1. 5003ac7 MEDIUM: config: set useful ALPN defaults for HTTPS and QUIC by Willy Tarreau · Wed Apr 19 09:12:33 2023 +0200
  2. 2e3c04a REGTESTS: add a new "ssl_alpn" test to test ALPN negotiation by Willy Tarreau · Wed Apr 19 08:34:01 2023 +0200
  3. dafc068 MINOR: ssl: Accept certpath as param in "show ssl ocsp-response" CLI command by Remi Tricot-Le Breton · Mon Mar 13 15:56:34 2023 +0100
  4. a6c0a59 MINOR: ssl: Use ocsp update task for "update ssl ocsp-response" command by Remi Tricot-Le Breton · Mon Mar 13 15:56:32 2023 +0100
  5. 86d1e0b BUG/MINOR: ssl: Fix ocsp-update when using "add ssl crt-list" by Remi Tricot-Le Breton · Thu Mar 02 15:49:53 2023 +0100
  6. 5ab54c6 REGTESTS: ssl: Add test for new ocsp update cli commands by Remi Tricot-Le Breton · Thu Mar 02 15:49:51 2023 +0100
  7. 780504a REGTESTS: ssl: Fix ocsp update crt-lists by Remi Tricot-Le Breton · Tue Feb 28 17:46:30 2023 +0100
  8. 4ad6ee9 REGTESTS: Fix ssl_errors.vtc script to wait for connections close by Christopher Faulet · Tue Feb 21 11:24:04 2023 +0100
  9. 522841c REGTEST: ssl: Add test for 'update ssl ocsp-response' CLI command by Remi Tricot-Le Breton · Thu Jan 12 09:49:12 2023 +0100
  10. 2f275fb REGTESTS: ssl: Add tests for ocsp auto update mechanism by Remi Tricot-Le Breton · Tue Dec 20 11:11:16 2022 +0100
  11. 8f5699b REGTESTS: ssl: enable the ssl_reuse.vtc test for WolfSSL by William Lallemand · Tue Dec 20 15:27:33 2022 +0100
  12. 9fbc84e MINOR: ssl: x509_v_err_str converter transforms an integer to a X509_V_ERR name by William Lallemand · Thu Nov 03 18:56:37 2022 +0100
  13. 960fb74 MEDIUM: ssl: {ca,crt}-ignore-err can now use error constant name by William Lallemand · Thu Nov 03 16:31:50 2022 +0100
  14. 23bc0b2 REGTESTS: ssl/log: test the log-forward with SSL by William Lallemand · Tue Sep 13 12:41:29 2022 +0200
  15. 62c0b99 MINOR: ssl/cli: implement "add ssl ca-file" by William Lallemand · Fri Jul 29 17:50:58 2022 +0200
  16. b6189bc REGTESTS: ssl: fix grep invocation to use extended regex in ssl_generate_certificate.vtc by Ilya Shipitsin · Sat Aug 06 22:40:41 2022 +0500
  17. 2f2a288 REGTESTS: ssl: adopt tests to OpenSSL-3.0.N by Ilya Shipitsin · Sun Jul 24 00:05:45 2022 +0500
  18. 0865160 REGTESTS: ssl: adopt tests to OpenSSL-3.0.N by Ilya Shipitsin · Sun Jul 24 00:01:32 2022 +0500
  19. ae6547f REGTESTS: ssl: add the same cert for client/server by William Lallemand · Mon Jun 20 18:01:30 2022 +0200
  20. cb6c5f4 BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list by William Lallemand · Mon Jun 20 16:51:53 2022 +0200
  21. 85c0ff5 REGTESTS: ssl: Update error messages that changed with OpenSSLv3.1.0-dev by Remi Tricot-Le Breton · Thu Apr 21 12:06:42 2022 +0200
  22. 1d6338e MEDIUM: ssl: Disable DHE ciphers by default by Remi Tricot-Le Breton · Tue Apr 12 11:31:55 2022 +0200
  23. 76e8b70 MEDIUM: server: remove experimental-mode for dynamic servers by Amaury Denoyelle · Wed Mar 09 15:07:31 2022 +0100
  24. 42f2a51 REGTESTS: server: close an occasional race on dynamic_server_ssl.vtc by Willy Tarreau · Wed Feb 16 10:45:23 2022 +0100
  25. 17b7384 REGTESTS: ssl: Add tests for DH related options by Remi Tricot-Le Breton · Fri Feb 11 12:04:46 2022 +0100
