upstream/haproxy - Forgejo: Beyond coding. We Forge.

upstream/haproxy

mirror of https://github.com/haproxy/haproxy.git synced 2026-04-27 00:57:03 -04:00

1 line

10 B

Text

Raw Normal View History

BUG/MINOR: ssl/cli: can't find ".crt" files when replacing a certificate Bug was introduced by commit 26654 ("MINOR: ssl: add "crt" in the cert_exts array"). When looking for a .crt directly in the cert_exts array, the ssl_sock_load_pem_into_ckch() function will be called with a argument which does not have its ".crt" extensions anymore. If "ssl-load-extra-del-ext" is used this is not a problem since we try to add the ".crt" when doing the lookup in the tree. However when using directly a ".crt" without this option it will failed looking for the file in the tree. The fix removes the "crt" entry from the array since it does not seem to be really useful without a rework of all the lookups. Should fix issue #2265 Must be backported as far as 2.6.

2023-08-28 11:12:14 -04:00

common.pem