MEDIUM: ssl: Support certificate chaining for certificate generation
authorShimi Gersner <sgersner@microsoft.com>
Sun, 23 Aug 2020 10:58:12 +0000 (13:58 +0300)
committerWilliam Lallemand <wlallemand@haproxy.org>
Tue, 25 Aug 2020 14:36:06 +0000 (16:36 +0200)
commit5846c490ce662076862737c11ffb71e00e71593e
treeb8dc32b9bf05380a2757ef8d87f29be12f65d846
parent6ce0232a78cf6f94d82a6614317689523877b286
MEDIUM: ssl: Support certificate chaining for certificate generation

haproxy supports generating SSL certificates based on SNI using a provided
CA signing certificate. Because CA certificates may be signed by multiple
CAs, in some scenarios, it is neccesary for the server to attach the trust chain
in addition to the generated certificate.

The following patch adds the ability to serve the entire trust chain with
the generated certificate. The chain is loaded from the provided
`ca-sign-file` PEM file.
include/haproxy/listener-t.h
src/ssl_sock.c