diff options
| author | Renato Botelho <garga@FreeBSD.org> | 2014-05-08 18:22:05 -0300 |
|---|---|---|
| committer | Renato Botelho <garga@FreeBSD.org> | 2014-05-08 18:22:05 -0300 |
| commit | 89ae41977ee81bd970c4e4cc7e3849300533e689 (patch) | |
| tree | fedd8b36310b6208dcb7b10ffc63650182fadb59 | |
| parent | 255edd11572b572a9e1a813fce466c8eb3a82d0f (diff) | |
| parent | 419c50710e9ff8d22bcfff0a812cf733e48d8166 (diff) | |
| download | pfsense-packages-89ae41977ee81bd970c4e4cc7e3849300533e689.tar.gz pfsense-packages-89ae41977ee81bd970c4e4cc7e3849300533e689.tar.bz2 pfsense-packages-89ae41977ee81bd970c4e4cc7e3849300533e689.zip | |
Merge pull request #645 from PiBa-NL/hap_cert_usage
| -rw-r--r-- | config/haproxy-devel/haproxy.inc | 30 | ||||
| -rw-r--r-- | config/haproxy-devel/haproxy.xml | 3 |
2 files changed, 33 insertions, 0 deletions
diff --git a/config/haproxy-devel/haproxy.inc b/config/haproxy-devel/haproxy.inc index 4c9b3f4a..1e403c48 100644 --- a/config/haproxy-devel/haproxy.inc +++ b/config/haproxy-devel/haproxy.inc @@ -1186,6 +1186,36 @@ function haproxy_plugin_carp($pluginparams) { haproxy_check_run(0); } +function haproxy_plugin_certificates($pluginparams) { + global $config; + $result = array(); + if ($pluginparams['type'] == 'certificates' && $pluginparams['event'] == 'used_certificates') { + $result['pkgname'] = "HAProxy"; + $result['certificatelist'] = array(); + // return a array of used certificates. + foreach($config['installedpackages']['haproxy']['ha_backends']['item'] as &$frontend) { + $mainfrontend = get_primaryfrontend($frontend); + if (strtolower($mainfrontend['type']) == "http" && $mainfrontend['ssloffload']) { + if ($frontend['ssloffloadacl']){ + $item = array(); + $cert = $frontend['ssloffloadcert']; + $item['usedby'] = $frontend['name']; + $result['certificatelist'][$cert][] = $item; + } + if ($frontend['ssloffloadacladditional']){ + foreach($frontend['ha_certificates']['item'] as $certref){ + $item = array(); + $cert = $certref['ssl_certificate']; + $item['usedby'] = $frontend['name']; + $result['certificatelist'][$cert][] = $item; + } + } + } + } + } + return $result; +} + function haproxy_check_run($reload) { global $config, $g, $haproxy_run_message; diff --git a/config/haproxy-devel/haproxy.xml b/config/haproxy-devel/haproxy.xml index 5c534522..acd934a7 100644 --- a/config/haproxy-devel/haproxy.xml +++ b/config/haproxy-devel/haproxy.xml @@ -62,6 +62,9 @@ <item> <type>plugin_carp</type> </item> + <item> + <type>plugin_certificates</type> + </item> </plugins> <configpath>installedpackages->haproxy->config</configpath> <additional_files_needed> |