diff --git a/src/ssl_crtlist.c b/src/ssl_crtlist.c index ba0979997..5002c0b57 100644 --- a/src/ssl_crtlist.c +++ b/src/ssl_crtlist.c @@ -602,6 +602,13 @@ int crtlist_parse_file(char *file, struct bind_conf *bind_conf, struct proxy *cu entry_dup = NULL; /* the entry was used, we need a new one next round */ } +#if HA_OPENSSL_VERSION_NUMBER < 0x10101000L + if (found) { + memprintf(err, "%sCan't load '%s'. Loading a multi certificates bundle requires OpenSSL >= 1.1.1\n", + err && *err ? *err : "", crt_path); + cfgerr |= ERR_ALERT | ERR_FATAL; + } +#endif } if (!found) { memprintf(err, "%sunable to stat SSL certificate from file '%s' : %s.\n", diff --git a/src/ssl_sock.c b/src/ssl_sock.c index b7d3b92b4..e1de595fd 100644 --- a/src/ssl_sock.c +++ b/src/ssl_sock.c @@ -3543,7 +3543,13 @@ int ssl_sock_load_cert(char *path, struct bind_conf *bind_conf, char **err) } } } - +#if HA_OPENSSL_VERSION_NUMBER < 0x10101000L + if (found) { + memprintf(err, "%sCan't load '%s'. Loading a multi certificates bundle requires OpenSSL >= 1.1.1\n", + err && *err ? *err : "", path); + cfgerr |= ERR_ALERT | ERR_FATAL; + } +#endif } } if (!found) {