DOC: configuration: add details on prefer-client-ciphers
authorWilliam Lallemand <wlallemand@haproxy.com>
Wed, 25 Jun 2025 12:41:45 +0000 (14:41 +0200)
committerChristopher Faulet <cfaulet@haproxy.com>
Tue, 26 Aug 2025 06:28:56 +0000 (08:28 +0200)
commitfaa6c12a5ceea61b904847a6b481d2efb2ba421b
tree4e4af0e951e711f8e6f6494d9f5201b140293d95
parentb07ee7114ded568f80fb1de115e11bc355916774
DOC: configuration: add details on prefer-client-ciphers

prefer-client-ciphers does not work exactly the same way when used with
a dual algorithm stack (ECDSA + RSA). This patch details its behavior.

This patch must be backported in every maintained version.

Problem was discovered in #2988.

(cherry picked from commit 370a8cea4a2680cf27d5be61163bada27d541347)
Signed-off-by: Willy Tarreau <w@1wt.eu>
(cherry picked from commit 5000d32a2488a47cf817bebcf023312510d0cddc)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>
doc/configuration.txt