  26. 3f269bb REGTESTS: ssl: Add test for "generate-certificates" SSL option by Remi Tricot-Le Breton · Tue Feb 08 17:45:57 2022 +0100
  27. eb561ce REGTESTS: ssl: Add test for "curves" and "ecdhe" SSL options by Remi Tricot-Le Breton · Tue Feb 08 17:45:55 2022 +0100
  28. 8de3eff REGTESTS: ssl: skip show_ssl_ocspresponse.vtc when BoringSSL is used by Ilya Shipitsin · Mon Jan 31 09:49:47 2022 +0500
  29. aab8d25 REGTESTS: ssl: Fix ssl_errors regtest with OpenSSL 1.0.2 by Remi Tricot-Le Breton · Tue Jan 11 17:29:24 2022 +0100
  30. a996763 BUG/MINOR: ssl: Store client SNI in SSL context in case of ClientHello error by Remi Tricot-Le Breton · Fri Jan 07 17:12:01 2022 +0100
  31. 37d3e38 CLEANUP: assorted typo fixes in the code and comments by Ilya Shipitsin · Fri Jan 07 14:46:15 2022 +0500
  32. acd546b REGTESTS: ssl: update of a crt with server deletion by William Lallemand · Thu Dec 30 14:57:32 2021 +0100
  33. 0387632 REGTESTS: ssl: fix ssl_default_server.vtc by William Lallemand · Wed Dec 29 18:16:27 2021 +0100
  34. 2c776f1 BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server by William Lallemand · Tue Dec 28 18:47:17 2021 +0100
  35. fc11266 REGTESTS: ssl: use X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY for cert check by Ilya Shipitsin · Sat Dec 04 14:32:23 2021 +0500
  36. e15ab93 REGTESTS: ssl: test the TLS resumption by William Lallemand · Wed Nov 17 02:52:51 2021 +0100
  37. f673923 REGTESTS: extend the default I/O timeouts and make them overridable by Willy Tarreau · Thu Nov 18 17:46:22 2021 +0100
  38. 419c117 REGTEST: set retries count to zero for all tests that expect at 503 by Willy Tarreau · Thu Nov 18 17:15:59 2021 +0100
  39. ed9f48e REGTESTS: ssl_crt-list_filters: feature cmd incorrectly set by William Lallemand · Wed Nov 17 02:49:16 2021 +0100
  40. 68574dd MEDIUM: log: add the client's SNI to the default HTTPS log format by Willy Tarreau · Fri Nov 05 19:14:55 2021 +0100
  41. 6f74976 MEDIUM: connection: rename fc_conn_err and bc_conn_err to fc_err and bc_err by Willy Tarreau · Fri Nov 05 17:07:03 2021 +0100
  42. bd6b4be CLEANUP: assorted typo fixes in the code and comments by Ilya Shipitsin · Fri Oct 15 16:18:21 2021 +0500
  43. 1d58b01 MINOR: ssl: add ssl_fc_is_resumed to "option httpslog" by William Lallemand · Thu Oct 14 14:27:48 2021 +0200
  44. e5dfd40 REGTESTS: ssl: re-enable set_ssl_cert_bundle.vtc by William Lallemand · Thu Oct 14 11:06:16 2021 +0200
  45. e1b6109 REGTESTS: ssl: Use mostly TLSv1.2 in ssl_errors test by Remi Tricot-Le Breton · Wed Oct 13 11:21:02 2021 +0200
  46. d12e13a REGTESTS: ssl: Reenable ssl_errors test for OpenSSL only by Remi Tricot-Le Breton · Mon Oct 11 15:34:14 2021 +0200
  47. d266cda REGTESTS: ssl: Fix ssl_errors test for OpenSSL v3 by Remi Tricot-Le Breton · Mon Oct 11 15:34:13 2021 +0200
  48. 1ac65f8 REGTESTS: ssl: Fix references to removed option in test description by Remi Tricot-Le Breton · Mon Oct 11 15:34:11 2021 +0200
  49. f542941 REGTESTS: ssl: wrong feature cmd in show_ssl_ocspresponse.vtc by William Lallemand · Thu Sep 30 18:45:18 2021 +0200
  50. 2655f2b REGTESTS: ssl: show_ssl_ocspresponse w/ freebsd won't use base64 by William Lallemand · Thu Sep 30 17:57:04 2021 +0200
