projects / haproxy-2.5.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d1f250f) | patch
MEDIUM: ssl: fatal error with bundle + openssl < 1.1.1
authorWilliam Lallemand <wlallemand@haproxy.org>
Fri, 4 Dec 2020 14:45:02 +0000 (15:45 +0100)
committerWilliam Lallemand <wlallemand@haproxy.org>
Fri, 4 Dec 2020 14:45:02 +0000 (15:45 +0100)
commitb7fdfdfd92b9fdc6a3f742643760d6415fdc6f6b
tree44b44e2f2db353352af5755147ca9981a167bdb9tree | snapshot
parentd1f250f87b8850f24456e62140509e612f8b3415commit | diff
MEDIUM: ssl: fatal error with bundle + openssl < 1.1.1

Since HAProxy 2.3, OpenSSL 1.1.1 is a requirement for using a
multi-certificate bundle in the configuration. This patch emits a fatal
error when HAProxy tries to load a bundle with an older version of
HAProxy.

This problem was encountered by an user in issue #990.

This must be backported in 2.3.
src/ssl_crtlist.c diff | blob | history
src/ssl_sock.c diff | blob | history
haproxy-2.5 public tree. Stable production code.