]> git.ipfire.org Git - thirdparty/haproxy.git/commitdiff
BUG/MINOR: ssl/cli: unable to update a certificate without bundle extension
authorWilliam Lallemand <wlallemand@haproxy.com>
Mon, 4 Nov 2019 12:38:53 +0000 (13:38 +0100)
committerWilliam Lallemand <wlallemand@haproxy.org>
Mon, 4 Nov 2019 13:11:41 +0000 (14:11 +0100)
Commit bc6ca7c ("MINOR: ssl/cli: rework 'set ssl cert' as 'set/commit'")
broke the ability to commit a unique certificate which does not use a
bundle extension .{rsa,ecdsa,dsa}.

src/ssl_sock.c

index 98b3ad8b71f344d70d6e7a9592afff1665de0f83..7b2f1021cd50b2633e59fe645c3dd9c6586e08c1 100644 (file)
@@ -10327,6 +10327,8 @@ static int cli_parse_set_cert(char **args, char *payload, struct appctx *appctx,
                                                break;
                                        }
                                }
+                               if (bundle < 0) /* we didn't find a bundle extension */
+                                       break;
                        }
 #else
                        /* bundles are not supported here, so we don't need to lookup again */