From: Florin Coras <fcoras@cisco.com>
Date: Wed, 16 Jul 2025 21:48:25 +0000 (-0700)
Subject: hsa: do not configure cert for tls ao
X-Git-Tag: v26.02-rc0~172
X-Git-Url: https://gerrit.fd.io/r/gitweb?a=commitdiff_plain;h=refs%2Fchanges%2F42%2F43442%2F1;p=vpp.git

hsa: do not configure cert for tls ao

No need to configure cert for tls active opens as we don't support mtls
for now.

Type: improvement

Change-Id: Ied0a0152ec965e10f1a743a15188a4679ebb0b11
Signed-off-by: Florin Coras <fcoras@cisco.com>
---

diff --git a/src/plugins/hs_apps/proxy.c b/src/plugins/hs_apps/proxy.c
index a4b1aeaea4f..2c7535dd826 100644
--- a/src/plugins/hs_apps/proxy.c
+++ b/src/plugins/hs_apps/proxy.c
@@ -686,7 +686,8 @@ proxy_session_start_connect (proxy_session_side_ctx_t *sc, session_t *s)
       transport_endpt_ext_cfg_t *ext_cfg = session_endpoint_add_ext_cfg (
 	&a->sep_ext, TRANSPORT_ENDPT_EXT_CFG_CRYPTO,
 	sizeof (transport_endpt_crypto_cfg_t));
-      ext_cfg->crypto.ckpair_index = pm->ckpair_index;
+      ext_cfg->crypto.crypto_engine = CRYPTO_ENGINE_NONE;
+      /* mTLS not supported, so no cert configured for now */
     }
 
   proxy_program_connect (a);