upstream/opnsense-plugins
1
0
Fork 0
mirror of https://github.com/opnsense/plugins.git synced 2026-02-03 20:40:37 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

net/haproxy: add support for SSL SNI expressions, refs #3756

Browse source
This commit is contained in:
Frank Wall 2026-01-28 14:50:41 +01:00
parent c380136258
commit a4f2a6ba5c
4 changed files with 16 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
net/haproxy/pkg-descr
View file

@ -25,6 +25,7 @@ Added:
* add "enabled" field to rules
* add support for all stick-table data types
* add support for GPC/GPT/SC to conditions (#1123, #5109)
* add support for SSL SNI expression to servers (#3756)
Changed:
* upgrade to HAProxy 3.2 release series (#5147)

10
net/haproxy/src/opnsense/mvc/app/controllers/OPNsense/HAProxy/forms/dialogServer.xml
View file

@ -117,9 +117,15 @@
</field>
<field>
<id>server.sslSNI</id>
<label>SSL SNI</label>
<label>SSL SNI Name</label>
<type>text</type>
<help><![CDATA[The host name sent in the SNI TLS extension to the server.]]></help>
<help><![CDATA[The host name sent in the SNI TLS extension to the server. When present it will be preferred over the SNI expression.]]></help>
</field>
<field>
<id>server.sslSNIExpr</id>
<label>SSL SNI Expression</label>
<type>text</type>
<help><![CDATA[A HAProxy <a target="_blank" href="http://docs.haproxy.org/3.2/configuration.html##sni">SNI expression</a> to specify the data that will be sent in the SNI TLS extension to the server, e.g. req.hdr(host). When a SNI name is present it will be used instead and this option will be ignored.]]></help>
</field>
<field>
<id>server.sslVerify</id>

5
net/haproxy/src/opnsense/mvc/app/models/OPNsense/HAProxy/HAProxy.xml
View file

@ -1553,6 +1553,11 @@
<ValidationMessage>Should be a string between 1 and 255 characters.</ValidationMessage>
<Required>N</Required>
</sslSNI>
<sslSNIExpr type="TextField">
<Mask>/^.{1,255}$/u</Mask>
<ValidationMessage>Should be a string between 1 and 255 characters.</ValidationMessage>
<Required>N</Required>
</sslSNIExpr>
<sslVerify type="BooleanField">
<Default>1</Default>
<Required>Y</Required>

2
net/haproxy/src/opnsense/service/templates/OPNsense/HAProxy/haproxy.conf
View file

@ -2174,6 +2174,8 @@ backend {{backend.name}}
{# # SNI #}
{% if server_data.sslSNI|default('') != '' %}
{% do server_options.append('sni str(' ~ server_data.sslSNI ~ ')') %}
{% elif server_data.sslSNIExpr|default('') != '' %}
{% do server_options.append('sni ~ server_data.sslSNIExpr) %}
{% endif %}
{# # HTTP/2 #}
{% if backend.http2Enabled|default("") == '1' and backend.ba_advertised_protocols|default("") != "" %}