mirrors/haproxy
1
0
Fork 0
mirror of https://git.haproxy.org/git/haproxy.git/ synced 2025-08-09 00:27:08 +02:00
Code Issues Projects Releases Wiki Activity

CLEANUP: ssl: "bundle" is not an OpenSSL wording

Browse Source 
There is a confusion between the HAProxy bundle and OpenSSL. OpenSSL
does not have "bundles" but multiple certificates in the same store.

Fix a commentary in the crt-list code.
This commit is contained in:
William Lallemand 2020-10-02 18:08:18 +02:00 committed by William Lallemand
parent fac0f645df
commit 51f784bcf9
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
src/ssl_crtlist.c
View File

@ -552,11 +552,11 @@ int crtlist_parse_file(char *file, struct bind_conf *bind_conf, struct proxy *cu
} else { } else {
/* If we didn't find the file, this could be a /* If we didn't find the file, this could be a
bundle, since 2.3 we don't support OpenSSL bundle, since 2.3 we don't support multiple
multi-certificate bundle, so we emulate it by certificate in the same OpenSSL store, so we
loading each file separately. To do so we need emulate it by loading each file separately. To
to duplicate the entry in the crt-list because do so we need to duplicate the entry in the
it becomes independent */ crt-list because it becomes independent */
char fp[MAXPATHLEN+1] = {0}; char fp[MAXPATHLEN+1] = {0};
int n = 0; int n = 0;
struct crtlist_entry *entry_dup = entry; /* use the previous created entry */ struct crtlist_entry *entry_dup = entry; /* use the previous created entry */