projects / haproxy-3.0.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 019f9b1) | patch
BUG/MINOR: ssl: OCSP_single_get0_status can return -1
authorEmmanuel Hocdet <manu@gandi.net>
Tue, 24 Oct 2017 12:57:16 +0000 (14:57 +0200)
committerWilly Tarreau <w@1wt.eu>
Tue, 24 Oct 2017 18:02:46 +0000 (20:02 +0200)
commitef607050754981f4ed9280e96e94f77ce471fd68
tree9b4538be99fde895870fda2ee6172534c450780ctree | snapshot
parent019f9b10ef4e99d2ddd017f75d5e2050cf593678commit | diff
BUG/MINOR: ssl: OCSP_single_get0_status can return -1

Commit 872085ce "BUG/MINOR: ssl: ocsp response with 'revoked' status is correct"
introduce a regression. OCSP_single_get0_status can return -1 and haproxy must
generate an error in this case.
Thanks to Sander Hoentjen who have spotted the regression.

This patch should be backported in 1.7, 1.6 and 1.5 if the patch above is
backported.
src/ssl_sock.c diff | blob | history
haproxy-3.0 public tree. Stable production code.