Commits on Jun 14, 2024

1. remove dedicated maps for SNI match …

   SNI maps were incorrectly used to match requests on ancient versions of
   HAProxy Ingress - v0.4 or so. A separated group of match files were
   being used since then on TLS based authentication configurations. We
   don't need it anymore, since all the mTLS configurations don't depend
   on the maps, so we're now dropping its support.
   
   There is one behavior change with this update: a missing or
   misconfigured host header, for an ingress with mTLS, with optional
   certificate, without sending a certificate, would fallback to SNI in
   order to try a match. Now, since only the host header is the source of
   truth, a non matching host header with a distinct SNI will 404 despite
   of its mTLS configuration.

   

   jcmoraisjr committed Jun 14, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for 1515040
   • Browse repository at this point

   Copy the full SHA

   1515040 View commit details

   Browse the repository at this point in the history