tree 1836a03b0751609c9620f493f2d75b45f4f7ebdb
parent be9b00f9927f59330e01954170c49bca967b00c5
author William Lallemand <wlallemand@haproxy.com> 1580899593 +0100
committer William Lallemand <wlallemand@haproxy.org> 1580913144 +0100

BUG/MINOR: ssl: clear the SSL errors on DH loading failure

In ssl_sock_load_dh_params(), if haproxy failed to apply the dhparam
with SSL_CTX_set_tmp_dh(), it will apply the DH with
SSL_CTX_set_dh_auto().

The problem is that we don't clean the OpenSSL errors when leaving this
function so it could fail to load the certificate, even if it's only a
warning.

Fixes bug #483.

Must be backported in 2.1.