SolidWallOfCode opened a new pull request, #9579:
URL: https://github.com/apache/trafficserver/pull/9579

   This closes #9533.
   
   The problem is the fix to prevent loading bad configurations also prevents 
the initial load from loading if it's invalid. This means any error at all 
causes TLS to fail globally. It's interesting that at the end of 
`SSLMultiCertConfigLoader::load` that notes that a default context must be 
created, while the code also immediately returns if there's any cert load 
error. Clearly there's a bit of a conflict. This change
   
   * Don't return early on cert load errors.
   * Force load if there isn't already a configuration loaded.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to