haproxy: ssl-default-server-curves added in 2.9.0

x-ref: "HAProxy config uses ssl-default-server-curves for versions that do not support it" #311 github: fixes #311
mozilla · Jan 10, 2025 · e67a884 · e67a884
1 parent bc887a0
commit e67a884
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/src/js/helpers/haproxy.js b/src/js/helpers/haproxy.js
@@ -8,7 +8,10 @@ export default (form, output) => {
 
  function haproxy_ssl_default_opts (tag) {
    var conf =
-      '    ssl-default-'+tag+'-curves '+output.tlsCurves.join(':')+'\n'+
+      (minver("2.9.0", form.serverVersion) || tag === 'bind'
+        ?
+      '    ssl-default-'+tag+'-curves '+output.tlsCurves.join(':')+'\n'
+        : '')+
       (output.ciphers.length
         ?
       '    ssl-default-'+tag+'-ciphers '+output.ciphers.join(':')+'\n'