[
https://issues.apache.org/jira/browse/TS-2096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13736173#comment-13736173
]
James Peach commented on TS-2096:
---------------------------------
OK, now you get the file and line, and we print the error message correctly, so
it looks like this:
{code}
[Aug 10 20:29:17.042] Server {0x7fff76992180} ERROR: SSL::0:error:0906D06C:PEM
routines:PEM_read_bio:no start
line:/SourceCache/OpenSSL098/OpenSSL098-47.1/src/crypto/pem/pem_lib.c:648:Expecting:
CERTIFICATE
[Aug 10 20:29:17.042] Server {0x7fff76992180} ERROR: SSL::0:error:140AD009:SSL
routines:SSL_CTX_use_certificate_file:PEM
lib:/SourceCache/OpenSSL098/OpenSSL098-47.1/src/ssl/ssl_rsa.c:491
[Aug 10 20:29:17.042] Server {0x7fff76992180} ERROR: failed to load certificate
from /opt/ats/etc/trafficserver/ssl/junk.pem
[Aug 10 20:29:17.042] Server {0x7fff76992180} ERROR: failed to load SSL
certificate specification from /opt/ats/etc/trafficserver/ssl_multicert.config
line 49
{code}
> Traffic server does not error on loading bad ssl cert
> -----------------------------------------------------
>
> Key: TS-2096
> URL: https://issues.apache.org/jira/browse/TS-2096
> Project: Traffic Server
> Issue Type: Bug
> Components: SSL
> Affects Versions: 3.3.4
> Reporter: Kris Lindgren
> Assignee: James Peach
> Fix For: 3.5.1
>
>
> In traffic server 3.3.4 when loading an SSL cert from ssl_multicert.config if
> the ssl cert is invalid or missing an error is not logged.
> Eg: dest_ip=10.0.0.1 ssl_cert_name=asdf ssl_ca_name=asdf-chain
> If asdf-chain is an empty file or doesn't exist the ssl cert will not get
> loaded - but no error will be logged.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
