# HG changeset patch
# User Kim Alvefur <zash@zash.se>
# Date 1698439080 -7200
# Node ID 8fbdd878fcf6414cb42c3a741a03e06c3e98b81d
# Parent  c5767b7528ac9c5724c667c72cb4591ad5635360# Parent  24070d47a6e7a3ddd60f34181dc485a9b9b00e8b
Merge 0.12->trunk

diff -r c5767b7528ac -r 8fbdd878fcf6 core/certmanager.lua
--- a/core/certmanager.lua	Thu Oct 26 18:30:47 2023 +0100
+++ b/core/certmanager.lua	Fri Oct 27 22:38:00 2023 +0200
@@ -307,8 +307,11 @@
 		password = function() log("error", "Encrypted certificate for %s requires 'ssl' 'password' to be set in config", host); end;
 	});
 	local profile = configmanager.get("*", "tls_profile") or "intermediate";
-	if profile ~= "legacy" then
+	if mozilla_ssl_configs[profile] then
 		cfg:apply(mozilla_ssl_configs[profile]);
+	elseif profile ~= "legacy" then
+		log("error", "Invalid value for 'tls_profile': expected one of \"modern\", \"intermediate\" (default), \"old\" or \"legacy\" but got %q", profile);
+		return nil, "Invalid configuration, 'tls_profile' had an unknown value.";
 	end
 	cfg:apply(global_ssl_config);