| commit | 0bed9945eec049f12638ac3ef82e2084ac4da1c0 | [log] [tgz] |
|---|---|---|
| author | Emeric Brun <ebrun@haproxy.com> | Thu Oct 30 19:25:24 2014 +0100 |
| committer | Willy Tarreau <w@1wt.eu> | Thu Oct 30 20:02:33 2014 +0100 |
| tree | 59d4b125620699fa9dec69aae0ce3ef6d21dadcb | |
| parent | 2c86cbf7539af2008d61780b14f37ea8c46c2192 [diff] |
BUG/MINOR: ssl: correctly initialize ssl ctx for invalid certificates Bug reported by John Leach: no-sslv3 does not work using some certificates. It appears that ssl ctx is not updated with configured options if the CommonName of the certificate's subject is not found. It applies only on the first cerificate of a configured bind line. There is no security impact, because only invalid nameless certficates are concerned. This fix must be backported to 1.5