RepoMirrors/haproxy
1
0
Fork 0
mirror of http://git.haproxy.org/git/haproxy.git/ synced 2024-12-18 17:34:45 +00:00
Code Issues Packages Projects Releases Wiki Activity
84ea8dcbc4
haproxy/reg-tests/server
History
Christopher Faulet 4ab2679689 BUG/MINOR: server: Don't rely on last default-server to init server SSL context 
During post-parsing stage, the SSL context of a server is initialized if SSL
is configured on the server or its default-server. It is required to be able
to enable SSL at runtime. However a regression was introduced, because the
last parsed default-server is used. But it is not necessarily the
default-server line used to configure the server. This may lead to
erroneously initialize the SSL context for a server without SSL parameter or
the skip it while it should be done.

The problem is the default-server used to configure a server is not saved
during configuration parsing. So, the information is lost during the
post-parsing. To fix the bug, the SRV_F_DEFSRV_USE_SSL flag is
introduced. It is used to know when a server was initialized with a
default-server using SSL.

For the record, the commit f63704488e ("MEDIUM: cli/ssl: configure ssl on
server at runtime") has introduced the bug.

This patch must be backported as far as 2.4.
2021-12-01 11:47:08 +01:00
..
cli_add_check_server.vtc REGTESTS: server: fix agent-check syntax and expectation 2021-08-20 11:28:15 +02:00
cli_add_server.vtc REGTESTS: extend the default I/O timeouts and make them overridable 2021-11-18 17:57:11 +01:00
cli_add_ssl_server.vtc REGTESTS: extend the default I/O timeouts and make them overridable 2021-11-18 17:57:11 +01:00
cli_add_track_server.vtc REGTESTS: test track support for dynamic servers 2021-07-16 10:22:58 +02:00
cli_delete_dynamic_server.vtc REGTESTS: extend the default I/O timeouts and make them overridable 2021-11-18 17:57:11 +01:00
cli_delete_server_lua.vtc REGTESTS: extend the default I/O timeouts and make them overridable 2021-11-18 17:57:11 +01:00
cli_delete_server.vtc REGTESTS: extend the default I/O timeouts and make them overridable 2021-11-18 17:57:11 +01:00
cli_set_fdqn.vtc REGTESTS: extend the default I/O timeouts and make them overridable 2021-11-18 17:57:11 +01:00
cli_set_ssl.vtc BUG/MINOR: server: Don't rely on last default-server to init server SSL context 2021-12-01 11:47:08 +01:00
common.pem REGTESTS: server: test ssl support for dynamic servers 2021-06-18 16:49:58 +02:00
get_srv_stats.lua MEDIUM: server: allow to remove servers at runtime except non purgeable 2021-08-25 15:53:54 +02:00