SolidWallOfCode opened a new pull request, #9580: URL: https://github.com/apache/trafficserver/pull/9580
See #9533. The fix to prevent reloading a broken configuration also prevents loading an initial configuration if that is invalid. This means a single expired certificate can block TLS globally. To fix this, * Certificate load errors are gathered, rather than causing an immediate return. * The previous enables the default TLS context to be created every time, as noted in the existing comments. * The first configuration load is forced to succeed so that if the process won't exit on error, at least some semblance of configuration is available. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
