From: Christopher Faulet <cfaulet@haproxy.com>
Date: Thu, 26 Jan 2023 07:03:39 +0000 (+0100)
Subject: MINOR: ssl-ckch: Stop to test CF_WRITE_ERROR to commit CA/CRL file
X-Git-Tag: v2.8-dev4~7
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=11fddb96554a5db2a1a7bfb48f49a03a66b396f3;p=thirdparty%2Fhaproxy.git

MINOR: ssl-ckch: Stop to test CF_WRITE_ERROR to commit CA/CRL file

This change was performed on all applet I/O handlers but one was missed. In
the CLI I/O handler used to commit a CA/CRL file, we can remove the test on
CF_WRITE_ERROR because there is already a test on CF_SHUTW.
---

diff --git a/src/ssl_ckch.c b/src/ssl_ckch.c
index 7d07cad71b..6342787a95 100644
--- a/src/ssl_ckch.c
+++ b/src/ssl_ckch.c
@@ -2824,7 +2824,7 @@ static int cli_io_handler_commit_cafile_crlfile(struct appctx *appctx)
 	struct ckch_inst_link *ckchi_link;
 	char *path;
 
-	if (unlikely(sc_ic(sc)->flags & (CF_WRITE_ERROR|CF_SHUTW)))
+	if (unlikely(sc_ic(sc)->flags & CF_SHUTW))
 		goto end;
 
 	/* The ctx was already validated by the ca-file/crl-file parsing