Re: [PATCH] Add a configurable support of standardized DH parameters = 1024 bits, disabled by default

2014-05-20 Thread Remi Gacogne
Hi Willy, Bryan, On Mon, May 19, 2014 at 12:49:21PM -0700, Bryan Talbot wrote: It seems like the warning would be emitted in cases when DH exchange is disabled. ECDH is supported by nearly all new browsers and devices (that we care about anyway) and so have DH disabled and only ECDH enabled

Re: [PATCH] Add a configurable support of standardized DH parameters = 1024 bits, disabled by default

2014-05-20 Thread Willy Tarreau
Hi Rémi, On Tue, May 20, 2014 at 10:55:55AM +0200, Remi Gacogne wrote: Is it possible to only generate the dh-param and warnings if a cipher that needs it is enabled? I thought it was the case where the code was placed, but maybe I was wrong. Rémi, what do you think ? Well, the

Re: [PATCH] epoll: avoid possible CPU hogging of process waiting for connection termination before restart

2014-05-20 Thread Willy Tarreau
Hi Conrad, On Tue, May 20, 2014 at 02:46:15PM +0200, Conrad Hoffmann wrote: Hey Willy, That's what I initially thought, because I didn't remember there was this common fork_poller() function, but what you did is better, each part does its own job, that's really clean this way. Can

Re: [PATCH] append-header feature

2014-05-20 Thread Sasha Pachev
OK I understand better now. However, I think that this transformation is very specific and if we go down that route we'll have many similar ones. I suggest that instead we focus on applying sed-like regex-based transformations which will allow this and many other things at the same time. I

Re: [PATCH] append-header feature

2014-05-20 Thread Willy Tarreau
On Tue, May 20, 2014 at 02:58:56PM -0600, Sasha Pachev wrote: OK I understand better now. However, I think that this transformation is very specific and if we go down that route we'll have many similar ones. I suggest that instead we focus on applying sed-like regex-based transformations

Re: [PATCH] append-header feature

2014-05-20 Thread Sasha Pachev
This raises a question. Currently set-header deletes all of the earlier versions of the header and replaces them with only one that is new. If we are going to be consistent, it would make sense for replace-header to behave like set-header in this way. Are you OK with set-header and

Vous allez adorer la carte Total GR

2014-05-20 Thread Total
Des prix bas et la qualité TOTAL, ça change tout La solution mobilité privilégiée des entreprises Facilitez-vous la vie avec la carte pros Total GR Un carburant de qualité à prix bas Seulement 3€ HT/mois Une gestion simplifiée pour vos frais de déplacement Un large réseau : stations,

Re: [PATCH] append-header feature

2014-05-20 Thread Willy Tarreau
On Tue, May 20, 2014 at 04:00:16PM -0600, Sasha Pachev wrote: For replace-header, I'm seeing multiple usages. The term replace makes me think it will remove all instances and put one instead. But then, how to define what the input is ? Maybe we could have two actions with different