commit 273f321404210c6c49f295ee00249d8c4cae21ae
author Frédéric Lécaille <flecaille@haproxy.com> Mon Mar 13 15:52:01 2017 +0100
committer Willy Tarreau <w@1wt.eu> Mon Mar 27 14:37:01 2017 +0200
tree 539019dde0d0fab96099aecb70c81b59cfdda6d1
parent 7c8cd587c2e6873a5bde38a1ce0fc6e08e1c4330

MINOR: server: Make 'default-server' support 'verifyhost' setting.

This patch makes 'default-server' directive support 'verifyhost' setting.
Note: there was a little memory leak when several 'verifyhost' arguments were
supplied on the same 'server' line.

src/server.c

diff --git a/src/server.c b/src/server.c
index b69d1d1..5819b75 100644
--- a/src/server.c
+++ b/src/server.c
@@ -1298,6 +1298,8 @@
 #if defined(USE_OPENSSL)
 			/* SSL config. */
 			newsrv->ssl_ctx.verify = curproxy->defsrv.ssl_ctx.verify;
+			if (curproxy->defsrv.ssl_ctx.verify_host != NULL)
+				newsrv->ssl_ctx.verify_host = strdup(curproxy->defsrv.ssl_ctx.verify_host);
 #endif
 
 			cur_arg = 3;