Hi. I have now build haproxy with boringssl and it looks quite good.
Is it the recommended way to simply make a git clone without any branch or tag? Does anyone know how the KeyUpdate can be tested? ### HA-Proxy version 1.9.2 2019/01/16 - https://haproxy.org/ Build options : TARGET = linux2628 CPU = generic CC = gcc CFLAGS = -O2 -g -fno-strict-aliasing -Wdeclaration-after-statement -fwrapv -Wno-unused-label -Wno-sign-compare -Wno-unused-parameter -Wno-old-style-declaration -Wno-ignored-qualifiers -Wno-clobbered -Wno-missing-field-initializers -Wtype-limits -Wshift-negative-value -Wshift-overflow=2 -Wduplicated-cond -Wnull-dereference OPTIONS = USE_LINUX_SPLICE=1 USE_GETADDRINFO=1 USE_ZLIB=1 USE_REGPARM=1 USE_THREAD=1 USE_OPENSSL=1 USE_LUA=1 USE_PCRE2=1 USE_PCRE2_JIT=1 USE_TFO=1 Default settings : maxconn = 2000, bufsize = 16384, maxrewrite = 1024, maxpollevents = 200 Built with OpenSSL version : BoringSSL OpenSSL library supports TLS extensions : yes OpenSSL library supports SNI : yes OpenSSL library supports : TLSv1.0 TLSv1.1 TLSv1.2 TLSv1.3 Built with Lua version : Lua 5.3.5 Built with transparent proxy support using: IP_TRANSPARENT IPV6_TRANSPARENT IP_FREEBIND Built with zlib version : 1.2.11 Running on zlib version : 1.2.11 Compression algorithms supported : identity("identity"), deflate("deflate"), raw-deflate("deflate"), gzip("gzip") Built with PCRE2 version : 10.31 2018-02-12 PCRE2 library supports JIT : yes Encrypted password support via crypt(3): yes Built with multi-threading support. Available polling systems : epoll : pref=300, test result OK poll : pref=200, test result OK select : pref=150, test result OK Total: 3 (3 usable), will use epoll. Available multiplexer protocols : (protocols marked as <default> cannot be specified using 'proto' keyword) h2 : mode=HTX side=FE|BE h2 : mode=HTTP side=FE <default> : mode=HTX side=FE|BE <default> : mode=TCP|HTTP side=FE|BE Available filters : [SPOE] spoe [COMP] compression [CACHE] cache [TRACE] trace ### I also wanted to run the reg-tests but they fails. https://gitlab.com/aleks001/haproxy-19-boringssl/-/jobs/149523589 ----- ... + cd /usr/src/haproxy + VTEST_PROGRAM=/usr/src/VTest/vtest HAPROXY_PROGRAM=/usr/local/sbin/haproxy make reg-tests ... ########################## Starting vtest ########################## Testing with haproxy version: 1.9.2 # top TEST ./reg-tests/http-rules/h00002.vtc FAILED (0.856) exit=2 # top TEST ./reg-tests/mailers/k_healthcheckmail.vtc FAILED (7.742) exit=2 # top TEST ./reg-tests/log/b00000.vtc TIMED OUT (kill -9) # top TEST ./reg-tests/log/b00000.vtc FAILED (10.008) signal=9 # top TEST ./reg-tests/http-messaging/h00002.vtc FAILED (0.745) exit=2 4 tests failed, 0 tests skipped, 29 tests passed ########################## Gathering results ########################## ###### Test case: ./reg-tests/log/b00000.vtc ###### ## test results in: "/tmp/haregtests-2019-01-22_18-28-24.aBghMD/vtc.3398.357fd753" ###### Test case: ./reg-tests/mailers/k_healthcheckmail.vtc ###### ## test results in: "/tmp/haregtests-2019-01-22_18-28-24.aBghMD/vtc.3398.477fdc0b" ---- c2 7.0 EXPECT resp.http.mailsreceived (11) == "16" failed ###### Test case: ./reg-tests/http-messaging/h00002.vtc ###### ## test results in: "/tmp/haregtests-2019-01-22_18-28-24.aBghMD/vtc.3398.7aab2925" ---- c1h2 0.0 Wrong frame type HEADERS (1) wanted WINDOW_UPDATE ###### Test case: ./reg-tests/http-rules/h00002.vtc ###### ## test results in: "/tmp/haregtests-2019-01-22_18-28-24.aBghMD/vtc.3398.76167f9e" ---- s1 0.0 EXPECT req.http.test3maskff (2001:db8:c001:c01a::ffff:10:0) == "2001:db8:c001:c01a:0:ffff:10:0" failed make: *** [Makefile:1102: reg-tests] Error 1 ----- ### Have anyone tried to run the tests in a containerized environment? Regards Aleks