[TS-3529] Add a config option to allow ATS to start even if some certificates are bad

• Type: Bug
• Status: Closed
• Priority: Blocker
• Resolution: Fixed
• Fix Version/s: 5.3.0, 6.0.0
• Component/s: SSL
• Assignee: Susan Hinrichs
• Reporter: Susan Hinrichs
• Created: 17/Apr/15 13:58
• Updated: 13/May/15 20:36
• Resolved: 21/Apr/15 19:51

Description

In fixing TS-3329, we changed the ATS start up behavior to fail to start if any of the entries of ssl_multicert.config fails to load. This changes the functionality of ATS in from 5.2 to 5.3.

For many/most use cases, this is a desirable change. However, for some use cases, you want to serve and start up even if some of the entries fail to load.

We will add a records config entry proxy.config.ssl.server.multicert.exit_on_load_fail
It will default to 1 on 5.x. May want to change the default to 0 when we move to 6.0

Issue Links

• relates to: TS-3329 ATS shouldn't start if SSL is configured and certificate can't be loaded