot-Le Breton · Tue Jul 13 18:28:22 2021 +0200
  70. 4ee192f REGTESTS: Replace REQUIRE_BINARIES with 'command -v' by Tim Duesterhus · Fri Jun 11 19:56:17 2021 +0200
  71. c957048 REGTESTS: Replace REQUIRE_OPTIONS with 'haproxy -cc' for 2.5+ tests by Tim Duesterhus · Fri Jun 11 19:56:16 2021 +0200
  72. 5efc48d REGTESTS: Replace REQUIRE_VERSION=2.5 with 'haproxy -cc' by Tim Duesterhus · Fri Jun 11 19:56:15 2021 +0200
  73. d8be001 REGTESTS: Remove REQUIRE_VERSION=1.6 from all tests by Tim Duesterhus · Fri Jun 11 18:16:24 2021 +0200
  74. 0061323 REGTESTS: ssl: show_ssl_ocspresponce.vtc is broken with BoringSSL by William Lallemand · Fri Jun 11 10:03:08 2021 +0200
  75. 2a77c62 REGTESTS: ssl: Add "show ssl ocsp-response" test by Remi Tricot-Le Breton · Thu Jun 10 13:51:16 2021 +0200
  76. a9334df CLEANUP: reg-tests: Remove obsolete no-htx parameter for reg-tests by Tim Duesterhus · Mon May 31 23:07:29 2021 +0200
  77. a3b2e09 REGTESTS: ssl: Add "set/commit ssl crl-file" test by Remi Tricot-Le Breton · Fri Apr 23 18:35:25 2021 +0200
  78. f615070 REGTESTS: ssl: Add "new/del ssl crl-file" tests by Remi Tricot-Le Breton · Thu Apr 22 11:02:16 2021 +0200
  79. efcc5b2 REGTESTS: ssl: Add "new/del ssl ca-file" tests by Remi Tricot-Le Breton · Mon Mar 29 11:55:40 2021 +0200
  80. 2a22e16 MEDIUM: ssl: Add "show ssl ca-file" CLI command by Remi Tricot-Le Breton · Tue Mar 16 11:19:33 2021 +0100
  81. d5fd09d MINOR: ssl: Add "abort ssl ca-file" CLI command by Remi Tricot-Le Breton · Thu Mar 11 10:22:52 2021 +0100
  82. 2db6101 REGTESTS: ssl: Add new ca-file update tests by Remi Tricot-Le Breton · Fri Mar 05 14:42:40 2021 +0100
  83. a1e832b REGTESTS: ssl: mark set_ssl_cert_bundle.vtc as broken by William Lallemand · Fri Apr 02 17:01:25 2021 +0200
  84. 3520183 REGTESTS: ssl: "set ssl cert" and multi-certificates bundle by William Lallemand · Fri Apr 02 15:23:14 2021 +0200
  85. bc2c386 BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one by Remi Tricot-Le Breton · Fri Mar 26 10:47:50 2021 +0100
  86. 8218aed BUG/MINOR: ssl: Fix update of default certificate by Remi Tricot-Le Breton · Wed Mar 17 14:56:54 2021 +0100
  87. fb00f31 BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list" by Remi Tricot-Le Breton · Tue Mar 23 16:41:53 2021 +0100
  88. e0de0a6 MINOR: ssl/cli: flush the server session cache upon 'commit ssl cert' by William Lallemand · Wed Feb 03 18:51:01 2021 +0100
  89. 8695ce0 BUG/MEDIUM: ssl/cli: abort ssl cert is freeing the old store by William Lallemand · Mon Feb 01 15:31:00 2021 +0100
  90. ff97eda REGTESTS: set_ssl_server_cert: cleanup the SSL caching option by William Lallemand · Mon Feb 01 14:57:31 2021 +0100
  91. a870a9c REGTESTS: set_ssl_server_cert.vtc: remove SSL caching and set as working by William Lallemand · Mon Feb 01 14:37:36 2021 +0100
  92. e814321 REGTESTS: set_ssl_server_cert.vtc: set as broken by William Lallemand · Thu Jan 28 18:08:36 2021 +0100
  93. 7b79424 REGTESTS: set_ssl_server_cert.vtc: check the sha1 from the server by William Lallemand · Thu Jan 28 16:00:22 2021 +0100
  94. 7e69637 REGTESTS: set_ssl_server_cert.vtc: check the Sha1 Fingerprint by William Lallemand · Thu Jan 28 14:59:19 2021 +0100
  95. 8788c6f REGTESTS: set_ssl_server_cert.vtc: remove the abort command by William Lallemand · Thu Jan 28 14:56:31 2021 +0100
  96. f3eedfe MEDIUM: ssl: Enable backend certificate hot update by Remi Tricot-Le Breton · Mon Jan 25 17:19:44 2021 +0100
  97. f38a018 CLEANUP: assorted typo fixes in the code and comments by Ilya Shipitsin · Mon Dec 21 01:16:17 2020 +0500
  98. c300747 REGTEST: make ssl_client_samples and ssl_server_samples require to 2.2 by Christopher Faulet · Fri Nov 13 17:10:51 2020 +0100
  99. 8f04e18 REGTEST: ssl: mark reg-tests/ssl/ssl_crt-list_filters.vtc as broken by William Lallemand · Tue Nov 10 22:40:24 2020 +0100
  100. 50c03aa BUG/MEDIUM: ssl/crt-list: correctly insert crt-list line if crt already loaded by William Lallemand · Fri Nov 06 16:24:07 2020 +0100