1. 60289bf BUG/MAJOR: ssl/ocsp: crash with ocsp when old process exit or using ocsp CLI by William Lallemand · 9 months ago
  2. 7fe93bd REGTESTS: ssl: Add OCSP related tests by Remi Tricot-Le Breton · 10 months ago
  3. 871df0a REGTESTS: ssl: Fix empty line in cli command input by Remi Tricot-Le Breton · 10 months ago
  4. d513644 BUG/MINOR: ssl/cli: can't find ".crt" files when replacing a certificate by William Lallemand · 1 year, 3 months ago
  5. 6e0c39d BUILD: ssl: ssl_c_r_dn fetches uses functiosn only available since 1.1.1 by William Lallemand · 1 year, 7 months ago
  6. df97f47 MINOR: ssl: add new sample ssl_c_r_dn by Abhijeet Rastogi · 1 year, 7 months ago
  7. a415e89 REGTESTS: ssl: simplify X509_V code check in ssl_client_auth.vtc by William Lallemand · 1 year, 7 months ago
  8. 5003ac7 MEDIUM: config: set useful ALPN defaults for HTTPS and QUIC by Willy Tarreau · 1 year, 8 months ago
  9. 2e3c04a REGTESTS: add a new "ssl_alpn" test to test ALPN negotiation by Willy Tarreau · 1 year, 8 months ago
  10. dafc068 MINOR: ssl: Accept certpath as param in "show ssl ocsp-response" CLI command by Remi Tricot-Le Breton · 1 year, 9 months ago
  11. a6c0a59 MINOR: ssl: Use ocsp update task for "update ssl ocsp-response" command by Remi Tricot-Le Breton · 1 year, 9 months ago
  12. 86d1e0b BUG/MINOR: ssl: Fix ocsp-update when using "add ssl crt-list" by Remi Tricot-Le Breton · 1 year, 9 months ago
  13. 5ab54c6 REGTESTS: ssl: Add test for new ocsp update cli commands by Remi Tricot-Le Breton · 1 year, 9 months ago
  14. 780504a REGTESTS: ssl: Fix ocsp update crt-lists by Remi Tricot-Le Breton · 1 year, 9 months ago
  15. 4ad6ee9 REGTESTS: Fix ssl_errors.vtc script to wait for connections close by Christopher Faulet · 1 year, 9 months ago
  16. 522841c REGTEST: ssl: Add test for 'update ssl ocsp-response' CLI command by Remi Tricot-Le Breton · 1 year, 11 months ago
  17. 2f275fb REGTESTS: ssl: Add tests for ocsp auto update mechanism by Remi Tricot-Le Breton · 2 years ago
  18. 8f5699b REGTESTS: ssl: enable the ssl_reuse.vtc test for WolfSSL by William Lallemand · 2 years ago
  19. 9fbc84e MINOR: ssl: x509_v_err_str converter transforms an integer to a X509_V_ERR name by William Lallemand · 2 years, 1 month ago
  20. 960fb74 MEDIUM: ssl: {ca,crt}-ignore-err can now use error constant name by William Lallemand · 2 years, 1 month ago
  21. 23bc0b2 REGTESTS: ssl/log: test the log-forward with SSL by William Lallemand · 2 years, 3 months ago
  22. 62c0b99 MINOR: ssl/cli: implement "add ssl ca-file" by William Lallemand · 2 years, 4 months ago
  23. b6189bc REGTESTS: ssl: fix grep invocation to use extended regex in ssl_generate_certificate.vtc by Ilya Shipitsin · 2 years, 4 months ago
  24. 2f2a288 REGTESTS: ssl: adopt tests to OpenSSL-3.0.N by Ilya Shipitsin · 2 years, 4 months ago
  25. 0865160 REGTESTS: ssl: adopt tests to OpenSSL-3.0.N by Ilya Shipitsin · 2 years, 4 months ago
  26. ae6547f REGTESTS: ssl: add the same cert for client/server by William Lallemand · 2 years, 5 months ago
  27. cb6c5f4 BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list by William Lallemand · 2 years, 5 months ago
  28. 85c0ff5 REGTESTS: ssl: Update error messages that changed with OpenSSLv3.1.0-dev by Remi Tricot-Le Breton · 2 years, 7 months ago
  29. 1d6338e MEDIUM: ssl: Disable DHE ciphers by default by Remi Tricot-Le Breton · 2 years, 8 months ago
  30. 76e8b70 MEDIUM: server: remove experimental-mode for dynamic servers by Amaury Denoyelle · 2 years, 9 months ago
  31. 42f2a51 REGTESTS: server: close an occasional race on dynamic_server_ssl.vtc by Willy Tarreau · 2 years, 10 months ago
  32. 17b7384 REGTESTS: ssl: Add tests for DH related options by Remi Tricot-Le Breton · 2 years, 10 months ago
  33. 3f269bb REGTESTS: ssl: Add test for "generate-certificates" SSL option by Remi Tricot-Le Breton · 2 years, 10 months ago
