tree 7304a9c927c75fbd5aeeae671b5515110a3b19c4
parent 5622c45df4019bf6305a0aebe6b306c667f0391c
author William Lallemand <wlallemand@haproxy.com> 1599758007 +0200
committer William Lallemand <wlallemand@haproxy.org> 1600266506 +0200

MEDIUM: ssl: emulates the multi-cert bundles in the crtlist

The multi-certificates bundle was the common way of offering multiple
certificates of different types (ecdsa and rsa) for a same SSL_CTX.
This was implemented with OpenSSL 1.0.2 before the client_hello callback
was available.

Now that all versions which does not support this callback are
depracated (< 1.1.0), we can safely removes the support for the bundle
which was inconvenient and complexify too much the code.

This patch emulates the bundle loading by looking for the bundle files
when the specified file in the configuration does not exist. It then
creates new entries in the crtlist, so they will appear as new line if
they are dumped from the CLI.