BUG/MINOR: ssl: Clear the ckch instance when deleting a crt-list line
authorRemi Tricot-Le Breton <rlebreton@haproxy.com>
Wed, 7 Feb 2024 15:38:42 +0000 (16:38 +0100)
committerChristopher Faulet <cfaulet@haproxy.com>
Wed, 14 Feb 2024 15:08:05 +0000 (16:08 +0100)
commitf41ddcb765d962dec978ef454d700456ecb69491
tree645bb97199093be1e1407a3b7d21a28c2021cdf4
parent58c3469b719589201e31c52612985a886a5c67a7
BUG/MINOR: ssl: Clear the ckch instance when deleting a crt-list line

When deleting a crt-list line through a "del ssl crt-list" call on the
CLI, we ended up free'ing the corresponding ckch instances without fully
clearing their contents. It left some dangling references on other
objects because the attache SSL_CTX was not deleted, as well as all the
ex_data referenced by it (OCSP responses for instance).

This patch can be backported up to branch 2.4.

(cherry picked from commit 23cab33b67dd9dc76de936f47dfa23b1a8ee40e5)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>
src/ssl_crtlist.c