1. 310a260 MEDIUM: config: Deprecate tune.ssl.capture-cipherlist-size by Marcin Deranek · 3 years, 5 months ago
  2. 769fd2e MEDIUM: ssl: Capture more info from Client Hello by Marcin Deranek · 3 years, 5 months ago
  3. 7c6898e MINOR: ssl: Add new ssl_fc_hsk_err sample fetch by Remi Tricot-Le Breton · 3 years, 4 months ago
  4. 722180a BUILD: make tune.ssl.keylog available again by William Lallemand · 3 years, 6 months ago
  5. 8cd1627 CLEANUP: ssl: remove unused definitions by Ilya Shipitsin · 3 years, 8 months ago
  6. f34ed0b BUILD: SSL: guard TLS13 ciphersuites with HAVE_SSL_CTX_SET_CIPHERSUITES by Ilya Shipitsin · 4 years ago
  7. 0aa8c29 BUILD: ssl: use feature macros for detecting ec curves manipulation support by Ilya Shipitsin · 4 years, 1 month ago
  8. 04a5a44 BUILD: ssl: use HAVE_OPENSSL_KEYLOG instead of OpenSSL versions by Ilya Shipitsin · 4 years, 1 month ago
  9. 8e8581e MINOR: ssl: 'ssl-load-extra-del-ext' removes the certificate extension by William Lallemand · 4 years, 1 month ago
  10. 70bf06e BUILD: fix build with openssl < 1.0.2 since bundle removal by William Lallemand · 4 years, 2 months ago
  11. 4987a47 CLEANUP: tree-wide: use VAR_ARRAY instead of [0] in various definitions by Willy Tarreau · 4 years, 3 months ago
  12. 7d42ef5 WIP/MINOR: ssl: add sample fetches for keylog in frontend by William Lallemand · 4 years, 5 months ago
  13. 7df5c2d BUG/MEDIUM: ssl: fix ssl_bind_conf double free by William Lallemand · 4 years, 5 months ago
  14. e579391 REORG: include: make list-t.h part of the base API by Willy Tarreau · 4 years, 6 months ago
  15. b255105 CLEANUP: include: tree-wide alphabetical sort of include files by Willy Tarreau · 4 years, 6 months ago
  16. 209108d REORG: include: move ssl_sock.h to haproxy/ssl_sock{,-t}.h by Willy Tarreau · 4 years, 6 months ago[Renamed (97%) from include/types/ssl_sock.h]
  17. 7ea393d REORG: include: move connection.h to haproxy/connection{,-t}.h by Willy Tarreau · 4 years, 6 months ago
  18. 213e990 REORG: include: move listener.h to haproxy/listener{,-t}.h by Willy Tarreau · 4 years, 6 months ago
  19. 52d8872 REORG: move ssl_crtlist.h to haproxy/ssl_crtlist{,-t}.h by Willy Tarreau · 4 years, 6 months ago
  20. 47d7f90 REORG: include: move ssl_ckch.h to haproxy/ssl_ckch{,-t}.h by Willy Tarreau · 4 years, 6 months ago
  21. 2741c8c REORG: include: move common/buffer.h to haproxy/dynbuf{,-t}.h by Willy Tarreau · 4 years, 6 months ago
  22. af613e8 CLEANUP: thread: rename __decl_hathreads() to __decl_thread() by Willy Tarreau · 4 years, 6 months ago
  23. 3f567e4 REORG: include: split hathreads into haproxy/thread.h and haproxy/thread-t.h by Willy Tarreau · 4 years, 6 months ago
  24. 853b297 REORG: include: split mini-clist into haproxy/list and list-t.h by Willy Tarreau · 4 years, 6 months ago
  25. 6019fab REORG: include: move openssl-compat.h from common/ to haproxy/ by Willy Tarreau · 4 years, 6 months ago
  26. 8d2b777 REORG: ebtree: move the include files from ebtree to include/import/ by Willy Tarreau · 4 years, 6 months ago
  27. 1665c43 BUILD: ssl: include buffer common headers for ssl_sock_ctx by William Dauchy · 4 years, 7 months ago
  28. c0cdaff REORG: ssl: move ssl_sock_ctx and fix cross-dependencies issues by William Lallemand · 4 years, 7 months ago
  29. d4632b2 REORG: ssl: move the ckch structures to types/ssl_ckch.h by William Lallemand · 4 years, 7 months ago
  30. be21b66 REORG: move the crt-list structures in their own .h by William Lallemand · 4 years, 7 months ago
  31. 7fd8b45 REORG: ssl: move macros and structure definitions to ssl_sock.h by William Lallemand · 4 years, 7 months ago
  32. 1e7ed04 MEDIUM: ssl: allow to register callbacks for SSL/TLS protocol messages by Dragan Dosen · 4 years, 7 months ago
  33. 856aabc CLEANUP: assorted typo fixes in the code and comments by Ilya Shipitsin · 4 years, 8 months ago
  34. b7296c4 CLEANUP: ssl: remove a commentary in struct ckch_inst by William Lallemand · 4 years, 8 months ago
  35. caa1619 CLEANUP: ssl/cli: use the list of filters in the crtlist_entry by William Lallemand · 4 years, 8 months ago
