]> git.ipfire.org Git - thirdparty/haproxy.git/commitdiff
CLEANUP: ssl: make ssl_sock_generate_certificate() use ssl_sock_generated_cert_serial()
authorWilly Tarreau <w@1wt.eu>
Tue, 7 Jul 2015 16:09:34 +0000 (18:09 +0200)
committerWilly Tarreau <w@1wt.eu>
Tue, 7 Jul 2015 16:09:34 +0000 (18:09 +0200)
It saves from open-coding the hashing method. Instead all serial
generation is done in a single function.

src/ssl_sock.c

index aa1d2aedcb50d9cdcfdd153cfbbb706c28d19106..aeee8c3fd85604b3300e0a1da92cc7278e147b4d 100644 (file)
@@ -1159,7 +1159,7 @@ ssl_sock_generate_certificate(const char *servername, struct bind_conf *bind_con
        struct lru64 *lru     = NULL;
        unsigned int  serial;
 
-       serial = XXH32(servername, strlen(servername), ssl_ctx_lru_seed);
+       serial = ssl_sock_generated_cert_serial(servername, strlen(servername));
        if (ssl_ctx_lru_tree) {
                lru = lru64_get(serial, ssl_ctx_lru_tree, cacert, 0);
                if (lru && lru->domain)