  51. 8d26438 REGTESTS: ssl: enable ssl_crt-list_filters.vtc again by William Lallemand · Thu Sep 30 15:07:27 2021 +0200
  52. 2f52fdb REGTESTS: ssl: enable show_ssl_ocspresponse.vtc again by William Lallemand · Thu Sep 30 11:19:29 2021 +0200
  53. 1fe0fad MINOR: ssl: Rename ssl_bc_hsk_err to ssl_bc_err by Remi Tricot-Le Breton · Wed Sep 29 18:56:52 2021 +0200
  54. b061fb3 REGTESTS: ssl: Add tests for bc_conn_err and ssl_bc_hsk_err sample fetches by Remi Tricot-Le Breton · Wed Sep 01 15:52:16 2021 +0200
  55. fe21fe7 MINOR: log: Add new "error-log-format" option by Remi Tricot-Le Breton · Tue Aug 31 12:08:52 2021 +0200
  56. 310a260 MEDIUM: config: Deprecate tune.ssl.capture-cipherlist-size by Marcin Deranek · Tue Jul 13 19:04:24 2021 +0200
  57. cbad112 REGTESTS: Remove REQUIRE_VERSION=1.5 from all tests by Tim Duesterhus · Wed Aug 25 19:17:28 2021 +0200
  58. 74f6ab6 MEDIUM: ssl: Keep a reference to the client's certificate for use in logs by Remi Tricot-Le Breton · Thu Aug 19 18:06:30 2021 +0200
  59. 56f1f75 MINOR: log: rename 'dontloglegacyconnerr' to 'log-error-via-logformat' by William Lallemand · Mon Aug 02 10:25:30 2021 +0200
  60. 4f59c67 REGTESTS: ssl: ssl_errors.vtc does not work with old openssl version by William Lallemand · Thu Jul 29 16:00:24 2021 +0200
  61. 54f6383 REGTESTS: ssl: Add tests for the connection and SSL error fetches by Remi Tricot-Le Breton · Thu Jul 29 09:45:54 2021 +0200
  62. 0498fa4 BUG/MINOR: ssl: Default-server configuration ignored by server by Remi Tricot-Le Breton · Tue Jul 13 18:28:22 2021 +0200
  63. 4ee192f REGTESTS: Replace REQUIRE_BINARIES with 'command -v' by Tim Duesterhus · Fri Jun 11 19:56:17 2021 +0200
  64. c957048 REGTESTS: Replace REQUIRE_OPTIONS with 'haproxy -cc' for 2.5+ tests by Tim Duesterhus · Fri Jun 11 19:56:16 2021 +0200
  65. 5efc48d REGTESTS: Replace REQUIRE_VERSION=2.5 with 'haproxy -cc' by Tim Duesterhus · Fri Jun 11 19:56:15 2021 +0200
  66. d8be001 REGTESTS: Remove REQUIRE_VERSION=1.6 from all tests by Tim Duesterhus · Fri Jun 11 18:16:24 2021 +0200
  67. 0061323 REGTESTS: ssl: show_ssl_ocspresponce.vtc is broken with BoringSSL by William Lallemand · Fri Jun 11 10:03:08 2021 +0200
  68. 2a77c62 REGTESTS: ssl: Add "show ssl ocsp-response" test by Remi Tricot-Le Breton · Thu Jun 10 13:51:16 2021 +0200
  69. a9334df CLEANUP: reg-tests: Remove obsolete no-htx parameter for reg-tests by Tim Duesterhus · Mon May 31 23:07:29 2021 +0200
  70. a3b2e09 REGTESTS: ssl: Add "set/commit ssl crl-file" test by Remi Tricot-Le Breton · Fri Apr 23 18:35:25 2021 +0200
  71. f615070 REGTESTS: ssl: Add "new/del ssl crl-file" tests by Remi Tricot-Le Breton · Thu Apr 22 11:02:16 2021 +0200
  72. efcc5b2 REGTESTS: ssl: Add "new/del ssl ca-file" tests by Remi Tricot-Le Breton · Mon Mar 29 11:55:40 2021 +0200
  73. 2a22e16 MEDIUM: ssl: Add "show ssl ca-file" CLI command by Remi Tricot-Le Breton · Tue Mar 16 11:19:33 2021 +0100
  74. d5fd09d MINOR: ssl: Add "abort ssl ca-file" CLI command by Remi Tricot-Le Breton · Thu Mar 11 10:22:52 2021 +0100
  75. 2db6101 REGTESTS: ssl: Add new ca-file update tests by Remi Tricot-Le Breton · Fri Mar 05 14:42:40 2021 +0100
