[TS-4856] Default SSL context fails to load.

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 7.0.0
• Component/s: SSL
• Assignee: Susan Hinrichs
• Reporter: James Peach
• Created: 12/Sep/16 21:41
• Updated: 07/Nov/16 23:27
• Resolved: 14/Sep/16 13:46

Description

This error message appears at startup:

[Sep 12 21:07:16.700] Server {0x7f98127d9780} ERROR: failed set default context

Out of source context, this error is not especially grammatical.

The problem seems to be a regression from TS-4671, since the default * certificate fails to be constructed in SSLInitServerContext due to the tunnel options check. The default context has neither a certificate nor a tunnel option.

AFAIK we still need a default certificate to make the TLS negotiation fail when we don't get an actual certificate match.

Issue Links

• is broken by: TS-4671 Revisit Machine::ip
• is related to: TS-4769 TSSslServerContextCreate always returns null
• links to: GitHub Pull Request #1013