]> git.ipfire.org Git - thirdparty/haproxy.git/commit
projects / thirdparty / haproxy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d87d3fa) | patch
BUG/MEDIUM: ssl: Don't attempt to set alpn if we're not using SSL.
authorOlivier Houchard <ohouchard@haproxy.com>
Fri, 28 Jun 2019 12:10:33 +0000 (14:10 +0200)
committerOlivier Houchard <cognet@ci0.org>
Fri, 28 Jun 2019 12:12:28 +0000 (14:12 +0200)
commite488ea865a433d93efcb14c0c602918070c6b208
treebd6678efdd8605510827a11c45beda1e3edd317ctree | snapshot
parentd87d3fab25b3795a74ace2cf2ee16d4516e7a9c0commit | diff
BUG/MEDIUM: ssl: Don't attempt to set alpn if we're not using SSL.

Checks use ssl_sock_set_alpn() to set the ALPN if check-alpn is used, however
check-alpn failed to check if the connection was indeed using SSL, and thus,
would crash if check-alpn was used on a non-SSL connection. Fix this by
making sure the connection uses SSL before attempting to set the ALPN.

This should be backported to 2.0 and 1.9.
src/ssl_sock.c diff | blob | blame | history
Mirror of https://github.com/haproxy/haproxy.git