From deb92e4661106283d7951570fc9ab243e74bccd9 Mon Sep 17 00:00:00 2001
From: Alex W <embezzle.dev@proton.me>
Date: Mon, 15 Apr 2024 18:23:05 +0100
Subject: T6242: load-balancing reverse-proxy: Ability for ssl backends to not
 verify server certificates

(cherry picked from commit aafe22d08bb38a579dd5075fd27a1b88beeca791)
---
 interface-definitions/load-balancing_reverse-proxy.xml.in | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'interface-definitions/load-balancing_reverse-proxy.xml.in')

diff --git a/interface-definitions/load-balancing_reverse-proxy.xml.in b/interface-definitions/load-balancing_reverse-proxy.xml.in
index 2c2742dff..49d1d858e 100644
--- a/interface-definitions/load-balancing_reverse-proxy.xml.in
+++ b/interface-definitions/load-balancing_reverse-proxy.xml.in
@@ -157,6 +157,12 @@
                 </properties>
                 <children>
                   #include <include/pki/ca-certificate.xml.i>
+                  <leafNode name="no-verify">
+                    <properties>
+                      <help>Do not attempt to verify SSL certificates for backend servers</help>
+                      <valueless/>
+                    </properties>
+                  </leafNode>
                 </children>
               </node>
               #include <include/haproxy/timeout.xml.i>
-- 
cgit v1.2.3