Hi, I tried to improve the haproxy loading time with a lot of certificates, and see a double file open for each certificate (one for private-key and one for the cert/chain). Multi-cert loading part have not this issue and is good candidate for sharing code: patches is this work with factoring/cleanup/fix.
About speed: PEM file with private key in first position is far better. If you can consider this patches? ++ Manu
0001-REORG-ssl-promote-cert_key_and_chain-handling.patch
Description: Binary data
0002-MINOR-ssl-use-STACK_OF-for-chain-certs.patch
Description: Binary data
0003-MINOR-ssl-SSL_CTX_set1_chain-compatibility.patch
Description: Binary data
0004-MINOR-ssl-used-cert_key_and_chain-func-in-load_cert_.patch
Description: Binary data
0005-BUG-MINOR-ssl-fix-ssl_sock_load_multi_cert-init-vars.patch
Description: Binary data
0006-CLEANUP-ssl-ssl_sock_load_crt_file_into_ckch.patch
Description: Binary data
