tree feaa613644b26ef0bb639aad8a9f7abf71a1707b
parent 474f614975217a50385ba30e06e888613700ae31
author Remi Tricot-Le Breton <rlebreton@haproxy.com> 1673513350 +0100
committer William Lallemand <wlallemand@haproxy.org> 1673525625 +0100

MINOR: ssl: Do not wake ocsp update task if update tree empty

In the unlikely event that the ocsp update task is started but the
update tree is empty, put the update task to sleep indefinitely.
The only way this can happen is if the same certificate is loaded under
two different names while the second one has the 'ocsp-update on'
option. Since the certificate names are distinct we will have two
ckch_stores but a single certificate_ocsp because they are identified by
the OCSP_CERTID which is built out of the issuer certificate and the
certificate id (which are the same regardless of the .pem file name).