]> git.ipfire.org Git - thirdparty/haproxy.git/commitdiff
CLEANUP: ssl: "bundle" is not an OpenSSL wording
authorWilliam Lallemand <wlallemand@haproxy.com>
Fri, 2 Oct 2020 16:08:18 +0000 (18:08 +0200)
committerWilliam Lallemand <wlallemand@haproxy.org>
Fri, 2 Oct 2020 16:11:47 +0000 (18:11 +0200)
There is a confusion between the HAProxy bundle and OpenSSL. OpenSSL
does not have "bundles" but multiple certificates in the same store.

Fix a commentary in the crt-list code.

src/ssl_crtlist.c

index 3f09c86738e0624a14e177e09b2ab37c50347315..65ca2891d229db540f2b36bd3b5524af8999e739 100644 (file)
@@ -552,11 +552,11 @@ int crtlist_parse_file(char *file, struct bind_conf *bind_conf, struct proxy *cu
 
                        } else {
                                /* If we didn't find the file, this could be a
-                               bundle, since 2.3 we don't support OpenSSL
-                               multi-certificate bundle, so we emulate it by
-                               loading each file separately. To do so we need
-                               to duplicate the entry in the crt-list because
-                               it becomes independent */
+                               bundle, since 2.3 we don't support multiple
+                               certificate in the same OpenSSL store, so we
+                               emulate it by loading each file separately. To
+                               do so we need to duplicate the entry in the
+                               crt-list because it becomes independent */
                                char fp[MAXPATHLEN+1] = {0};
                                int n = 0;
                                struct crtlist_entry *entry_dup = entry; /* use the previous created entry */