MINOR: ssl: Do not wake ocsp update task if update tree empty
In the unlikely event that the ocsp update task is started but the
update tree is empty, put the update task to sleep indefinitely.
The only way this can happen is if the same certificate is loaded under
two different names while the second one has the 'ocsp-update on'
option. Since the certificate names are distinct we will have two
ckch_stores but a single certificate_ocsp because they are identified by
the OCSP_CERTID which is built out of the issuer certificate and the
certificate id (which are the same regardless of the .pem file name).
diff --git a/src/ssl_ocsp.c b/src/ssl_ocsp.c
index 53afaae..8f0e5ff 100644
--- a/src/ssl_ocsp.c
+++ b/src/ssl_ocsp.c
@@ -1040,7 +1040,7 @@
eb = eb64_first(&ocsp_update_tree);
if (!eb) {
HA_SPIN_UNLOCK(OCSP_LOCK, &ocsp_tree_lock);
- goto leave;
+ goto wait;
}
if (eb->key > now.tv_sec) {