[PATCH] BUG/MINOR: ssl: fix crt-list neg filter for openssl < 1.1.1

Hi, Very difficult to trigger the bug, except with spécific test configuration like: crt-list: cert.pem !www.dom.tld cert.pem *.dom.tld If you can consider the patch. Thank's Manu 0001-BUG-MINOR-ssl-fix-crt-list-neg-filter-for-openssl-1..patch Description: Binary data

[PATCH v3] MINOR: stick-table: allow sc-set-gpt0 to set value from an expression

[sorry for mis-threading; hoping I got the git send-mail --in-reply-to right] Hello Willy! Actually, reading through your original and last comments, I realize I must have misunderstood the sample_expr() part and got carried away. Unless I'm mistaken, we can use the existing

[PATCH] BUG/MINOR: ssl: ssl_pkey_info_index ex_data can store a dereferenced pointer

Hi, If you can consider the patch (related to CLI cert update) Thank's Manu 0001-BUG-MINOR-ssl-ssl_pkey_info_index-ex_data-can-store-.patch Description: Binary data

Re: Delegated Credentials for TLS

Hello, On Wed, Nov 6, 2019 at 3:50 PM Dana Dukes wrote: > > Greetings, > > I was wondering if any plans for Delegated Credentials to be supported in > HAProxy. > > https://thehackernews.com/2019/11/delegated-credentials-for-tls.html I'd say it's a little early for that. Without an actual

Delegated Credentials for TLS

Greetings,I was wondering if any plans for Delegated Credentials to be supported in HAProxy.  https://thehackernews.com/2019/11/delegated-credentials-for-tls.html

Re: Truncated response on 2.0.8

Le 31/10/2019 à 11:01, Ing. Andrea Vettori a écrit : Sorry to bother you with all these stuff. But for now, I don't know where to start my investigation. Sure I’ll do as soon as possibile and thank you very much for your continued support. Hi, Sorry for the delay and thanks for the

Re: [PATCH] bugfix to make do-resolve to use DNS cache

Hi Willy, Jarno, Sorry, I did forgot those 2 printf that were here for debugging purpose only. I can resend the patch tonight. Baptiste On Wed, Nov 6, 2019 at 7:43 AM Willy Tarreau wrote: > Hi Baptiste, > > thanks for the fix, but before taking it, are you really sure it's > the version you

Re: [PATCH v2] MINOR: stick-table: allow sc-set-gpt0 to set value from an expression

Hi Cédric, On Mon, Nov 04, 2019 at 11:00:06AM +0100, Cédric Dufour wrote: > [Sorry for multiple posting. I'm having trouble with sending this > patch via GMail *SMTP*; trying the WUI...] no worries. > Thanks Willy for your feedback. > > I'm not sure whether I should further split

Re: arm64 builds?

Hi Ionel, On Mon, Nov 04, 2019 at 02:10:56PM +0100, GARDAIS Ionel wrote: > FWIW, when I build for armhf (RaspberryPi 3b with Raspbian buster), I have to > add -latomic to the LD_FLAGS. It's not the case for me but I had to add it for another one, I think it was for the mips running in my build

Re: [PATCH] MINOR: doc: http-reuse connection pool fix

On Wed, Nov 06, 2019 at 11:50:25AM +0100, Lukas Tribus wrote: > Since 1.9 we actually do use a connection pool, configurable with > pool-max-conn. > > Update the documentation in this regard. > > Must be backported to 1.9. Nice catch, thanks Lukas, now applied. Willy

[PATCH] MINOR: doc: http-reuse connection pool fix

Since 1.9 we actually do use a connection pool, configurable with pool-max-conn. Update the documentation in this regard. Must be backported to 1.9. --- doc/configuration.txt | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/doc/configuration.txt b/doc/configuration.txt

RE: Product Info

Okay Lucas and all. Thanks for all your help and have a great day ahead. Regards, Anurag -Original Message- From: Lucas Rolff Sent: Wednesday, November 6, 2019 2:36 PM To: APCoE Product Notifications ; w...@1wt.eu Cc: xro...@gmail.com; haproxy@formilux.org; Na, Anurag Subject: Re:

Re: stats http counter issue

On Wed, Nov 06, 2019 at 11:03:47AM +0100, Jean Wasilewski wrote: > Removing nbproc and nbthread did resolve the issue. Ah I like to read this! When less settings work better, it's always pleasant and confirms that all this dev was time well invested! Cheers, Wlily

Re: stats http counter issue

Hi Willy, On 11-06 07:56 am (Wed), Willy Tarreau wrote: > Hi Jean, > > On Tue, Nov 05, 2019 at 04:33:00PM +0100, Jean Wasilewski wrote: > > Hi, > > > > While using the stats socket with the official HAProxy exporter, I > > noticed that some metrics seem erronous. While querying for a specific >

Re: Product Info

On Wed, Nov 06, 2019 at 09:03:50AM +, apcoeproductnotificati...@wellsfargo.com wrote: > Hi Willy, > > Thanks for the info but honestly I am not focusing only on security fix, That's already great to hear, because you know it's not the first time I hear this question! > I need confirmation

Re: Product Info

I think the point Willy tried to make is that it should be handled the same way regardless of being a security patch or not. All fixes are important - so see them as "security" fixes for bugs if you like. On 06/11/2019, 10.04, "apcoeproductnotificati...@wellsfargo.com" wrote: Hi Willy,

RE: Product Info

Hi Willy, Thanks for the info but honestly I am not focusing only on security fix, I need confirmation whether 2.0.8 is security patch or discretionary patch so that I can work on it accordingly on the basis of patch type. Regards, Anurag -Original Message- From: Willy Tarreau

Re: Product Info

On Wed, Nov 06, 2019 at 08:09:55AM +, apcoeproductnotificati...@wellsfargo.com wrote: > Hi Rob/Thomas, > Good day!! > > Thanks for the update, so as per the link the current patch is 2.0.8 released > on 23-10-2019, request you to please confirm whether this patch is also a > security patch

RE: Product Info

Hi Rob/Thomas, Good day!! Thanks for the update, so as per the link the current patch is 2.0.8 released on 23-10-2019, request you to please confirm whether this patch is also a security patch and fixing any vulnerability (please provide CVE if available) or not as it has one major bug fix in