From: William Lallemand <wlallemand@haproxy.com>
Date: Thu, 17 Oct 2024 10:23:13 +0000 (+0200)
Subject: MINOR: mworker/ocsp: skip ocsp-update proxy init in master
X-Git-Tag: v3.1-dev11~122
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=043f11e891e063f4a2864f4beeb62db028f1663b;p=thirdparty%2Fhaproxy.git

MINOR: mworker/ocsp: skip ocsp-update proxy init in master

The proxy must be created in mworker mode, but only in the worker, not in
the master. The current code creates the proxy in both processes.

The patch only checks that we are not in the master to start the
ocsp-update pre-check.

No backport needed.
---

diff --git a/src/ssl_ocsp.c b/src/ssl_ocsp.c
index 19bb92ac36..323c32e19d 100644
--- a/src/ssl_ocsp.c
+++ b/src/ssl_ocsp.c
@@ -1388,6 +1388,11 @@ http_error:
  */
 static int ssl_ocsp_update_precheck()
 {
+
+	/* the ocsp-update is not usable in the master process */
+	if (master)
+		return ERR_NONE;
+
 	/* initialize the OCSP update dedicated httpclient */
 	httpclient_ocsp_update_px = httpclient_create_proxy("<OCSP-UPDATE>");
 	if (!httpclient_ocsp_update_px)