LeeZBug commented on issue #12633:
URL: https://github.com/apache/apisix/issues/12633#issuecomment-3327745381

   > Hi [@LeeZBug](https://github.com/LeeZBug), APISIX 3.13.0 has a issue when 
processing referenced upstreams with the tls field: even if only 
`tls.verify=false` is set and no client certificate field is configured, the 
client certificate parsing process will be incorrectly executed, and nil will 
be passed to `ngx.ssl.parse_pem_cert`, triggering a runtime error. Inline 
upstreams work correctly because they don't contain the tls field, thus 
avoiding the flaw.
   > 
   > This issue has been fixed in 
[#12527](https://github.com/apache/apisix/pull/12527), waiting for the version 
release.
   > 
   > You can remove the tls related configuration in the upstream configuration 
and try again.
   
   Does this issue only occur when I create the upstream resource? Because I 
noticed that specifying upstream ocnfig in routes — even with 
tls.verify=falseand no client certificate — doesn't cause this problem."


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to