bneradt commented on code in PR #13342:
URL: https://github.com/apache/trafficserver/pull/13342#discussion_r3572036423
##########
src/iocore/net/SSLUtils.cc:
##########
@@ -1733,6 +1733,18 @@ SSLMultiCertConfigLoader::update_ssl_ctx(const
std::string &secret_name)
if (!ctx) {
retval = false;
} else {
+ // Address and default-context lookups are owned by the same policy,
but
+ // are not part of the certificate CN/SAN name sets below.
+ for (unsigned i = 0; i < lookup->count(loadingctx.ctx_type); ++i) {
Review Comment:
Fixed. The refresh now updates only the policy’s exact address entry:
find("*", ctx_type) for the wildcard/default policy, or ats_ip_pton followed by
the typed address lookup for an explicit address. It no longer temporarily
overwrites every entry sharing the policy, so unique-SAN contexts retain either
their old context or a successfully rebuilt one.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
