tree 59d4b125620699fa9dec69aae0ce3ef6d21dadcb
parent 2c86cbf7539af2008d61780b14f37ea8c46c2192
author Emeric Brun <ebrun@haproxy.com> 1414693524 +0100
committer Willy Tarreau <w@1wt.eu> 1414695753 +0100
encoding latin1

BUG/MINOR: ssl: correctly initialize ssl ctx for invalid certificates

Bug reported by John Leach: no-sslv3 does not work using some certificates.

It appears that ssl ctx is not updated with configured options if the
CommonName of the certificate's subject is not found.

It applies only on the first cerificate of a configured bind line.

There is no security impact, because only invalid nameless certficates
are concerned.

This fix must be backported to 1.5