From 9fe4cb64cd9514a72bcd4b2fd8781620da9e1f76 Mon Sep 17 00:00:00 2001 From: Willy Tarreau Date: Wed, 2 Jul 2014 19:01:22 +0200 Subject: [PATCH 12/12] DOC: provide an example of how to use ssl_c_sha1 As suggested by Aydan Yumerefendi, a little bit of examples never hurts. (cherry picked from commit 2d0caa38e040b081903e50faa56bae52599b3949) --- doc/configuration.txt | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/doc/configuration.txt b/doc/configuration.txt index e53bb21..fcc6454 100644 --- a/doc/configuration.txt +++ b/doc/configuration.txt @@ -10722,6 +10722,10 @@ ssl_c_sha1 : binary Returns the SHA-1 fingerprint of the certificate presented by the client when the incoming connection was made over an SSL/TLS transport layer. This can be used to stick a client to a server, or to pass this information to a server. + Note that the output is binary, so if you want to pass that signature to the + server, you need to encode it in hex or base64, such as in the example below: + + http-request set-header X-SSL-Client-SHA1 %[ssl_c_sha1,hex] ssl_c_sig_alg : string Returns the name of the algorithm used to sign the certificate presented by -- 1.8.5.5