DOC: configuration: add details on prefer-client-ciphers
authorWilliam Lallemand <wlallemand@haproxy.com>
Wed, 25 Jun 2025 12:41:45 +0000 (14:41 +0200)
committerChristopher Faulet <cfaulet@haproxy.com>
Wed, 1 Oct 2025 13:37:18 +0000 (15:37 +0200)
commit5efb5f4508ac1a16548fd67f76e9dd73d1717f08
tree7f1f234afadd074d2f2ed2156230f3a90248285e
parent0ecb4f4780fc0c3afce7cf15b54352fd414a0d9e
DOC: configuration: add details on prefer-client-ciphers

prefer-client-ciphers does not work exactly the same way when used with
a dual algorithm stack (ECDSA + RSA). This patch details its behavior.

This patch must be backported in every maintained version.

Problem was discovered in #2988.

(cherry picked from commit 370a8cea4a2680cf27d5be61163bada27d541347)
Signed-off-by: Willy Tarreau <w@1wt.eu>
(cherry picked from commit 5000d32a2488a47cf817bebcf023312510d0cddc)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>
(cherry picked from commit faa6c12a5ceea61b904847a6b481d2efb2ba421b)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>
doc/configuration.txt