From: William Lallemand <wlallemand@haproxy.com>
Date: Tue, 27 Jan 2026 15:23:51 +0000 (+0100)
Subject: BUG/MINOR: ssl: fix error message of tune.ssl.certificate-compression
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=bbab0ac4d04ad00fc9af0d7ab0c1df90c8bd2c92;p=thirdparty%2Fhaproxy.git

BUG/MINOR: ssl: fix error message of tune.ssl.certificate-compression

tune.ssl-certificate-compression expects 'auto' but not 'on'.

Could be backported if the previous patch is backported.
---

diff --git a/src/cfgparse-ssl.c b/src/cfgparse-ssl.c
index 3fa93966e..b6ab1559e 100644
--- a/src/cfgparse-ssl.c
+++ b/src/cfgparse-ssl.c
@@ -510,7 +510,7 @@ static int ssl_parse_certificate_compression(char **args, int section_type, stru
 	else if (strcmp(args[1], "off") == 0)
 		global_ssl.certificate_compression = 0;
 	else {
-		memprintf(err, "'%s' expects either 'on' or 'off' but got '%s'.", args[0], args[1]); return -1;
+		memprintf(err, "'%s' expects either 'auto' or 'off' but got '%s'.", args[0], args[1]); return -1;
 	}
 
 	return 0;