projects / haproxy-2.1.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 0c3b7d9) | patch
MEDIUM: cli/ssl: handle the creation of SSL_CTX in an IO handler
authorWilliam Lallemand <wlallemand@haproxy.com>
Wed, 23 Oct 2019 08:53:05 +0000 (10:53 +0200)
committerWilliam Lallemand <wlallemand@haproxy.org>
Wed, 23 Oct 2019 09:54:51 +0000 (11:54 +0200)
commit8f840d7e556cbce0da8310664f89dcc52903c6dd
tree2db5a89dcbf4b795dfcb440b1deb2e47a5badd8etree | snapshot
parent0c3b7d9e1c4f0a0418003a4e8e61c81020bdbec6commit | diff
MEDIUM: cli/ssl: handle the creation of SSL_CTX in an IO handler

To avoid affecting too much the traffic during a certificate update,
create the SNIs in a IO handler which yield every 10 ckch instances.

This way haproxy continues to respond even if we tries to update a
certificate which have 50 000 instances.
include/types/applet.h diff | blob | history
src/ssl_sock.c diff | blob | history
haproxy-2.1 public tree. Stable production code.