tree efa9ad4da32b880e197a4f8723a50822cccf90a7
parent 33a6f33935645317955ff82582d4e4109adca2be
author Christopher Faulet <cfaulet@haproxy.com> 1722005235 +0200
committer Willy Tarreau <w@1wt.eu> 1722257735 +0200
encoding latin1

BUG/MEDIUM: jwt: Clear SSL error queue on error when checking the signature

When the signature included in a JWT is verified, if an error occurred, one
or more SSL errors are queued and never cleared. These errors may be then
caught by the SSL stack and a fatal SSL error may be erroneously reported
during a SSL received or send.

So we must take care to clear the SSL error queue when the signature
verification failed.

This patch should fix issue #2643. It must be backported as far as 2.6.

(cherry picked from commit 46b1fec0e9a6afe2c12fd4dff7c8a0d788aa6dd4)
Signed-off-by: Willy Tarreau <w@1wt.eu>
(cherry picked from commit 22ef1a993a16f22085353a5e585d259fd518ac4e)
Signed-off-by: Willy Tarreau <w@1wt.eu>
(cherry picked from commit 036adea78f623ae7ee43bf98b8a17040b8a4ce5a)
Signed-off-by: Willy Tarreau <w@1wt.eu>