]> git.ipfire.org Git - thirdparty/haproxy.git/commit
BUG/MINOR: ssl: shut the ca-file errors emitted during httpclient init
authorWilliam Lallemand <wlallemand@haproxy.org>
Thu, 24 Nov 2022 18:14:19 +0000 (19:14 +0100)
committerWilliam Lallemand <wlallemand@haproxy.org>
Thu, 24 Nov 2022 18:14:19 +0000 (19:14 +0100)
commit0a2d63236c4ada9a33f7e9495aa332fdcd9f5f82
treef70d0b20cf629bfe3085f4b43c7aa479eef7dccb
parent3992f55ff390b3db423ffbc7fd322e84a7256ab4
BUG/MINOR: ssl: shut the ca-file errors emitted during httpclient init

With an OpenSSL library which use the wrong OPENSSLDIR, HAProxy tries to
load the OPENSSLDIR/certs/ into @system-ca, but emits a warning when it
can't.

This patch fixes the issue by allowing to shut the error when the SSL
configuration for the httpclient is not explicit.

Must be backported in 2.6.
include/haproxy/ssl_ckch.h
src/http_client.c
src/ssl_ckch.c