Routes with SHA1 CA certificates (spec.tls.caCertificate) break HAProxy preventing reload

    4.16

    Always

    1. create Route with SHA1 CA certificates
    2.
    3.
    

    HAProxy router fails to reload

    HAProxy router should either reject Routes with SHA1 CA certificates, or reload successfully

    [ALERT]    (312) : config : parsing [/var/lib/haproxy/conf/haproxy.config:131] : 'bind unix@/var/lib/haproxy/run/haproxy-sni.sock' in section 'frontend' : 'crt-list' : error processing line 1 in file '/var/lib/haproxy/conf/cert_config.map' : unable to load chain certificate into SSL Context '/var/lib/haproxy/router/certs/test:test.pem': ca md too weak.

[ALERT]    (312) : config : Error(s) found in configuration file : /var/lib/haproxy/conf/haproxy.config

[ALERT]    (312) : config : Fatal errors found in configuration.