]> git.kaiwu.me - haproxy.git/commit
projects / haproxy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 2c86cbf) | patch
BUG/MINOR: ssl: correctly initialize ssl ctx for invalid certificates
authorEmeric Brun <ebrun@haproxy.com>
Thu, 30 Oct 2014 18:25:24 +0000 (19:25 +0100)
committerWilly Tarreau <w@1wt.eu>
Thu, 30 Oct 2014 19:02:33 +0000 (20:02 +0100)
commit0bed9945eec049f12638ac3ef82e2084ac4da1c0
tree59d4b125620699fa9dec69aae0ce3ef6d21dadcbtree | snapshot
parent2c86cbf7539af2008d61780b14f37ea8c46c2192commit | diff
BUG/MINOR: ssl: correctly initialize ssl ctx for invalid certificates

Bug reported by John Leach: no-sslv3 does not work using some certificates.

It appears that ssl ctx is not updated with configured options if the
CommonName of the certificate's subject is not found.

It applies only on the first cerificate of a configured bind line.

There is no security impact, because only invalid nameless certficates
are concerned.

This fix must be backported to 1.5
Makefile diff | blob | history
src/ssl_sock.c diff | blob | history
haproxy upstream