tree b75586ea0fb8b6d5f3af5b9fe894435ddb77a7a0
parent 1cf90c000b37aa64c51e42f7d7a1dccace8340a0
author William Lallemand <wlallemand@haproxy.com> 1570139193 +0200
committer Christopher Faulet <cfaulet@haproxy.com> 1571214074 +0200

BUG/MINOR: ssl: abort on sni allocation failure

The ssl_sock_add_cert_sni() function never return an error when a
sni_ctx allocation fail. It silently ignores the problem and continues
to try to allocate other snis.

It is unlikely that a sni allocation will succeed after one failure and
start a configuration without all the snis. But to avoid any problem we
return a -1 upon an sni allocation error and stop the configuration
parsing.

This patch must be backported in every version supporting the crt-list
sni filters. (as far as 1.5)

(cherry picked from commit fe49bb3d0c046628d67d57da15a7034cc2230432)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>
[Cf: slightly adapted for 2.0]