tree 8d8a6b4c6835b7c5b33c5932b9deefdc859ff12c
parent 5e10e44bce78677e2d8ccfc5e8be33fb2c6a6011
author Emmanuel Hocdet <ehocdet@club.fr> 1603716930 +0100
committer William Lallemand <wlallemand@haproxy.org> 1603787931 +0100

BUG/MEDIUM: ssl: OCSP must work with BoringSSL

It's a regression from b3201a3e "BUG/MINOR: disable dynamic OCSP load
with BoringSSL". The origin bug is link to 76b4a12 "BUG/MEDIUM: ssl:
memory leak of ocsp data at SSL_CTX_free()": ssl_sock_free_ocsp()
shoud be in #ifndef OPENSSL_IS_BORINGSSL.
To avoid long #ifdef for small code, the BoringSSL part for ocsp load
is isolated in a simple #ifdef.

This must be backported in 2.2 and 2.1