tree 08a2be80ad17596f93a3fdf225359fba259fd885
parent 2fb47afb1c1b908b805cb089fa2000afcabf872e
author Remi Tricot-Le Breton <rlebreton@haproxy.com> 1673262161 +0100
committer William Lallemand <wlallemand@haproxy.org> 1673275421 +0100

BUG/MINOR: ssl: Fix crash in 'update ssl ocsp-response' CLI command

This CLI command crashed when called for a certificate which did not
have an OCSP response during startup because it assumed that the
ocsp_issuer pointer of the ckch_data object would be valid. It was only
true for already known OCSP responses though.
The ocsp issuer certificate is now taken either from the ocsp_issuer
pointer or looked for in the certificate chain. This is the same logic
as the one in ssl_sock_load_ocsp.

This patch does not need to be backported.