trafficserver icon indicating copy to clipboard operation
trafficserver copied to clipboard

ssl_multicert.config -> ssl_multicert.yaml

Open bneradt opened this issue 1 month ago • 0 comments

Replace the ssl_multicert.config format with YAML format, following the pattern established by sni.yaml. The new ssl_multicert.yaml uses a top-level 'ssl_multicert' key containing a sequence of certificate entries.

This also includes a Python migration script for converting existing configs.


Community Decisions

  • [ ] Do we want these conversion scripts to be python or c++ files? This PR implements it as Python and that's my recommendation because I feel it is more versatile. But it wouldn't be hard to implement the conversion tool as a c++ program.
  • [ ] Do we want to support both the old and new formats at the same time? At 10.x, we transitioned to only supporting records.yaml, so we have that as maybe something of a precedent. This PR just supports the new, but we have to decide on our policy for the old formats for 11.

At least for ssl_multicert, either of these options are possible from an implementation standpoint.

@cmcfarlen had an interesting suggestion to bake the config conversion logic into traffic_ctl. Maybe have something like:

traffic_ctrl config convert ssl_multicert|plugins|... <old_path> <new_path>

bneradt avatar Dec 11 '25 21:12 bneradt