From: Olivier Houchard Date: Thu, 23 Jul 2026 22:59:15 +0000 (+0200) Subject: BUG/MEDIUM: ssl: Put CO_ER_SSL_KEYUPDATE at the right place X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=1e94975db400ad66e478a7216e1f529973967a67;p=thirdparty%2Fhaproxy.git BUG/MEDIUM: ssl: Put CO_ER_SSL_KEYUPDATE at the right place FOr some reason, CO_ER_SSL_KEYUPDATE has been put in the middle of the enum containing all the different possible connection errors, but reg-tests depend on their numeric value, so it broke them. Put it at the end of the enum instead. This should be backported up to 2.8 with commit 91004114fe8816f848025fe71def4ea23e72a5f6. --- diff --git a/include/haproxy/connection-t.h b/include/haproxy/connection-t.h index 8ee67faef..075152d2f 100644 --- a/include/haproxy/connection-t.h +++ b/include/haproxy/connection-t.h @@ -270,7 +270,6 @@ enum { CO_ER_SSL_TOO_MANY, /* too many SSL connections */ CO_ER_SSL_NO_MEM, /* no more memory to allocate an SSL connection */ CO_ER_SSL_RENEG, /* forbidden client renegotiation */ - CO_ER_SSL_KEYUPDATE, /* too many TLS1.3 KeyUpdate messages */ CO_ER_SSL_CA_FAIL, /* client cert verification failed in the CA chain */ CO_ER_SSL_CRT_FAIL, /* client cert verification failed on the certificate */ CO_ER_SSL_MISMATCH, /* Server presented an SSL certificate different from the configured one */ @@ -304,6 +303,7 @@ enum { CO_ER_ENSOCK, /* ENSOCK returned to recv/send */ CO_ER_ENOBUFS, /* ENOBUFS returned to send */ CO_ER_EPIPE, /* EPIPE returned to send */ + CO_ER_SSL_KEYUPDATE, /* too many TLS1.3 KeyUpdate messages */ }; /* error return codes for accept_conn() */