  36. c69f02d MINOR: ssl/cli: replace dump/show ssl crt-list by '-n' option by William Lallemand · 4 years, 8 months ago
  37. fa8cf0c MINOR: ssl: store a ptr to crtlist in crtlist_entry by William Lallemand · 4 years, 8 months ago
  38. 23d61c0 MINOR: ssl: add a list of crtlist_entry in ckch_store by William Lallemand · 4 years, 8 months ago
  39. 4939831 BUG/MINOR: ssl: ckch_inst wrongly inserted in crtlist_entry by William Lallemand · 4 years, 8 months ago
  40. ad3c37b REORG: ssl: move SETCERT enum to ssl_sock.h by William Lallemand · 4 years, 8 months ago
  41. 79d31ec MINOR: ssl: add a list of bind_conf in struct crtlist by William Lallemand · 4 years, 8 months ago
  42. 2954c47 MEDIUM: ssl: allow crt-list caching by William Lallemand · 4 years, 9 months ago
  43. 6763016 BUG/MINOR: ssl/cli: sni_ctx' mustn't always be used as filters by William Lallemand · 4 years, 9 months ago
  44. 0a52846 CLEANUP: ssl: is_default is a bit in ckch_inst by William Lallemand · 4 years, 9 months ago
  45. 8dd0d55 BUILD: ssl: include mini-clist.h by Willy Tarreau · 4 years, 9 months ago
  46. cfca142 MINOR: ssl: reach a ckch_store from a sni_ctx by William Lallemand · 4 years, 9 months ago
  47. 38df1c8 MINOR: ssl/cli: support crt-list filters by William Lallemand · 5 years ago
  48. e0f3fd5 CLEANUP: ssl: move issuer_chain tree and definition by William Lallemand · 4 years, 9 months ago
  49. 6a0dd73 CLEANUP: Consistently `unsigned int` for bitfields by Tim Duesterhus · 4 years, 11 months ago
  50. 21724f0 MINOR: ssl/cli: replace the default_ctx during 'commit ssl cert' by William Lallemand · 5 years ago
  51. 246c024 MINOR: ssl: load the ocsp in/from the ckch by William Lallemand · 5 years ago
  52. a17f411 MINOR: ssl: load the sctl in/from the ckch by William Lallemand · 5 years ago
  53. 150bfa8 MEDIUM: ssl/cli: 'set ssl cert' updates a certificate from the CLI by William Lallemand · 5 years ago
  54. 1d29c74 MEDIUM: ssl: split ssl_sock_add_cert_sni() by William Lallemand · 5 years ago
  55. 9117de9 MEDIUM: ssl: introduce the ckch instance structure by William Lallemand · 5 years ago
  56. f6adbe9 REORG: ssl: move structures to ssl_sock.h by William Lallemand · 5 years ago
  57. c125cef CLEANUP: ssl: make inclusion of openssl headers safe by Willy Tarreau · 6 years ago
  58. 8d164dc CLEANUP: ssl: never include openssl/*.h outside of openssl-compat.h anymore by Willy Tarreau · 6 years ago
  59. 5599456 REORG: ssl: move openssl-compat from proto to common by Willy Tarreau · 6 years ago
  60. 9a1ab08 CLEANUP: ssl-sock: use HA_OPENSSL_VERSION_NUMBER instead of OPENSSL_VERSION_NUMBER by Willy Tarreau · 6 years ago
  61. 8ef7065 BUG/MINOR: ssl: Fix 48 byte TLS ticket key rotation by Nenad Merdanovic · 6 years ago
  62. 9e75477 MINOR: ssl: add support of aes256 bits ticket keys on file and cli. by Emeric Brun · 6 years ago
  63. 17b4aa1 BUG/MINOR: ssl: properly ref-count the tls_keys entries by Willy Tarreau · 6 years ago
  64. ddc090b MINOR: ssl: extract full pkey info in load_certificate by Emmanuel Hocdet · 7 years ago
  65. 16f45c8 BUG/MINOR: ssl/threads: Make management of the TLS ticket keys files thread-safe by Christopher Faulet · 7 years ago
  66. 4f45bb9 MEDIUM: shctx: separate ssl and shctx by William Lallemand · 7 years ago
  67. 5db33cb MEDIUM: ssl: ssl_methods implementation is reworked and factored for min/max tlsxx by Emmanuel Hocdet · 8 years ago
  68. 0594211 MEDIUM: boringssl: support native multi-cert selection without bundling by Emmanuel Hocdet · 8 years ago
  69. 9826329 MAJOR: ssl: bind configuration per certificat by Emmanuel Hocdet · 8 years ago
  70. 200b0fa MEDIUM: Add support for updating TLS ticket keys via socket by Nenad Merdanovic · 10 years ago
  71. 146defa MINOR: Add TLS ticket keys reference and use it in the listener struct by Nenad Merdanovic · 10 years ago
  72. 05552d4 MEDIUM: Add support for configurable TLS ticket keys by Nenad Merdanovic · 10 years ago
  73. 7c41a1b MEDIUM: ssl: improve crt-list format to support negation by Emmanuel Hocdet · 12 years ago
  74. fc0421f MEDIUM: ssl: add support for SNI and wildcard certificates by Emeric Brun · 12 years ago