tree 8481b1555211c749df1ec41a12ec30448dcadb4b
parent de7dc88c517e22d3ae02ce8a8a23046ab2c62238
author Janusz Dziemidowicz <rraptorr@nails.eu.org> 1488988781 +0100
committer Willy Tarreau <w@1wt.eu> 1489168402 +0100
encoding latin1

BUG/MEDIUM: ssl: Clear OpenSSL error stack after trying to parse OCSP file

Invalid OCSP file (for example empty one that can be used to enable
OCSP response to be set dynamically later) causes errors that are
placed on OpenSSL error stack. Those errors are not cleared so
anything that checks this stack later will fail.

Following configuration:
  bind :443 ssl crt crt1.pem crt crt2.pem

With following files:
  crt1.pem
  crt1.pem.ocsp - empty one
  crt2.pem.rsa
  crt2.pem.ecdsa

Will fail to load.

This patch should be backported to 1.7.