experiments/clixon
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

remove global ssl-enable in clixon-restconf.yang

Browse source
This commit is contained in:
Olof hagsand 2020-11-18 21:52:47 +01:00
parent 9016dde319
commit c0ad6d3f8f
5 changed files with 2 additions and 18 deletions
Download patch file Download diff file Expand all files Collapse all files

5
apps/restconf/restconf_main_evhtp.c
View file

@ -1026,9 +1026,9 @@ cx_evhtp_init(clicon_handle h,
clicon_err(OE_CFG, ENOENT, "restconf top symbol not found");
goto done;
}
/* If at least one socket has ssl then enable global ssl_enable */
ssl_enable = xpath_first(xrestconf, nsc, "socket[ssl='true']") != NULL;
/* get common fields */
if ((x = xpath_first(xrestconf, nsc, "ssl-enable")) != NULL)
ssl_enable = (strcmp(xml_body(x),"true")==0);
if ((x = xpath_first(xrestconf, nsc, "auth-type")) != NULL) /* XXX: leaf-list? */
auth_type = xml_body(x);
if (auth_type && strcmp(auth_type, "client-certificate") == 0)
@ -1065,7 +1065,6 @@ cx_evhtp_init(clicon_handle h,
}
// ssl_verify_mode = htp_sslutil_verify2opts(optarg);
}
/* get the list of socket config-data */
if (xpath_vec(xrestconf, nsc, "socket", &vec, &veclen) < 0)
goto done;