tree 9aee26bb5c850bc2c8322abdfe5795e97e8ea54a
parent 42a3e202504a74c2a6ff7b337726cc42ffa57592
author Emeric Brun <ebrun@haproxy.com> 1414693524 +0100
committer Willy Tarreau <w@1wt.eu> 1414695814 +0100
encoding latin1

BUG/MINOR: ssl: correctly initialize ssl ctx for invalid certificates

Bug reported by John Leach: no-sslv3 does not work using some certificates.

It appears that ssl ctx is not updated with configured options if the
CommonName of the certificate's subject is not found.

It applies only on the first cerificate of a configured bind line.

There is no security impact, because only invalid nameless certficates
are concerned.

This fix must be backported to 1.5
(cherry picked from commit 0bed9945eec049f12638ac3ef82e2084ac4da1c0)