| commit | 3d6ebec8d3a957e191b70b67fe9682cb79c107c4 | [log] [tgz] |
|---|---|---|
| author | William Lallemand <wlallemand@haproxy.org> | Mon Feb 01 15:31:00 2021 +0100 |
| committer | Willy Tarreau <w@1wt.eu> | Thu Feb 04 17:32:44 2021 +0100 |
| tree | e851db6ca97554886d115ed1b600d9d02c40b68e | |
| parent | 1945529933f00a37383990035d7257020efef520 [diff] |
BUG/MEDIUM: ssl/cli: abort ssl cert is freeing the old store The "abort ssl cert" command is buggy and removes the current ckch store, and instances, leading to SNI removal. It must only removes the new one. This patch also adds a check in set_ssl_cert.vtc and set_ssl_server_cert.vtc. Must be backported as far as 2.2. (cherry picked from commit 8695ce0bae21238eba660438c819797a245be71e) [wt: dropped reg-tests/ssl/set_ssl_server_cert.vtc] Signed-off-by: Willy Tarreau <w@1wt.eu>