]> git.ipfire.org Git - thirdparty/haproxy.git/commit
BUG/MEDIUM: ssl: loading dh param from certifile causes unpredictable error.
authorEmeric Brun <ebrun@haproxy.com>
Thu, 16 Aug 2018 13:14:12 +0000 (15:14 +0200)
committerWilly Tarreau <w@1wt.eu>
Thu, 16 Aug 2018 17:36:08 +0000 (19:36 +0200)
commite1b4ed4352619f985d7d65f5d95a830ef5775c46
treedab9dc8e0f695ed363d2998d0e79c6abd564e511
parenteb155b6ca6c1a8aaffa30285d453909b97979f5f
BUG/MEDIUM: ssl: loading dh param from certifile causes unpredictable error.

If the dh parameter is not found, the openssl's error global
stack was not correctly cleared causing unpredictable error
during the following parsing (chain cert parsing for instance).

This patch should be backported in 1.8 (and perhaps 1.7)
src/ssl_sock.c