]> git.ipfire.org Git - thirdparty/haproxy.git/commit
projects / thirdparty / haproxy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: a538452) | patch
MEDIUM: ssl: be stricter about chain error
authorWilliam Lallemand <wlallemand@haproxy.org>
Tue, 25 Oct 2022 13:55:13 +0000 (15:55 +0200)
committerWilliam Lallemand <wlallemand@haproxy.org>
Tue, 25 Oct 2022 13:55:13 +0000 (15:55 +0200)
commit432cd1a7f824fb863ab5252d38e1c931044bd93e
treeadda754ff0d8fda3302e349a0c34fd2df6c0860atree | snapshot
parenta538452fa4085fe71c313f3aa9a24f483cf64c9ccommit | diff
MEDIUM: ssl: be stricter about chain error

The error check on certificate chain was ignoring all decoding error,
silently ignoring some errors.

This patch fixes the issue by being stricter on errors when reading the
chain, this is a change of behavior, it could break existing setup that
has a wrong chain.
src/ssl_ckch.c diff | blob | blame | history
Mirror of https://github.com/haproxy/haproxy.git