Re: dynamic ssl certificate updates with changed intermediate

2020-12-10 Thread Björn Jacke
Hello William, On 10.12.20 15:55, William Lallemand wrote: >> As far as I can see the "set ssl cert fullchain.pem.ocsp" method is >> *generally* suitable to update ocsp responses and can be used as a drop >> in replacement for the "set ssl ocsp-response" method, which is not >> working correctly

Re: Crash when using wlc in multithreaded mode with agent checks (1.8.26).

2020-12-10 Thread Peter Statham
On Tue, 8 Dec 2020 at 14:55, Christopher Faulet wrote: > > Le 04/12/2020 à 21:24, Peter Statham a écrit : > > I might have spoken too soon. > > > > The latest release of 1.8 works flawlessly on my debian desktop but > > still crashes when I attempt the same configuration on a CentOS > > virtual

Re: dynamic ssl certificate updates with changed intermediate

2020-12-10 Thread William Lallemand
On Thu, Dec 10, 2020 at 03:24:39PM +0100, Björn Jacke wrote: > Hi William, > > On 09.12.20 09:27, William Lallemand wrote: > > $ echo -e -n "@1 set ssl cert server1.fullchain.pem <<\n$(cat > > server2.fullchain.pem)\n\n" | socat - /tmp/master.socket > > $ echo -e "@1 set ssl cert

Re: dynamic ssl certificate updates with changed intermediate

2020-12-10 Thread Björn Jacke
Hi William, On 09.12.20 09:27, William Lallemand wrote: > $ echo -e -n "@1 set ssl cert server1.fullchain.pem <<\n$(cat > server2.fullchain.pem)\n\n" | socat - /tmp/master.socket > $ echo -e "@1 set ssl cert server1.fullchain.pem.ocsp <<\n$(base64 -w > 1

TLSv1.3 verify_client_post_handshake

2020-12-10 Thread micunek
Hi All, I am using HAProxy as a proxy server for my client towards the origin server via https. Everything work fine with TLSv1.2 however I need to use TLSv1.3 and in this case origin server send me back "403 Forbidden" because of : SSL Library Error: error:14268117:SSL

Re: [PATCH] BUG/MINOR: haproxy: Add a check whether the given pid is "haproxy"

2020-12-10 Thread Willy Tarreau
Hi Takeshi, On Thu, Dec 10, 2020 at 07:00:23AM +, mizuta.take...@fujitsu.com wrote: > Hi, all, > > Haproxy sends the signals to pidlist with the -sf/-st option. > However, since it does not check the haproxy's PID, it may kill other > processes. > > Reproducer is: > ~]# sleep 1000 &

Re: [PATCH]: DOC DeviceAtlas maintainer email update

2020-12-10 Thread Willy Tarreau
Hi David, On Thu, Dec 10, 2020 at 09:58:34AM +, David Carlier wrote: > Hi, here a tiny change in the MAINTAINERS file. > > Please backporting as much as possible. Now merged, thank you! Willy

[PATCH]: DOC DeviceAtlas maintainer email update

2020-12-10 Thread David Carlier
Hi, here a tiny change in the MAINTAINERS file. Please backporting as much as possible. Thanks in advance. Kind regards. 0001-DOC-email-change-of-the-DeviceAtlas-maintainer.patch Description: Binary data

Re: [PR] Add srvkey option to stick-table

2020-12-10 Thread Frederic Lecaille
On 12/10/20 8:20 AM, Thayne McCombs wrote: Here are my updates from the feedback. It took me quite a while to figure out how to send this diff properly formatted with gmail. If you would like a single patch with all my changes, I can send that as well. About a possible reg test, I remember

Re: [PR] Add srvkey option to stick-table

2020-12-10 Thread Frederic Lecaille
On 12/10/20 8:20 AM, Thayne McCombs wrote: Here are my updates from the feedback. It took me quite a while to figure out how to send this diff properly formatted with gmail. Thank you for your effort. The result is perfect. If you would like a single patch with all my changes, I can send