From 12bbf0b5295e554186d477e7aea1c28ecc766c46 Mon Sep 17 00:00:00 2001
From: Randall Meyer <rrm@apache.org>
Date: Fri, 12 Nov 2021 15:22:26 -0800
Subject: [PATCH] Prevent bad ssl_multicert.config load from being swapped in

ret_status contains the load status of the config file, but wasn't used
to check if it successful before being swapped in

This is a follow up to #8256
---
 iocore/net/SSLConfig.cc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/iocore/net/SSLConfig.cc b/iocore/net/SSLConfig.cc
index 29093762cb9..830ae1cffa7 100644
--- a/iocore/net/SSLConfig.cc
+++ b/iocore/net/SSLConfig.cc
@@ -559,7 +559,7 @@ SSLCertificateConfig::reconfigure()
 
   // If there are errors in the certificate configs and we had wanted to exit on error
   // we won't want to reset the config
-  if (lookup->is_valid || !params->configExitOnLoadError) {
+  if (retStatus || !params->configExitOnLoadError) {
     configid = configProcessor.set(configid, lookup);
   } else {
     delete lookup;