tree ede02b2e437cef13c9c86ec26a7857b0b2925d24
parent 4608ed9511a0bc7f96e22376953d1b05de466cfd
author Emmanuel Hocdet <manu@gandi.net> 1488810884 +0100
committer Willy Tarreau <w@1wt.eu> 1488879763 +0100
encoding latin1

BUG/MEDIUM: ssl: in bind line, ssl-options after 'crt' are ignored.

Bug introduced with "removes SSL_CTX_set_ssl_version call and cleanup CTX
creation": ssl_sock_new_ctx is called before all the bind line is parsed.
The fix consists of separating the use of default_ctx as the initialization
context of the SSL connection via bind_conf->initial_ctx. Initial_ctx contains
all the necessary parameters before performing the selection of the CTX:
default_ctx is processed as others ctx without unnecessary parameters.