From: Aurelien DARRAGON <adarragon@haproxy.com>
Date: Tue, 19 Sep 2023 16:37:29 +0000 (+0200)
Subject: MINOR: cfgparse-listen: "dynamic-cookie-key" requires TCP or HTTP mode
X-Git-Tag: v2.9-dev7~14
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=0b09727a22fc2bd36bc7b3e73ca9c5a85ce2601c;p=thirdparty%2Fhaproxy.git

MINOR: cfgparse-listen: "dynamic-cookie-key" requires TCP or HTTP mode

Prevent the use of the "dynamic-cookie-key" keyword in proxy sections
when TCP or HTTP modes are not set.
---

diff --git a/src/cfgparse-listen.c b/src/cfgparse-listen.c
index f8330a6e03..0bd1939701 100644
--- a/src/cfgparse-listen.c
+++ b/src/cfgparse-listen.c
@@ -676,6 +676,13 @@ int cfg_parse_listen(const char *file, int linenum, char **args, int kwm)
 		if (warnifnotcap(curproxy, PR_CAP_BE, file, linenum, args[0], NULL))
 			err_code |= ERR_WARN;
 
+		if (curproxy->mode != PR_MODE_TCP && curproxy->mode != PR_MODE_HTTP) {
+			ha_alert("parsing [%s:%d] : '%s' requires TCP or HTTP mode.\n",
+				 file, linenum, args[0]);
+			err_code |= ERR_ALERT | ERR_FATAL;
+			goto out;
+		}
+
 		if (*(args[1]) == 0) {
 			ha_alert("parsing [%s:%d] : '%s' expects <secret_key> as argument.\n",
 				 file, linenum, args[0]);