1. 30 Nov, 2023 2 commits
    • William Lallemand's avatar
      haproxy: deploy script can update existing certificate over stats socket · 0f7be905
      William Lallemand authored
      Since version 2.2, HAProxy is able to update dynamically certificates,
      without a reload.
      
      This patch uses socat to push the certificate into HAProxy in order to
      achieve hot update. With this method, reloading is not required.
      This should be used only to update an existing certificate in haproxy.
      
      2 new variables are available:
      
      - DEPLOY_HAPROXY_HOT_UPDATE="yes" update over the stats socket instead
        of reloading
      
      - DEPLOY_HAPROXY_STATS_SOCKET="UNIX:/run/haproxy/admin.sock" set the path on
        the stats socket.
      0f7be905
    • William Lallemand's avatar
      haproxy: sanitize the PEM in the deploy script · 7aaf4432
      William Lallemand authored
      Sanitize the PEM of the haproxy deploy script by removing the '\n', this
      way it could be injected directly over the CLI.
      7aaf4432
  2. 24 Oct, 2023 1 commit
  3. 30 Sep, 2021 1 commit
  4. 01 Sep, 2021 1 commit
  5. 02 May, 2020 1 commit
  6. 20 Feb, 2020 1 commit
    • xpac1985's avatar
      haproxy deploy script now compatible with OpenSSL v1.1+ · e184a1b9
      xpac1985 authored
      haproxy deploy script now compatible with OpenSSL v1.1+
      
      The OpenSSL OCSP request for haproxy deployment breaks from OpenSSL v1.1.0 on.
      The format of the `-header` option has been changed and does now contain a `=` instead of a whitespace.
      Other projects have hit the same issue:
      https://github.com/nghttp2/nghttp2/issues/742
      
      This commit determines the OpenSSL/LibreSSL version and then adjusts the request accordingly.
      Also removed the duplicate command line and added some more debug output.
      e184a1b9
  7. 08 May, 2019 1 commit
  8. 28 Sep, 2018 2 commits
  9. 14 May, 2018 4 commits
  10. 10 May, 2018 4 commits
    • andrewheberle's avatar
      Support HAPROXY_DEPLOY_PEM_PATH · ba20af48
      andrewheberle authored
      Adds compatibility to original haproxy deploy hook while still allowing custom PEM file name (via HAPROXY_DEPLOY_PEM_NAME)
      ba20af48
    • andrewheberle's avatar
      whitespace fixes · 707e0539
      andrewheberle authored
      707e0539
    • andrewheberle's avatar
      Fix variable name · c47e67e5
      andrewheberle authored
      c47e67e5
    • andrewheberle's avatar
      Update haproxy deploy hook · 6567bb4c
      andrewheberle authored
      Add functionality to add OCSP stapling info (.ocsp file), issuer (.issuer file) and multi-cert bundles (suffix on pem file based on key type).
      
      This also corrects the order of key, certificate and intermediate in the PEM file, which although HAProxy does not seem to care, was incorrect in the prior version.
      6567bb4c
  11. 04 May, 2018 2 commits
  12. 03 May, 2018 4 commits
  13. 19 Feb, 2017 2 commits
  14. 11 Feb, 2017 1 commit
  15. 05 Feb, 2017 1 commit
    • neilpang's avatar
      exe · b4325026
      neilpang authored
      b4325026
  16. 09 Nov, 2016 1 commit
  17. 25 Oct, 2016 1 commit