From 44f8190ebff278c0b25666bd89c5ed67b3e7fa33 Mon Sep 17 00:00:00 2001 From: Florin Coras Date: Wed, 16 Jul 2025 14:48:25 -0700 Subject: [PATCH] hsa: do not configure cert for tls ao No need to configure cert for tls active opens as we don't support mtls for now. Type: improvement Change-Id: Ied0a0152ec965e10f1a743a15188a4679ebb0b11 Signed-off-by: Florin Coras --- src/plugins/hs_apps/proxy.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/plugins/hs_apps/proxy.c b/src/plugins/hs_apps/proxy.c index a4b1aeaea4f..2c7535dd826 100644 --- a/src/plugins/hs_apps/proxy.c +++ b/src/plugins/hs_apps/proxy.c @@ -686,7 +686,8 @@ proxy_session_start_connect (proxy_session_side_ctx_t *sc, session_t *s) transport_endpt_ext_cfg_t *ext_cfg = session_endpoint_add_ext_cfg ( &a->sep_ext, TRANSPORT_ENDPT_EXT_CFG_CRYPTO, sizeof (transport_endpt_crypto_cfg_t)); - ext_cfg->crypto.ckpair_index = pm->ckpair_index; + ext_cfg->crypto.crypto_engine = CRYPTO_ENGINE_NONE; + /* mTLS not supported, so no cert configured for now */ } proxy_program_connect (a); -- 2.16.6