tree 0c200d62938c40e659266237e0e4fda98e95a933
parent 41ca930e58bba05eb50ac5e265cb0ef8f4533000
author William Lallemand <wlallemand@haproxy.com> 1586351811 +0200
committer William Lallemand <wlallemand@haproxy.org> 1586352550 +0200

BUG/MINOR: ssl/cli: memory leak in 'set ssl cert'

When deleting the previous SNI entries with 'set ssl cert', the old
SSL_CTX' were not free'd, which probably prevent the completion of the
free of the X509 in the old ckch_store, because of the refcounts in the
SSL library.

This bug was introduced by 150bfa8 ("MEDIUM: cli/ssl: handle the
creation of SSL_CTX in an IO handler").

Must be backported to 2.1.