]> git.kaiwu.me - haproxy.git/commit
projects / haproxy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 236bb6d) | patch
MINOR: ocsp: Do not see ocsp loading failures as fatal anymore
authorRemi Tricot-Le Breton <rlebreton@haproxy.com>
Thu, 25 Jun 2026 13:39:18 +0000 (15:39 +0200)
committerWilliam Lallemand <wlallemand@haproxy.com>
Wed, 8 Jul 2026 12:50:25 +0000 (14:50 +0200)
commite0903167358ab12dda18dab7d45230269ea8226e
tree2769dcc10f06dcd8f3b746e2039a44620aca89c2tree | snapshot
parent236bb6d5f9a0a924eb8dab92f343bbaec9e3479ecommit | diff
MINOR: ocsp: Do not see ocsp loading failures as fatal anymore

Until now, if the call to 'ssl_sock_load_ocsp' raised an error, because
of a missing issuer certificate for instance, we would send a fatal
error code and the init would fail.
With this patch we only consider this as a non-critical error and we
will send a warning instead. In such a case the OCSP response will not
be loaded and stapling or auto update features will not work for the
certificate.
src/ssl_sock.c diff | blob | history
haproxy upstream