]> git.kaiwu.me - haproxy.git/commit
projects / haproxy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 453a013) | patch
BUG/MEDIUM: ssl/ocsp: ocsp commands are missing permission checks
authorWilliam Lallemand <wlallemand@haproxy.com>
Wed, 25 Mar 2026 13:47:10 +0000 (14:47 +0100)
committerWilliam Lallemand <wlallemand@haproxy.com>
Tue, 31 Mar 2026 10:18:26 +0000 (12:18 +0200)
commit66965a60ba08c262018b32d9b02a9942bd0664c2
tree4fa0d0c1c9e3d9553c9dfacb8946dfd8e4835f20tree | snapshot
parent453a01387be1304d9d89e597dd915cf1501da14bcommit | diff
BUG/MEDIUM: ssl/ocsp: ocsp commands are missing permission checks

'set ssl ocsp-response', 'update ssl ocsp-response', 'show ssl
ocsp-response', 'show ssl ocsp-updates' are lacking permissions checks
on admin level.

Must be backported in 3.3. This can be a breaking change for some users.

Initially reported by Cameron Brown.
src/ssl_ocsp.c diff | blob | history
haproxy upstream