On Thu, Jul 09, 2015 at 09:53:06AM +0200, Lukas Tribus wrote: > > >> The deprecated req_ssl_* keywords were for compatibility with historic > > versions > >>> and should not be introduced right now, so I'd rather not add it now to > >>> remove > >>> it in next version. If you're OK with me removing it by hand I can fix it > >>> myself, but if you prefer to resubmit that's fine as well. Just let me > >>> know! > >>> > >> > >> Sure, you can remove it by hand, no problems there. > > > > Perfect, patch merged then! > > I like this, I'm glad we have this possibility now. It isn't however an > alternative to Dave > Zhu's work, its rather an additional possibility.
That's exactly the point and I'm glad Nenad mentionned Dave's work in his commit message. > We still ought to work with Dave to get his proposals merged, imho. Absolutely. I need some of Emeric's availability to review this work. My limited knowledge of the SSL stack in haproxy tells me Dave's work looks right but I tend to be wrong when I give my opinion in this area :-) Willy
