]> git.ipfire.org Git - thirdparty/haproxy.git/commit
BUG/MEDIUM: ssl-gencert: Unlock LRU cache if failing to generate certificate
authorChristopher Faulet <cfaulet@haproxy.com>
Fri, 22 May 2026 09:36:59 +0000 (11:36 +0200)
committerChristopher Faulet <cfaulet@haproxy.com>
Fri, 22 May 2026 09:37:00 +0000 (11:37 +0200)
commit04b9215a2ecf3a7bec33438920eb8cc1ae7eb28e
treeadc235bc8619b1a4da172c17dd402ce564b4db55
parent75f72c2eb9185fb99f8dd322734b8ddae8dc2d56
BUG/MEDIUM: ssl-gencert: Unlock LRU cache if failing to generate certificate

In ssl_sock_generate_certificate(), if the LRU cache for generated
certificates is used, the LRU tree is not unlocked on cache miss if the
certificate generation failed. So let's unlock it on error path.

The bug was introduced by the commit fbc98ebcd ("BUG/MEDIUM: ssl: fix error
path on generate-certificates"). So this patch must be backported with the
commit above, so to all stable versions.
src/ssl_gencert.c