]> git.ipfire.org Git - thirdparty/haproxy.git/commit
projects / thirdparty / haproxy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 817c4e3) | patch
BUG/MEDIUM: ssl/cli: 'commit ssl cert' wrong SSL_CTX init
authorWilliam Lallemand <wlallemand@haproxy.com>
Fri, 7 Feb 2020 19:45:24 +0000 (20:45 +0100)
committerWilliam Lallemand <wlallemand@haproxy.org>
Fri, 7 Feb 2020 19:55:35 +0000 (20:55 +0100)
commit696f317f13151e4427e3f9a8b560730ed6a7bb40
treea518e3cd832278e57bfcffc3cc6d7f81efd702bdtree | snapshot
parent817c4e39e51f5be7161eceb21985e87b633321cbcommit | diff
BUG/MEDIUM: ssl/cli: 'commit ssl cert' wrong SSL_CTX init

The code which is supposed to apply the bind_conf configuration on the
SSL_CTX was not called correctly. Indeed it was called with the previous
SSL_CTX so the new ones were left with default settings. For example the
ciphers were not changed.

This patch fixes #429.

Must be backported in 2.1.
src/ssl_sock.c diff | blob | blame | history
Mirror of https://github.com/haproxy/haproxy.git