]> git.ipfire.org Git - thirdparty/haproxy.git/commitdiff
MINOR: ssl: BoringSSL ocsp_response does not need issuer
authorEmmanuel Hocdet <manu@gandi.net>
Fri, 25 Oct 2019 10:19:00 +0000 (12:19 +0200)
committerWilliam Lallemand <wlallemand@haproxy.org>
Thu, 31 Oct 2019 16:24:16 +0000 (17:24 +0100)
HAproxy can fail when issuer is not found, it must not with BoringSSL.

src/ssl_sock.c

index 770216d4a0ceb288bd7319724234a4dcf4d71661..aaa8652885aadd70b9714a78d3c8a70d734231a1 100644 (file)
@@ -3281,6 +3281,7 @@ static int ssl_sock_load_files_into_ckch(const char *path, struct cert_key_and_c
                }
        }
 
+#ifndef OPENSSL_IS_BORINGSSL /* Useless for BoringSSL */
        if (ckch->ocsp_response) {
                X509 *issuer;
                int i;
@@ -3321,6 +3322,7 @@ static int ssl_sock_load_files_into_ckch(const char *path, struct cert_key_and_c
                        }
                }
        }
+#endif
 
        ret = 0;