]> git.ipfire.org Git - thirdparty/haproxy.git/commit
projects / thirdparty / haproxy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 0d93a81) | patch
DEBUG: ssl: make sure we never change a servername on established connections
authorWilly Tarreau <w@1wt.eu>
Thu, 23 Dec 2021 10:12:13 +0000 (11:12 +0100)
committerWilly Tarreau <w@1wt.eu>
Thu, 23 Dec 2021 14:44:06 +0000 (15:44 +0100)
commit77bfa66124e8532a4ecbe5025657574bb43b7160
treec6b1abbad124db0177441a07b7025935217e6dbbtree | snapshot
parent0d93a8186331972d9c60624ed822e7c2c008d1d4commit | diff
DEBUG: ssl: make sure we never change a servername on established connections

Since this case was already met previously with commit 655dec81b
("BUG/MINOR: backend: do not set sni on connection reuse"), let's make
sure that we don't change reused connection settings. This could be
generalized to most settings that are only in effect before the handshake
in fact (like set_alpn and a few other ones).
src/ssl_sock.c diff | blob | blame | history
Mirror of https://github.com/haproxy/haproxy.git