This changes the parameters for four functions in HAProxy.php.
The ACME Client appears to call these functions with positional rather than named params
so also switch the order of the parameters in these function calls in
While working on the documentation I noticed my previous comment was wrong, which also invalidates the need for an optional setting. When it comes to the "CAfile" setting, the chain shouldn't be provided, for the listener (the server cert) it shouldn't matter at all if you ship the chain since it's not part of the authentication.
This commits simplifies https://github.com/opnsense/plugins/pull/2854 by removing the option. The current documentation online doesn't need any modifications for this.
commit e873aa41591442e16ec0581fa8b6e8696a1821ff
Author: Ad Schellevis <ad@opnsense.org>
Date: Mon Jul 4 14:23:32 2022 +0200
security/stunnel: Add option to chain intermediate CAs (https://github.com/opnsense/plugins/pull/2854), better explain impact and add move to advanced
commit 1e86212ad759a10ae3c229d709a5718ab79208d5
Author: Johnny S. Lee <6614805+johnnyslee@users.noreply.github.com>
Date: Mon Feb 21 09:52:26 2022 +0800
security/stunnel: Allow GUI usage of restart action
For example, we can now select "Restart Stunnel" from
`Service/ACME-Client/Automations>Run-Command>System-or-Plugin-Command`
in GUI.
commit 005af925b1e4c96022953757297c5a0782a81825
Author: Johnny S. Lee <6614805+johnnyslee@users.noreply.github.com>
Date: Mon Feb 21 09:45:28 2022 +0800
security/stunnel: Add option to chain intermediate CAs
Add an option, defaults disabled, to chain intermediate CAs which is
required when using ACME cert.
Hobby-Student
Frank Wall
Jan Winkler
Franco Fichtner
Michael
Nikolaj Brinch Jørgensen
Gavin Chappell
mmetc
Ad Schellevis
MeganerdNL