RepoMirrors/haproxy
1
0
Fork 0
mirror of http://git.haproxy.org/git/haproxy.git/ synced 2024-12-17 08:54:41 +00:00
Code Issues Packages Projects Releases Wiki Activity

MINOR: conf: add warning if ssl is not enabled and a certificate is present on bind.

Browse Source
This commit is contained in:
Emeric Brun 2012-11-15 18:28:02 +01:00 committed by Willy Tarreau
parent 110ecc1acd
commit c52962f292
1 changed files with 8 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
src/cfgparse.c
View File

@ -6671,14 +6671,19 @@ out_uri_auth_compat:
curproxy->be_req_ana |= AN_REQ_PRST_RDP_COOKIE;
}
#ifdef USE_OPENSSL
/* Configure SSL for each bind line.
* Note: if configuration fails at some point, the ->ctx member
* remains NULL so that listeners can later detach.
*/
list_for_each_entry(bind_conf, &curproxy->conf.bind, by_fe) {
if (!bind_conf->is_ssl)
if (!bind_conf->is_ssl) {
if (bind_conf->default_ctx) {
Warning("Proxy '%s': A certificate was specified but SSL was not enabled on bind '%s' at [%s:%d] (use 'ssl').\n",
curproxy->id, bind_conf->arg, bind_conf->file, bind_conf->line);
}
continue;
#ifdef USE_OPENSSL
}
if (!bind_conf->default_ctx) {
Alert("Proxy '%s': no SSL certificate specified for bind '%s' at [%s:%d] (use 'crt').\n",
curproxy->id, bind_conf->arg, bind_conf->file, bind_conf->line);
@ -6694,8 +6699,8 @@ out_uri_auth_compat:
/* initialize all certificate contexts */
cfgerr += ssl_sock_prepare_all_ctx(bind_conf, curproxy);
#endif /* USE_OPENSSL */
}
#endif /* USE_OPENSSL */
/* adjust this proxy's listeners */
next_id = 1;