tree f586a00d43c32ab7acb75b6c4fa6059211e75bbe
parent c3775d28f9be97696e4ded94bf647c0d34cf9f54
author Emmanuel Hocdet <manu@gandi.net> 1572878986 +0100
committer William Lallemand <wlallemand@haproxy.org> 1574085507 +0100

BUG/MINOR: ssl: fix crt-list neg filter for openssl < 1.1.1

Certificate selection in client_hello_cb (openssl >= 1.1.1) correctly
handles crt-list neg filter. Certificate selection for openssl < 1.1.1
has not been touched for a while: crt-list neg filter is not the same
than his counterpart and is wrong. Fix it to mimic the same behavior
has is counterpart.

It should be backported as far as 1.6.