tree 06924821222920888a7ca024430ac37262137b37
parent debaa04f9e249f6bf75d40f38b34cfdcd7fc2047
author William Lallemand <wlallemand@haproxy.org> 1655736713 +0200
committer William Lallemand <wlallemand@haproxy.org> 1655738869 +0200

BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list

The crash occures when the same certificate which is used on both a
server line and a bind line is inserted in a crt-list over the CLI.

This is quite uncommon as using the same file for a client and a server
certificate does not make sense in a lot of environments.

This patch fixes the issue by skipping the insertion of the SNI when no
bind_conf is available in the ckch_inst.

Change the reg-test to reproduce this corner case.

Should fix issue #1748.

Must be backported as far as 2.2. (it was previously in ssl_sock.c)