Hi Pieter,

I'm finally back to this one.

On Sat, Jan 26, 2019 at 09:04:06PM +0100, PiBa-NL wrote:
> It seems google replies "Header: :status: 400 Bad Request" But leaves me
> 'guessing' why it would be invalid, also the 'body' doesn't get downloaded
> but haproxy terminates the connection, which curl then reports as missing
> bytes.. There are a few differences between the 2 get requests, authority
> and scheme.. But i also wonder if that is the actual packet with the issue,
> H2 isnt quite a simple as H1 used to be ;).

I didn't manage to get your vtc to work because I think they were mangled
during your multiple attempts (e.g. some are in TCP mode). However I could
come up with a trivial config that used to fail and which now works after
I patched the code :

   global
        tune.ssl.default-dh-param 1024

   listen proxy
        mode http
        option http-use-htx
        timeout connect 20s
        timeout client  20s
        timeout server  20s

        log stdout format raw local0
        option httplog

        bind :4445
        bind :4446 proto h2
        server srv_mailgoogle mail.google.com:443 ssl verify none alpn h2


$ curl -i --http2-prior-knowledge  http://127.0.0.1:4446/mail/ -H "Host: 
mail.google.com"

Now we get the proper redirect instead of the 400 bad req.
I've mergd this into master and the pending 1.9. Feel free to give it
a try.

cheers,
Willy

Reply via email to