tree 9518a8c7b2e897ebf22246f7c1298d8ecf63c00b
parent b90d2cbc4248a760493e3ce8a68ace5cdca8d97e
author Emmanuel Hocdet <manu@gandi.net> 1582037799 +0100
committer William Lallemand <wlallemand@haproxy.org> 1582719119 +0100

MINOR: ssl: resolve ocsp_issuer later

The goal is to use the ckch to store data from PEM files or <payload> and
only for that. This patch adresses the ckch->ocsp_issuer case. It finds
issuers chain if no chain is present in the ckch in ssl_sock_put_ckch_into_ctx(),
filling the ocsp_issuer from the chain must be done after.
It changes the way '.issuer' is managed: it tries to load '.issuer' in
ckch->ocsp_issuer first and then look for the issuer in the chain later
(in ssl_sock_load_ocsp() ). "ssl-load-extra-files" without the "issuer"
parameter can negate extra '.issuer' file check.