tree be6b219cc73805bfc7aef393d3c979a12da1246f
parent bd6ec1bf845736d7447669077b4f3f2c4bd48011
author Christopher Faulet <cfaulet@haproxy.com> 1658855031 +0200
committer Christopher Faulet <cfaulet@haproxy.com> 1659513398 +0200

MINOR: peers: Add a warning about incompatible SSL config for the local peer

In peers section, it is possible to enable SSL for the local peer. In this
case, the bind line and the server line should both be configured. A
"default-server" directive may also be used to configure the SSL on the
server side. However there is no test to be sure the SSL is enabled on both
sides. It is an problem because the local resync performed during a reload
will be impossible and it is probably not the expected behavior.

So, it is now checked during the configuration validation. A warning message
is displayed if the SSL is not properly configured for the local peer.

This patch is related to issue #1799. It should probably be backported to 2.6.