commit ed17f47c71af521a28e296f04bfcbc936e4cfba3
author Emmanuel Hocdet <manu@gandi.net> Thu Oct 24 18:28:33 2019 +0200
committer William Lallemand <wlallemand@haproxy.org> Thu Oct 31 16:53:28 2019 +0100
tree c2535a2a555b94b5595c1e026ebb77b7cf5ed26c
parent f6ac4fa74550d725d8a53e74593c4a604fa8bf00

BUG/MINOR: ssl: ckch->chain must be initialized

It's a regression from 96a9c973 "MINOR: ssl: split
ssl_sock_load_crt_file_into_ckch()".

src/ssl_sock.c

diff --git a/src/ssl_sock.c b/src/ssl_sock.c
index 207b451..c6878e4 100644
--- a/src/ssl_sock.c
+++ b/src/ssl_sock.c
@@ -3196,6 +3196,11 @@
 			goto end;
 		}
 
+	/* no chain */
+	if (ckch->chain == NULL) {
+		ckch->chain = sk_X509_new_null();
+	}
+
 	ret = ERR_get_error();
 	if (ret && (ERR_GET_LIB(ret) != ERR_LIB_PEM && ERR_GET_REASON(ret) != PEM_R_NO_START_LINE)) {
 		memprintf(err, "%sunable to load certificate chain from file '%s'.\n",