Christopher Faulet f61f33a1b2 BUG/MINOR: checks: Respect the no-check-ssl option ... This options is used to force a non-SSL connection to check a SSL server or to invert a check-ssl option inherited from the default section. The use_ssl field in the check structure is used to know if a SSL connection must be used (use_ssl=1) or not (use_ssl=0). The server configuration is used by default. The problem is that we cannot distinguish the default case (no specific SSL check option) and the case of an explicit non-SSL check. In both, use_ssl is set to 0. So the server configuration is always used. For a SSL server, when no-check-ssl option is set, the check is still performed using a SSL configuration. To fix the bug, instead of a boolean value (0=TCP, 1=SSL), we use a ternary value : * 0 = use server config * 1 = force SSL * -1 = force non-SSL The same is done for the server parameter. It is not really necessary for now. But it is a good way to know is the server no-ssl option is set. In addition, the PR_O_TCPCHK_SSL proxy option is no longer used to set use_ssl to 1 for a check. Instead the flag is directly tested to prepare or destroy the server SSL context. This patch should be backported as far as 1.8.		2020-04-27 09:39:37 +02:00
..
common	MINOR: mini-clist: Add functions to iterate backward on a list	2020-04-27 09:39:37 +02:00
import	BUILD: threads/plock: fix a build issue on Clang without optimization	2017-11-20 21:06:35 +01:00
proto	CLEANUP: assorted typo fixes in the code and comments	2020-04-17 09:37:36 +02:00
types	BUG/MINOR: checks: Respect the no-check-ssl option	2020-04-27 09:39:37 +02:00