projects / haproxy-2.1.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 5e0d0e0) | patch
MINOR: ssl: add statement to force some ssl options in global.
authorEmeric Brun <ebrun@haproxy.com>
Thu, 30 Oct 2014 14:56:50 +0000 (15:56 +0100)
committerWilly Tarreau <w@1wt.eu>
Thu, 30 Oct 2014 16:06:29 +0000 (17:06 +0100)
commit2c86cbf7539af2008d61780b14f37ea8c46c2192
tree2c34b697becff8649567d61be53db69db5170bf2tree | snapshot
parent5e0d0e046a7a54c6f4349e58f0e850105038a71acommit | diff
MINOR: ssl: add statement to force some ssl options in global.

Adds global statements 'ssl-default-server-options' and
'ssl-default-bind-options' to force on 'server' and 'bind' lines
some ssl options.

Currently available options are 'no-sslv3', 'no-tlsv10', 'no-tlsv11',
'no-tlsv12', 'force-sslv3', 'force-tlsv10', 'force-tlsv11',
'force-tlsv12', and 'no-tls-tickets'.

Example:
      global
        ssl-default-server-options no-sslv3
        ssl-default-bind-options no-sslv3
doc/configuration.txt diff | blob | history
include/types/global.h diff | blob | history
src/ssl_sock.c diff | blob | history
haproxy-2.1 public tree. Stable production code.