BUG/MINOR: ssl: fix SSL_CTX_set1_chain compatibility for openssl < 1.0.2
authorEmmanuel Hocdet <manu@gandi.net>
Thu, 24 Oct 2019 16:33:10 +0000 (18:33 +0200)
committerChristopher Faulet <cfaulet@haproxy.com>
Mon, 2 Dec 2019 09:43:26 +0000 (10:43 +0100)
commitdfb3796b7cd8f1840185f56df85fedfeafdbc8ee
tree14f1f13b5df8ec38b33019341fd77c5f769e346f
parentef7f024cd744232cfd4c4a023803b0d8fa0ff9f9
BUG/MINOR: ssl: fix SSL_CTX_set1_chain compatibility for openssl < 1.0.2

Commit 1c65fdd5 "MINOR: ssl: add extra chain compatibility" really implement
SSL_CTX_set0_chain. Since ckch can be used to init more than one ctx with
openssl < 1.0.2 (commit 89f58073 for X509_chain_up_ref compatibility),
SSL_CTX_set1_chain compatibility is required.

This patch must be backported to 2.1.

(cherry picked from commit 140b64fb562fb08cecf93ca6bec99822f7d556fb)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>
src/ssl_sock.c