  76. a1e832b REGTESTS: ssl: mark set_ssl_cert_bundle.vtc as broken by William Lallemand · Fri Apr 02 17:01:25 2021 +0200
  77. 3520183 REGTESTS: ssl: "set ssl cert" and multi-certificates bundle by William Lallemand · Fri Apr 02 15:23:14 2021 +0200
  78. bc2c386 BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one by Remi Tricot-Le Breton · Fri Mar 26 10:47:50 2021 +0100
  79. 8218aed BUG/MINOR: ssl: Fix update of default certificate by Remi Tricot-Le Breton · Wed Mar 17 14:56:54 2021 +0100
  80. fb00f31 BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list" by Remi Tricot-Le Breton · Tue Mar 23 16:41:53 2021 +0100
  81. e0de0a6 MINOR: ssl/cli: flush the server session cache upon 'commit ssl cert' by William Lallemand · Wed Feb 03 18:51:01 2021 +0100
  82. 8695ce0 BUG/MEDIUM: ssl/cli: abort ssl cert is freeing the old store by William Lallemand · Mon Feb 01 15:31:00 2021 +0100
  83. ff97eda REGTESTS: set_ssl_server_cert: cleanup the SSL caching option by William Lallemand · Mon Feb 01 14:57:31 2021 +0100
  84. a870a9c REGTESTS: set_ssl_server_cert.vtc: remove SSL caching and set as working by William Lallemand · Mon Feb 01 14:37:36 2021 +0100
  85. e814321 REGTESTS: set_ssl_server_cert.vtc: set as broken by William Lallemand · Thu Jan 28 18:08:36 2021 +0100
  86. 7b79424 REGTESTS: set_ssl_server_cert.vtc: check the sha1 from the server by William Lallemand · Thu Jan 28 16:00:22 2021 +0100
  87. 7e69637 REGTESTS: set_ssl_server_cert.vtc: check the Sha1 Fingerprint by William Lallemand · Thu Jan 28 14:59:19 2021 +0100
  88. 8788c6f REGTESTS: set_ssl_server_cert.vtc: remove the abort command by William Lallemand · Thu Jan 28 14:56:31 2021 +0100
  89. f3eedfe MEDIUM: ssl: Enable backend certificate hot update by Remi Tricot-Le Breton · Mon Jan 25 17:19:44 2021 +0100
  90. f38a018 CLEANUP: assorted typo fixes in the code and comments by Ilya Shipitsin · Mon Dec 21 01:16:17 2020 +0500
  91. c300747 REGTEST: make ssl_client_samples and ssl_server_samples require to 2.2 by Christopher Faulet · Fri Nov 13 17:10:51 2020 +0100
  92. 8f04e18 REGTEST: ssl: mark reg-tests/ssl/ssl_crt-list_filters.vtc as broken by William Lallemand · Tue Nov 10 22:40:24 2020 +0100
  93. 50c03aa BUG/MEDIUM: ssl/crt-list: correctly insert crt-list line if crt already loaded by William Lallemand · Fri Nov 06 16:24:07 2020 +0100
  94. 3ff9591 REGTEST: ssl: test wildcard and multi-type + exclusions by William Lallemand · Fri Nov 06 14:46:36 2020 +0100
  95. 1ac1768 REGTEST: ssl: test "set ssl cert" with separate key / crt by William Lallemand · Fri Oct 23 18:37:19 2020 +0200
  96. 989fe79 REGTEST: make ssl_client_samples and ssl_server_samples requiret to 2.3 by Willy Tarreau · Tue Sep 29 10:50:23 2020 +0200
  97. a598b50 MINOR: ssl: add ssl_{c,s}_chain_der fetch methods by William Dauchy · Thu Aug 06 18:11:38 2020 +0200
  98. 86bc953 REGTEST: ssl: add some ssl_c_* sample fetches test by William Lallemand · Fri Jun 26 12:03:45 2020 +0200
  99. 6e56b2c REGTEST: ssl: tests the ssl_f_* sample fetches by William Lallemand · Fri Jun 26 11:29:43 2020 +0200
  100. bfa3e81 MINOR: ssl: add the ssl_s_* sample fetches for server side certificate by William Lallemand · Thu Jun 25 20:07:18 2020 +0200