From: Shimi Gersner <sgers...@microsoft.com> Hi folks,
The following patches add two enhancements to the certificate generation feature. - SAN extension on the generated certificate - Chaining the full trust of the original CA certificate While evaluating HAP for a new product we realized that these two features are needed for real world proxy scenarios. Thank you, Shimi. Shimi Gersner (2): MEDIUM: ssl: Support certificate chaining for certificate generation SMALL: ssl: Support SAN extension for certificate generation doc/configuration.txt | 16 ++++ include/haproxy/listener-t.h | 5 +- src/cfgparse-ssl.c | 26 ++++++ src/ssl_sock.c | 151 +++++++++++++++++++++++++---------- 4 files changed, 153 insertions(+), 45 deletions(-) -- 2.27.0
