Skip to content

Commit aeb5cbd

Browse files
committed
DOC: configuration: add details about crt-store in bind "crt" keyword
Add some details about the certificate storage cache system in the "crt" bind keyword. This should be backported to 3.0. Fix issue #2618. (cherry picked from commit ba37ad4) Signed-off-by: William Lallemand <[email protected]>
1 parent 933f35f commit aeb5cbd

File tree

1 file changed

+9
-2
lines changed

1 file changed

+9
-2
lines changed

doc/configuration.txt

Lines changed: 9 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15941,8 +15941,15 @@ crl-file <crlfile>
1594115941
list for every certificate of your certificate authority chain.
1594215942

1594315943
crt <cert>
15944-
This setting is only available when support for OpenSSL was built in. It
15945-
designates a PEM file containing both the required certificates and any
15944+
This setting is only available when support for OpenSSL was built in.
15945+
15946+
HAProxy uses a cache system, the files are loaded only once in the certificate
15947+
storage, and each next "crt" keyword will use this cached version. When the
15948+
certificate was declared in a "crt-store", the certificate storage is
15949+
populated from there and don't try to load additional files by detecting file
15950+
extensions.
15951+
15952+
It designates a PEM file containing both the required certificates and any
1594615953
associated private keys. This file can be built by concatenating multiple
1594715954
PEM files into one (e.g. cat cert.pem key.pem > combined.pem). If your CA
1594815955
requires an intermediate certificate, this can also be concatenated into this

0 commit comments

Comments
 (0)