BUG/MINOR: ssl: fix crt-list neg filter for openssl < 1.1.1
Certificate selection in client_hello_cb (openssl >= 1.1.1) correctly
handles crt-list neg filter. Certificate selection for openssl < 1.1.1
has not been touched for a while: crt-list neg filter is not the same
than his counterpart and is wrong. Fix it to mimic the same behavior
has is counterpart.
It should be backported as far as 1.6.
(cherry picked from commit c5fdf0f3dcf91435c943742eaf338167e761dede)
[wt: adjusted context: tree was not locked in 2.0]
Signed-off-by: Willy Tarreau <w@1wt.eu>
1 file changed