]> git.ipfire.org Git - thirdparty/haproxy.git/commit
BUG/MINOR: ssl: ssl_sock_load_pem_into_ckch is not consistent
authorEmmanuel Hocdet <manu@gandi.net>
Fri, 20 Dec 2019 16:47:12 +0000 (17:47 +0100)
committerWilliam Lallemand <wlallemand@haproxy.org>
Wed, 22 Jan 2020 14:55:55 +0000 (15:55 +0100)
commit6b5b44e10fa1c5da18a120fd78082317036900e2
tree1114697ae79f2c10fb6624cfb4ae2120460c9f58
parent1a9dbe58a66516e6acc504ed2f185fd9d86a5e6d
BUG/MINOR: ssl: ssl_sock_load_pem_into_ckch is not consistent

"set ssl cert <filename> <payload>" CLI command should have the same
result as reload HAproxy with the updated pem file (<filename>).
Is not the case, DHparams/cert-chain is kept from the previous
context if no DHparams/cert-chain is set in the context (<payload>).

This patch should be backport to 2.1
include/common/tools.h
src/ssl_sock.c