RepoMirrors
/
haproxy
mirror of http://git.haproxy.org/git/haproxy.git/
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

BUG/MINOR: ssl: Duplicate ocsp update mode when dup'ing ckch 

When calling ckchs_dup (during a "set ssl cert" CLI command), if the
modified store had OCSP auto update enabled then the new certificate
would not keep the previous update mode and would not appear in the auto
update list.

This patch can be backported to 2.8.
This commit is contained in:
Remi Tricot-Le Breton 2024-02-07 16:38:40 +01:00 committed by William Lallemand
parent d7467cd495
commit 1fda0a5202
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/ssl_ckch.c
View File

@ -793,6 +793,8 @@ struct ckch_data *ssl_sock_copy_cert_key_and_chain(struct ckch_data *src,
dst->ocsp_cid = OCSP_CERTID_dup(src->ocsp_cid); dst->ocsp_cid = OCSP_CERTID_dup(src->ocsp_cid);
dst->ocsp_update_mode = src->ocsp_update_mode;
return dst; return dst;
error: error: