Hi,

HAProxy 2.2.13 was released on 2021/04/02. It added 2 new commits
after version 2.2.12.

This version is released shortly after the 2.2.12 because a regression was
found. Indeed, people using multi-certificates bundle are not able to
start haproxy anymore, this does not happen if you use separate certificates
in your configuration. This regression is 2.2 only.

The multi-certificates bundle is an old feature which was implemented for old
version of OpenSSL to achieve ECDSA + RSA on the same bind line, with new
versions of OpenSSL it is not required anymore.

A lot of people are still using this feature, but it is recommended to migrate
to separate crt keywords in your configuration if you have at least OpenSSL
1.1.0, you can even have per-certificate configuration using a crt-list which
was not possible with a multi-certificates bundle.

As usual, it is strongly encouraged to update to this version.

#############################################################################################
Please find the usual URLs below :
   Site index       : http://www.haproxy.org/
   Discourse        : http://discourse.haproxy.org/
   Slack channel    : https://slack.haproxy.org/
   Issue tracker    : https://github.com/haproxy/haproxy/issues
   Wiki             : https://github.com/haproxy/wiki/wiki
   Sources          : http://www.haproxy.org/download/2.2/src/
   Git repository   : http://git.haproxy.org/git/haproxy-2.2.git/
   Git Web browsing : http://git.haproxy.org/?p=haproxy-2.2.git
   Changelog        : http://www.haproxy.org/download/2.2/src/CHANGELOG
   Cyril's HTML doc : http://cbonte.github.io/haproxy-dconv/


---
Complete changelog :
William Lallemand (2):
      BUG/MEDIUM: ssl: ckch_inst->ctx not assigned with multi-bundle 
certificates
      REGTESTS: ssl: "set ssl cert" and multi-certificates bundle

---

-- 
William Lallemand

Reply via email to