HAPROXY ssl_c_sha256 in 1.7 version

Help!
1

Hi,

We are currently using HAPROXY version 1.7

I am trying to extract sha-256 encoded fingerprint on HAPROXY 1.7.

with below configuration I am oble able to extract sha1 encoded format.

http-request set-header ssl_client_cert_fingerprint %[ssl_c_sha1,hex]

I have tried the following configuration to extract sha-256 but HAPROXY is failing to restart.

 http-request set-header ssl_client_cert_fingerprint %[ssl_f_der,sha2(256),hex]
 http-request set-header ssl_client_cert_fingerprint %[ssl_c_der,sha2(256),hex]
 http-request set-header ssl_client_cert_fingerprint %[ssl_c_sha2,hex]

If sha-256 is not supported can you please confirm this, I was unable to find conifguration in the manual as well.
Can anyone help me to configure the http-header with sha-256 fingerprint

Thanks,
Nirish

2

Starting with Haproxy 2.1, you can use %[ssl_c_der,sha2(256),hex] as per: