]> git.ipfire.org Git - thirdparty/haproxy.git/commit
BUG/MINOR: ssl: correctly initialize ssl ctx for invalid certificates
authorEmeric Brun <ebrun@haproxy.com>
Thu, 30 Oct 2014 18:25:24 +0000 (19:25 +0100)
committerWilly Tarreau <w@1wt.eu>
Thu, 30 Oct 2014 19:02:33 +0000 (20:02 +0100)
commit0bed9945eec049f12638ac3ef82e2084ac4da1c0
tree59d4b125620699fa9dec69aae0ce3ef6d21dadcb
parent2c86cbf7539af2008d61780b14f37ea8c46c2192
BUG/MINOR: ssl: correctly initialize ssl ctx for invalid certificates

Bug reported by John Leach: no-sslv3 does not work using some certificates.

It appears that ssl ctx is not updated with configured options if the
CommonName of the certificate's subject is not found.

It applies only on the first cerificate of a configured bind line.

There is no security impact, because only invalid nameless certficates
are concerned.

This fix must be backported to 1.5
Makefile
src/ssl_sock.c