- 30 Nov, 2023 2 commits
-
-
William Lallemand authored
Since version 2.2, HAProxy is able to update dynamically certificates, without a reload. This patch uses socat to push the certificate into HAProxy in order to achieve hot update. With this method, reloading is not required. This should be used only to update an existing certificate in haproxy. 2 new variables are available: - DEPLOY_HAPROXY_HOT_UPDATE="yes" update over the stats socket instead of reloading - DEPLOY_HAPROXY_STATS_SOCKET="UNIX:/run/haproxy/admin.sock" set the path on the stats socket.
-
William Lallemand authored
Sanitize the PEM of the haproxy deploy script by removing the '\n', this way it could be injected directly over the CLI.
-
- 24 Oct, 2023 1 commit
-
-
podguzovvasily authored
resolved issue with HAProxy https://github.com/acmesh-official/acme.sh/issues/4788 according https://serversforhackers.com/c/letsencrypt-with-haproxy
-
- 30 Sep, 2021 1 commit
-
-
Glenn Strauss authored
(requested by @Neilpang in #3687)
-
- 01 Sep, 2021 1 commit
-
-
Glenn Strauss authored
(requested by @Neilpang in #3394) github: closes #3394
-
- 02 May, 2020 1 commit
-
-
Felix Bünemann authored
fixes ocsp reponse update failing with `Responder Error: unauthorized (6)` by removing `-no_nonce` switch from `openssl oscp` command .
-
- 20 Feb, 2020 1 commit
-
-
xpac1985 authored
haproxy deploy script now compatible with OpenSSL v1.1+ The OpenSSL OCSP request for haproxy deployment breaks from OpenSSL v1.1.0 on. The format of the `-header` option has been changed and does now contain a `=` instead of a whitespace. Other projects have hit the same issue: https://github.com/nghttp2/nghttp2/issues/742 This commit determines the OpenSSL/LibreSSL version and then adjusts the request accordingly. Also removed the duplicate command line and added some more debug output.
-
- 08 May, 2019 1 commit
-
-
- 28 Sep, 2018 2 commits
-
-
andrewheberle authored
-
andrewheberle authored
-
- 14 May, 2018 4 commits
-
-
andrewheberle authored
-
andrewheberle authored
-
andrewheberle authored
-
andrewheberle authored
-
- 10 May, 2018 4 commits
-
-
andrewheberle authored
Adds compatibility to original haproxy deploy hook while still allowing custom PEM file name (via HAPROXY_DEPLOY_PEM_NAME)
-
andrewheberle authored
-
andrewheberle authored
-
andrewheberle authored
Add functionality to add OCSP stapling info (.ocsp file), issuer (.issuer file) and multi-cert bundles (suffix on pem file based on key type). This also corrects the order of key, certificate and intermediate in the PEM file, which although HAProxy does not seem to care, was incorrect in the prior version.
-
- 04 May, 2018 2 commits
-
-
Daniel Watrous authored
-
Daniel Watrous authored
-
- 03 May, 2018 4 commits
-
-
Daniel Watrous authored
-
Daniel Watrous authored
-
Daniel Watrous authored
-
Daniel Watrous authored
HAProxy requires the certificate chain and key to be concatenated and placed somewhere (can be anywhere). This script expects a single environment variable with the path where the concatenated PEM file should be written
-
- 19 Feb, 2017 2 commits
- 11 Feb, 2017 1 commit
-
-
neilpang authored
-
- 05 Feb, 2017 1 commit
-
-
neilpang authored
-
- 09 Nov, 2016 1 commit
-
-
neilpang authored
-
- 25 Oct, 2016 1 commit
-
-
neilpang authored
-