-rc2 went cpu bound on all threads (nbthread 8 fwiw) where the only thing I changed was haproxy.
B. > On 4 Nov 2017, at 16:17, Willy Tarreau <[email protected]> wrote: > > On Sat, Nov 04, 2017 at 01:33:30PM +0000, Robert Newson wrote: >> It's only 1.0.1 that's affected, so I'm inferring that predates support for >> serving multiple certificate types; it's not an haproxy regression. >> >> I've failed in all attempts to try tls 1.3 though. Haproxy segfaults very >> soon after startup. I tried several OpenSSL versions. > > I've emitted -rc2 last night, though if you were relying on the latest -git > it's probably about the same. So I would be *very* interested in knowing if > you still see the segfault and if so, how to reproduce it! > > Willy

