mirrors/haproxy
1
0
Fork 0
mirror of https://git.haproxy.org/git/haproxy.git/ synced 2025-08-09 00:27:08 +02:00
Code Issues Projects Releases Wiki Activity

CLEANUP: ssl: "bundle" is not an OpenSSL wording

Browse Source 
There is a confusion between the HAProxy bundle and OpenSSL. OpenSSL
does not have "bundles" but multiple certificates in the same store.

Fix a commentary in the crt-list code.
This commit is contained in:
William Lallemand 2020-10-02 18:08:18 +02:00 committed by William Lallemand
parent fac0f645df
commit 51f784bcf9
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
src/ssl_crtlist.c
View File

@ -552,11 +552,11 @@ int crtlist_parse_file(char *file, struct bind_conf *bind_conf, struct proxy *cu
} else {
/* If we didn't find the file, this could be a
bundle, since 2.3 we don't support OpenSSL
multi-certificate bundle, so we emulate it by
loading each file separately. To do so we need
to duplicate the entry in the crt-list because
it becomes independent */
bundle, since 2.3 we don't support multiple
certificate in the same OpenSSL store, so we
emulate it by loading each file separately. To
do so we need to duplicate the entry in the
crt-list because it becomes independent */
char fp[MAXPATHLEN+1] = {0};
int n = 0;
struct crtlist_entry *entry_dup = entry; /* use the previous created entry */