tree 087484e9853eaae8f26ae3e0b8903baa6bc25f6a
parent 8d49253588e89108fe9dac5e3b231fcd85784b6c
author Remi Tricot-Le Breton <rlebreton@haproxy.com> 1671531062 +0100
committer William Lallemand <wlallemand@haproxy.org> 1671618067 +0100

MINOR: ssl: Add a lock to the OCSP response tree

The tree that contains OCSP responses is never locked despite being used
at runtime for OCSP stapling as well as the CLI through "set ssl cert"
and "set ssl ocsp-response" commands.
Everything works though because the certificate_ocsp structure is
refcounted and the tree's entries are cleaned up when SSL_CTXs are
destroyed (thanks to an ex_data entry in which the certificate_ocsp
pointer is stored).
This new lock will come to use when the OCSP auto update mechanism is
fully implemented because this new feature will be based on another tree
that stores the same certificate_ocsp members and updates their contents
periodically.