5 Commits

Author	SHA1	Message	Date
Tim Duesterhus	f38175cf6e	MINOR: sample: Add secure_memcmp converter ... secure_memcmp compares two binary strings in constant time. It's only available when haproxy is compiled with USE_OPENSSL.	2020-06-09 22:04:13 +02:00
Patrick Gansterer	8e36651ed3	MINOR: sample: Add digest and hmac converters ... Make the digest and HMAC function of OpenSSL accessible to the user via converters. They can be used to sign and validate content. Reviewed-by: Tim Duesterhus <tim@bastelstu.be>	2020-05-12 10:08:11 +02:00
Tim Duesterhus	cd3732456b	MINOR: sample: Validate the number of bits for the sha2 converter ... Instead of failing the conversion when an invalid number of bits is given the sha2 converter now fails with an appropriate error message during startup. The sha2 converter was introduced in d4376302377e4f51f43a183c2c91d929b27e1ae3, which is in 2.1 and higher.	2019-12-17 13:28:00 +01:00
Tim Duesterhus	4381d26edc	BUG/MINOR: sample: Make the field converter compatible with -m found ... Previously an expression like: path,field(2,/) -m found always returned `true`. Bug exists since the `field` converter exists. That is: f399b0debfc6c7dc17c6ad503885c911493add56 The fix should be backported to 1.6+.	2019-10-21 15:49:42 +02:00
Tim Duesterhus	d437630237	MINOR: sample: Add sha2([<bits>]) converter ... This adds a converter for the SHA-2 family, supporting SHA-224, SHA-256 SHA-384 and SHA-512. The converter relies on the OpenSSL implementation, thus only being available when HAProxy is compiled with USE_OPENSSL. See GitHub issue #123. The hypothetical `ssl_?_sha256` fetch can then be simulated using `ssl_?_der,sha2(256)`: http-response set-header Server-Cert-FP %[ssl_f_der,sha2(256),hex]	2019-06-17 13:36:42 +02:00