tree ceb69fbf871deadeee7bba6e278f4c4ba586b7f4
parent 222a7c6ae0362cd22c6c8917368ff9801d2f880a
author William Lallemand <wlallemand@haproxy.com> 1570139193 +0200
committer William Lallemand <wlallemand@haproxy.org> 1570807922 +0200

BUG/MINOR: ssl: abort on sni allocation failure

The ssl_sock_add_cert_sni() function never return an error when a
sni_ctx allocation fail. It silently ignores the problem and continues
to try to allocate other snis.

It is unlikely that a sni allocation will succeed after one failure and
start a configuration without all the snis. But to avoid any problem we
return a -1 upon an sni allocation error and stop the configuration
parsing.

This patch must be backported in every version supporting the crt-list
sni filters. (as far as 1.5)