From: William Lallemand <wlallemand@haproxy.com>
Date: Wed, 9 Apr 2025 14:35:11 +0000 (+0200)
Subject: MINOR: acme: the acme section is experimental
X-Git-Tag: v3.2-dev11~98
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=4780a1f22334724527126a6ba5d0cececf2108b6;p=thirdparty%2Fhaproxy.git

MINOR: acme: the acme section is experimental

Allow the usage of the acme section only when
expose-experimental-directives is set.
---

diff --git a/src/acme.c b/src/acme.c
index 5d91c1b1b..86930045e 100644
--- a/src/acme.c
+++ b/src/acme.c
@@ -116,6 +116,12 @@ static int cfg_parse_acme(const char *file, int linenum, char **args, int kwm)
 	int err_code = 0;
 	char *errmsg = NULL;
 
+	if (!experimental_directives_allowed) {
+		ha_alert("parsing [%s:%d]: section '%s' is experimental, must be allowed via a global 'expose-experimental-directives'\n", file, linenum, cursection);
+		err_code |= ERR_ALERT | ERR_FATAL;
+		goto out;
+	}
+
 	if (strcmp(args[0], "acme") == 0) {
 		struct acme_cfg *tmp_acme = acme_cfgs;