From ab7358b366911464f5034e4afe8c264187305ad1 Mon Sep 17 00:00:00 2001 From: William Lallemand Date: Wed, 27 Aug 2025 15:56:38 +0200 Subject: [PATCH] MEDIUM: ssl: convert diag to warning for strict-sni + default-crt Previous patch emits a diag warning when both 'strict-sni' + 'default-crt' are used on the same bind line. This patch converts this diagnostic warning to a real warning, so the previous patch could be backported without breaking configurations. This was discussed in #3082. --- src/ssl_sock.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/ssl_sock.c b/src/ssl_sock.c index 347256d35..fc4e5a602 100644 --- a/src/ssl_sock.c +++ b/src/ssl_sock.c @@ -5048,7 +5048,7 @@ int ssl_sock_prepare_bind_conf(struct bind_conf *bind_conf) } if (is_default == CKCH_INST_EXPL_DEFAULT) { - ha_diag_warning("Proxy '%s': both 'default-crt' and 'strict-sni' keywords are used in bind '%s' at [%s:%d], certificates won't be used as fallback (use 'crt' instead).\n", + ha_warning("Proxy '%s': both 'default-crt' and 'strict-sni' keywords are used in bind '%s' at [%s:%d], certificates won't be used as fallback (use 'crt' instead).\n", px->id, bind_conf->arg, bind_conf->file, bind_conf->line); }