  34. eb561ce REGTESTS: ssl: Add test for "curves" and "ecdhe" SSL options by Remi Tricot-Le Breton · 2 years, 10 months ago
  35. 8de3eff REGTESTS: ssl: skip show_ssl_ocspresponse.vtc when BoringSSL is used by Ilya Shipitsin · 2 years, 10 months ago
  36. aab8d25 REGTESTS: ssl: Fix ssl_errors regtest with OpenSSL 1.0.2 by Remi Tricot-Le Breton · 2 years, 11 months ago
  37. a996763 BUG/MINOR: ssl: Store client SNI in SSL context in case of ClientHello error by Remi Tricot-Le Breton · 2 years, 11 months ago
  38. 37d3e38 CLEANUP: assorted typo fixes in the code and comments by Ilya Shipitsin · 2 years, 11 months ago
  39. acd546b REGTESTS: ssl: update of a crt with server deletion by William Lallemand · 3 years ago
  40. 0387632 REGTESTS: ssl: fix ssl_default_server.vtc by William Lallemand · 3 years ago
  41. 2c776f1 BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server by William Lallemand · 3 years ago
  42. fc11266 REGTESTS: ssl: use X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY for cert check by Ilya Shipitsin · 3 years ago
  43. e15ab93 REGTESTS: ssl: test the TLS resumption by William Lallemand · 3 years ago
  44. f673923 REGTESTS: extend the default I/O timeouts and make them overridable by Willy Tarreau · 3 years ago
  45. 419c117 REGTEST: set retries count to zero for all tests that expect at 503 by Willy Tarreau · 3 years ago
  46. ed9f48e REGTESTS: ssl_crt-list_filters: feature cmd incorrectly set by William Lallemand · 3 years ago
  47. 68574dd MEDIUM: log: add the client's SNI to the default HTTPS log format by Willy Tarreau · 3 years, 1 month ago
  48. 6f74976 MEDIUM: connection: rename fc_conn_err and bc_conn_err to fc_err and bc_err by Willy Tarreau · 3 years, 1 month ago
  49. bd6b4be CLEANUP: assorted typo fixes in the code and comments by Ilya Shipitsin · 3 years, 2 months ago
  50. 1d58b01 MINOR: ssl: add ssl_fc_is_resumed to "option httpslog" by William Lallemand · 3 years, 2 months ago
  51. e5dfd40 REGTESTS: ssl: re-enable set_ssl_cert_bundle.vtc by William Lallemand · 3 years, 2 months ago
  52. e1b6109 REGTESTS: ssl: Use mostly TLSv1.2 in ssl_errors test by Remi Tricot-Le Breton · 3 years, 2 months ago
  53. d12e13a REGTESTS: ssl: Reenable ssl_errors test for OpenSSL only by Remi Tricot-Le Breton · 3 years, 2 months ago
  54. d266cda REGTESTS: ssl: Fix ssl_errors test for OpenSSL v3 by Remi Tricot-Le Breton · 3 years, 2 months ago
  55. 1ac65f8 REGTESTS: ssl: Fix references to removed option in test description by Remi Tricot-Le Breton · 3 years, 2 months ago
  56. f542941 REGTESTS: ssl: wrong feature cmd in show_ssl_ocspresponse.vtc by William Lallemand · 3 years, 2 months ago
  57. 2655f2b REGTESTS: ssl: show_ssl_ocspresponse w/ freebsd won't use base64 by William Lallemand · 3 years, 2 months ago
  58. 8d26438 REGTESTS: ssl: enable ssl_crt-list_filters.vtc again by William Lallemand · 3 years, 2 months ago
  59. 2f52fdb REGTESTS: ssl: enable show_ssl_ocspresponse.vtc again by William Lallemand · 3 years, 2 months ago
  60. 1fe0fad MINOR: ssl: Rename ssl_bc_hsk_err to ssl_bc_err by Remi Tricot-Le Breton · 3 years, 2 months ago
  61. b061fb3 REGTESTS: ssl: Add tests for bc_conn_err and ssl_bc_hsk_err sample fetches by Remi Tricot-Le Breton · 3 years, 3 months ago
  62. fe21fe7 MINOR: log: Add new "error-log-format" option by Remi Tricot-Le Breton · 3 years, 3 months ago
  63. 310a260 MEDIUM: config: Deprecate tune.ssl.capture-cipherlist-size by Marcin Deranek · 3 years, 5 months ago
  64. cbad112 REGTESTS: Remove REQUIRE_VERSION=1.5 from all tests by Tim Duesterhus · 3 years, 3 months ago
  65. 74f6ab6 MEDIUM: ssl: Keep a reference to the client's certificate for use in logs by Remi Tricot-Le Breton · 3 years, 3 months ago
  66. 56f1f75 MINOR: log: rename 'dontloglegacyconnerr' to 'log-error-via-logformat' by William Lallemand · 3 years, 4 months ago
  67. 4f59c67 REGTESTS: ssl: ssl_errors.vtc does not work with old openssl version by William Lallemand · 3 years, 4 months ago
