tree 98ab5d734ec9a7ebf1ecb3cc11089d8de31c480e
parent bdd84c5ffb66a772a1713668889f25ce9d3a29d0
author Remi Tricot-Le Breton <rlebreton@haproxy.com> 1673513349 +0100
committer William Lallemand <wlallemand@haproxy.org> 1673525625 +0100

MINOR: ssl: Treat ocsp-update inconsistencies as fatal errors

If incompatibilities are found in a certificate's ocsp-update mode we
raised a single alert that will be considered fatal from here on. This
is changed because in case of incompatibilities we will end up with an
undefined behaviour. The ocsp response might or might not be updated
depending on the order in which the multiple ocsp-update options are
taken into account.