]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MEDIUM: cli/ssl: handle the creation of SSL_CTX in an IO handler
authorWilliam Lallemand <wlallemand@haproxy.com>
Wed, 23 Oct 2019 08:53:05 +0000 (10:53 +0200)
committerWilliam Lallemand <wlallemand@haproxy.org>
Wed, 23 Oct 2019 09:54:51 +0000 (11:54 +0200)
commit8f840d7e556cbce0da8310664f89dcc52903c6dd
tree2db5a89dcbf4b795dfcb440b1deb2e47a5badd8e
parent0c3b7d9e1c4f0a0418003a4e8e61c81020bdbec6
MEDIUM: cli/ssl: handle the creation of SSL_CTX in an IO handler

To avoid affecting too much the traffic during a certificate update,
create the SNIs in a IO handler which yield every 10 ckch instances.

This way haproxy continues to respond even if we tries to update a
certificate which have 50 000 instances.
include/types/applet.h
src/ssl_sock.c