  68. 54f6383 REGTESTS: ssl: Add tests for the connection and SSL error fetches by Remi Tricot-Le Breton · 3 years, 4 months ago
  69. 0498fa4 BUG/MINOR: ssl: Default-server configuration ignored by server by Remi Tricot-Le Breton · 3 years, 5 months ago
  70. 4ee192f REGTESTS: Replace REQUIRE_BINARIES with 'command -v' by Tim Duesterhus · 3 years, 6 months ago
  71. c957048 REGTESTS: Replace REQUIRE_OPTIONS with 'haproxy -cc' for 2.5+ tests by Tim Duesterhus · 3 years, 6 months ago
  72. 5efc48d REGTESTS: Replace REQUIRE_VERSION=2.5 with 'haproxy -cc' by Tim Duesterhus · 3 years, 6 months ago
  73. d8be001 REGTESTS: Remove REQUIRE_VERSION=1.6 from all tests by Tim Duesterhus · 3 years, 6 months ago
  74. 0061323 REGTESTS: ssl: show_ssl_ocspresponce.vtc is broken with BoringSSL by William Lallemand · 3 years, 6 months ago
  75. 2a77c62 REGTESTS: ssl: Add "show ssl ocsp-response" test by Remi Tricot-Le Breton · 3 years, 6 months ago
  76. a9334df CLEANUP: reg-tests: Remove obsolete no-htx parameter for reg-tests by Tim Duesterhus · 3 years, 6 months ago
  77. a3b2e09 REGTESTS: ssl: Add "set/commit ssl crl-file" test by Remi Tricot-Le Breton · 3 years, 7 months ago
  78. f615070 REGTESTS: ssl: Add "new/del ssl crl-file" tests by Remi Tricot-Le Breton · 3 years, 7 months ago
  79. efcc5b2 REGTESTS: ssl: Add "new/del ssl ca-file" tests by Remi Tricot-Le Breton · 3 years, 8 months ago
  80. 2a22e16 MEDIUM: ssl: Add "show ssl ca-file" CLI command by Remi Tricot-Le Breton · 3 years, 9 months ago
  81. d5fd09d MINOR: ssl: Add "abort ssl ca-file" CLI command by Remi Tricot-Le Breton · 3 years, 9 months ago
  82. 2db6101 REGTESTS: ssl: Add new ca-file update tests by Remi Tricot-Le Breton · 3 years, 9 months ago
  83. a1e832b REGTESTS: ssl: mark set_ssl_cert_bundle.vtc as broken by William Lallemand · 3 years, 8 months ago
  84. 3520183 REGTESTS: ssl: "set ssl cert" and multi-certificates bundle by William Lallemand · 3 years, 8 months ago
  85. bc2c386 BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one by Remi Tricot-Le Breton · 3 years, 8 months ago
  86. 8218aed BUG/MINOR: ssl: Fix update of default certificate by Remi Tricot-Le Breton · 3 years, 9 months ago
  87. fb00f31 BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list" by Remi Tricot-Le Breton · 3 years, 8 months ago
  88. e0de0a6 MINOR: ssl/cli: flush the server session cache upon 'commit ssl cert' by William Lallemand · 3 years, 10 months ago
  89. 8695ce0 BUG/MEDIUM: ssl/cli: abort ssl cert is freeing the old store by William Lallemand · 3 years, 10 months ago
  90. ff97eda REGTESTS: set_ssl_server_cert: cleanup the SSL caching option by William Lallemand · 3 years, 10 months ago
  91. a870a9c REGTESTS: set_ssl_server_cert.vtc: remove SSL caching and set as working by William Lallemand · 3 years, 10 months ago
  92. e814321 REGTESTS: set_ssl_server_cert.vtc: set as broken by William Lallemand · 3 years, 10 months ago
  93. 7b79424 REGTESTS: set_ssl_server_cert.vtc: check the sha1 from the server by William Lallemand · 3 years, 10 months ago
  94. 7e69637 REGTESTS: set_ssl_server_cert.vtc: check the Sha1 Fingerprint by William Lallemand · 3 years, 10 months ago
  95. 8788c6f REGTESTS: set_ssl_server_cert.vtc: remove the abort command by William Lallemand · 3 years, 10 months ago
  96. f3eedfe MEDIUM: ssl: Enable backend certificate hot update by Remi Tricot-Le Breton · 3 years, 10 months ago
  97. f38a018 CLEANUP: assorted typo fixes in the code and comments by Ilya Shipitsin · 4 years ago
  98. c300747 REGTEST: make ssl_client_samples and ssl_server_samples require to 2.2 by Christopher Faulet · 4 years, 1 month ago
  99. 8f04e18 REGTEST: ssl: mark reg-tests/ssl/ssl_crt-list_filters.vtc as broken by William Lallemand · 4 years, 1 month ago
  100. 50c03aa BUG/MEDIUM: ssl/crt-list: correctly insert crt-list line if crt already loaded by William Lallemand · 4 years, 1 month ago