Vincent, Am 04.05.19 um 13:57 schrieb Vincent Bernat: > The more changes, the less likely the release team will accept the > change. Assuming we can only make one proposition (which is not true), > what would you (as upstream) try? 1.8.19, one bug, all major bugs, even > more bugs, or 1.8.20? >
While I'm not upstream I am a happy user of both HAProxy and Debian. I believe that this MEDIUM patch should be proposed as well. I believe the OpenSSL version included in Buster supports TLS 1.3. BUG/MEDIUM: ssl: ability to set TLS 1.3 ciphers using ssl-default-server-ciphersuites http://git.haproxy.org/?p=haproxy-1.8.git;a=commitdiff;h=a2919ca Best regards Tim Düsterhus
