bryancall commented on issue #4808: URL: https://github.com/apache/trafficserver/issues/4808#issuecomment-4827060527
This is resolved in the current 10.1 release (10.1.2). A malformed certificate is now handled gracefully: cert-load validation fails the entry, and on a config reload the new (invalid) config is discarded and the previous config retained with a load-failure error logged, rather than freezing traffic. The Server Name Indication (SNI) lookup is also constant-time with no recursion, so a bad wildcard name can't hang request processing. Closing as fixed; please reopen with a reproduction if you see a freeze on 10.1.2 or later. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
