BUG/MEDIUM: ssl: Put CO_ER_SSL_KEYUPDATE at the right place

FOr some reason, CO_ER_SSL_KEYUPDATE has been put in the middle of the
enum containing all the different possible connection errors, but
reg-tests depend on their numeric value, so it broke them. Put it at the
end of the enum instead.

This should be backported up to 2.8 with commit
91004114fe8816f848025fe71def4ea23e72a5f6.

diff --git a/include/haproxy/connection-t.h b/include/haproxy/connection-t.h
index 8ee67faef559bda47ecb2bb60a26a537964600e2..075152d2fbe8091db68e0d6fd392a5cac05c63fe 100644 (file)
--- a/include/haproxy/connection-t.h
+++ b/include/haproxy/connection-t.h
@@ -270,7 +270,6 @@ enum {
        CO_ER_SSL_TOO_MANY,     /* too many SSL connections */
        CO_ER_SSL_NO_MEM,       /* no more memory to allocate an SSL connection */
        CO_ER_SSL_RENEG,        /* forbidden client renegotiation */
-       CO_ER_SSL_KEYUPDATE,    /* too many TLS1.3 KeyUpdate messages */
        CO_ER_SSL_CA_FAIL,      /* client cert verification failed in the CA chain */
        CO_ER_SSL_CRT_FAIL,     /* client cert verification failed on the certificate */
        CO_ER_SSL_MISMATCH,     /* Server presented an SSL certificate different from the configured one */
@@ -304,6 +303,7 @@ enum {
        CO_ER_ENSOCK,            /* ENSOCK returned to recv/send */
        CO_ER_ENOBUFS,           /* ENOBUFS returned to send */
        CO_ER_EPIPE,             /* EPIPE returned to send */
+       CO_ER_SSL_KEYUPDATE,     /* too many TLS1.3 KeyUpdate messages */
 };
 
 /* error return codes for accept_conn() */