| commit | 474f614975217a50385ba30e06e888613700ae31 | [log] [tgz] |
|---|---|---|
| author | Remi Tricot-Le Breton <rlebreton@haproxy.com> | Thu Jan 12 09:49:09 2023 +0100 |
| committer | William Lallemand <wlallemand@haproxy.org> | Thu Jan 12 13:13:45 2023 +0100 |
| tree | 98ab5d734ec9a7ebf1ecb3cc11089d8de31c480e | |
| parent | bdd84c5ffb66a772a1713668889f25ce9d3a29d0 [diff] |
MINOR: ssl: Treat ocsp-update inconsistencies as fatal errors If incompatibilities are found in a certificate's ocsp-update mode we raised a single alert that will be considered fatal from here on. This is changed because in case of incompatibilities we will end up with an undefined behaviour. The ocsp response might or might not be updated depending on the order in which the multiple ocsp-update options are taken into account.