mirrors/haproxy
1
0
Fork 0
mirror of https://git.haproxy.org/git/haproxy.git/ synced 2025-09-22 22:31:28 +02:00
Code Issues Projects Releases Wiki Activity

MINOR: server: disable CLI 'set server ssl' for dynamic servers

Browse Source 
'set server ssl' uses ssl parameters from default-server. As dynamic
servers does not reuse any default-server parameters, this command has
no sense for them.
This commit is contained in:
Amaury Denoyelle 2021-05-19 15:00:54 +02:00
parent 1f9333b30e
commit b89d3d3de7
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/server.c
View File

@ -4081,6 +4081,11 @@ static int cli_parse_set_server(char **args, char *payload, struct appctx *appct
} }
else if (strcmp(args[3], "ssl") == 0) { else if (strcmp(args[3], "ssl") == 0) {
#ifdef USE_OPENSSL #ifdef USE_OPENSSL
if (sv->flags & SRV_F_DYNAMIC) {
cli_err(appctx, "'set server <srv> ssl' not supported on dynamic servers\n");
goto out;
}
if (sv->ssl_ctx.ctx == NULL) { if (sv->ssl_ctx.ctx == NULL) {
cli_err(appctx, "'set server <srv> ssl' cannot be set. " cli_err(appctx, "'set server <srv> ssl' cannot be set. "
" default-server should define ssl settings\n"); " default-server should define ssl settings\n");