William Lallemand f69cd68737 BUG/MINOR: ssl: segv on startup when AKID but no keyid ...

In bug #959 it was reported that haproxy segfault on startup when trying
to load a certifcate which use the X509v3 AKID extension but without the
keyid field.

This field is not mandatory and could be replaced by the serial or the
DirName.

For example:

   X509v3 extensions:
       X509v3 Basic Constraints:
           CA:FALSE
       X509v3 Subject Key Identifier:
           42:7D:5F:6C:3E:0D:B7:2C:FD:6A:8A:32:C6:C6:B9:90:05:D1:B2:9B
       X509v3 Authority Key Identifier:
           DirName:/O=HAProxy Technologies/CN=HAProxy Test Intermediate CA
           serial:F2:AB:C1:41:9F:AB:45:8E:86:23:AD:C5:54:ED:DF:FA

This bug was introduced by 70df7b ("MINOR: ssl: add "issuers-chain-path" directive").

This patch must be backported as far as 2.2.

2020-11-19 16:24:13 +01:00

..

51d.c

CLEANUP: config: Return ERR_NONE from config callbacks instead of 0

2020-11-13 16:26:10 +01:00

acl.c

…

action.c

…

activity.c

…

applet.c

…

arg.c

…

auth.c

…

backend.c

…

base64.c

…

cache.c

CLEANUP: config: Return ERR_NONE from config callbacks instead of 0

2020-11-13 16:26:10 +01:00

calltrace.c

…

cfgparse-global.c

…

cfgparse-listen.c

…

cfgparse-ssl.c

MEDIUM: cli/ssl: configure ssl on server at runtime

2020-11-18 17:22:28 +01:00

cfgparse-tcp.c

…

cfgparse-unix.c

…

cfgparse.c

MEDIUM: cli/ssl: configure ssl on server at runtime

2020-11-18 17:22:28 +01:00

channel.c

…

check.c

CLEANUP: config: Return ERR_NONE from config callbacks instead of 0

2020-11-13 16:26:10 +01:00

chunk.c

…

cli.c

…

compression.c

…

connection.c

…

da.c

CLEANUP: config: Return ERR_NONE from config callbacks instead of 0

2020-11-13 16:26:10 +01:00

debug.c

CLEANUP: config: Return ERR_NONE from config callbacks instead of 0

2020-11-13 16:26:10 +01:00

dgram.c

…

dict.c

…

dns.c

…

dynbuf.c

…

eb32sctree.c

…

eb32tree.c

…

eb64tree.c

…

ebimtree.c

…

ebistree.c

…

ebmbtree.c

…

ebpttree.c

…

ebsttree.c

…

ebtree.c

…

ev_epoll.c

…

ev_evports.c

…

ev_kqueue.c

…

ev_poll.c

…

ev_select.c

…

extcheck.c

…

fcgi-app.c

…

fcgi.c

…

fd.c

…

filters.c

BUG/MEDIUM: filters: Forward all filtered data at the end of http filtering

2020-11-17 09:59:35 +01:00

fix.c

…

flt_http_comp.c

…

flt_spoe.c

…

flt_trace.c

MINOR: flt-trace: Use a bitfield for the trace options

2020-11-17 11:34:36 +01:00

freq_ctr.c

…

frontend.c

…

h1_htx.c

…

h1.c

…

h2.c

…

haproxy.c

…

hash.c

…

hlua_fcn.c

…

hlua.c

…

hpack-dec.c

…

hpack-enc.c

…

hpack-huff.c

…

hpack-tbl.c

…

http_acl.c

…

http_act.c

…

http_ana.c

BUG/MINOR: http-ana: Don't wait for the body of CONNECT requests

2020-11-17 10:03:12 +01:00

http_conv.c

…

http_fetch.c

…

http_htx.c

CLEANUP: config: Return ERR_NONE from config callbacks instead of 0

2020-11-13 16:26:10 +01:00

http_rules.c

…

http.c

…

htx.c

…

lb_chash.c

…

lb_fas.c

…

lb_fwlc.c

…

lb_fwrr.c

…

lb_map.c

…

listener.c

…

log.c

…

lru.c

…

mailers.c

…

map.c

…

mqtt.c

…

mux_fcgi.c

…

mux_h1.c

…

mux_h2.c

…

mux_pt.c

…

mworker-prog.c

…

mworker.c

…

namespace.c

…

pattern.c

…

payload.c

…

peers.c

…

pipe.c

…

pool.c

…

proto_sockpair.c

…

proto_tcp.c

…

proto_udp.c

…

proto_uxst.c

…

protocol.c

…

proxy.c

MEDIUM: cli/ssl: configure ssl on server at runtime

2020-11-18 17:22:28 +01:00

queue.c

…

raw_sock.c

…

regex.c

…

ring.c

…

sample.c

…

server.c

MEDIUM: cli/ssl: configure ssl on server at runtime

2020-11-18 17:22:28 +01:00

session.c

…

sha1.c

…

shctx.c

…

signal.c

…

sink.c

CLEANUP: config: Return ERR_NONE from config callbacks instead of 0

2020-11-13 16:26:10 +01:00

sock_inet.c

…

sock_unix.c

…

sock.c

…

ssl_ckch.c

…

ssl_crtlist.c

…

ssl_sample.c

…

ssl_sock.c

BUG/MINOR: ssl: segv on startup when AKID but no keyid

2020-11-19 16:24:13 +01:00

ssl_utils.c

…

stats.c

…

stick_table.c

…

stream_interface.c

…

stream.c

…

task.c

…

tcp_act.c

…

tcp_rules.c

…

tcp_sample.c

…

tcpcheck.c

CLEANUP: config: Return ERR_NONE from config callbacks instead of 0

2020-11-13 16:26:10 +01:00

thread.c

…

time.c

…

tools.c

…

trace.c

…

uri_auth.c

…

vars.c

…

version.c

…

wdt.c

CLEANUP: config: Return ERR_NONE from config callbacks instead of 0

2020-11-13 16:26:10 +01:00

wurfl.c

CLEANUP: config: Return ERR_NONE from config callbacks instead of 0

2020-11-13 16:26:10 +01:00

xprt_handshake.c

…

xxhash.c

…