Re: Proxy Protocol - any browser proxy extensions that support ?

2021-06-05 Thread Jim Freeman
Thanks much for the link! I'd seen that it had been haxx'd into curl, but your link to the patch really pointed up how elegantly and exquisitely simple it is. Would that it were so simply and readily available in extensions to lesser browsers. ;-) As always, hats off to Willy, Daniel, et al ! On

Re: Upgrading from 1.8 to 2.4, getting warning I can't figure out

2021-06-05 Thread Shawn Heisey
On 6/5/2021 9:30 PM, Shawn Heisey wrote: [WARNING]  (81457) : Loading: OCSP response status not successful. Content will be ignored. I deleted the .ocsp file sitting next to the certificate file, and now when I check the config file, it's says it's valid with no other messages.

Re: [PATCH] CI: enable openssl-3.0.0 builds

2021-06-05 Thread Willy Tarreau
On Sun, Jun 06, 2021 at 12:51:53AM +0200, Tim Düsterhus wrote: > Ilya, > > On 6/5/21 5:10 AM, ??? wrote: > > here are two patches: > > > > - deprecated warnings suppressed > > - openssl-3.0.0 enabled > > > > In the second patch you forgot the 'CI:' prefix in the commit message. > >

Upgrading from 1.8 to 2.4, getting warning I can't figure out

2021-06-05 Thread Shawn Heisey
I am upgrading haproxy on my servers from 1.8.22 to 2.4.0. I have been slowly working to fix the messages that I get when I check the config file. I have one left, but I cannot find any info about how to fix it: [WARNING] (81457) : Loading: OCSP response status not successful. Content will

Re: [PATCH 1/3] CLEANUP: cfgparse: Remove duplication of `MAX_LINE_ARGS + 1`

2021-06-05 Thread Tim Düsterhus
Willy, On 6/6/21 12:50 AM, Maximilian Mader wrote: From: Tim Duesterhus Acking this one as mine. I sent it to Max to incorporate it into the series. Best regards Tim Düsterhus

[PATCH 3/3] MINOR: haproxy: Add `-cc` argument

2021-06-05 Thread Maximilian Mader
This is a cleaned-up version of Tim’s PoC patch. The documentation has been updated to reflect the changes. A simple VTest test is included as well. Note the use of VTest’s cmd feature to skip the test if the HAProxy version is lower than specified. It might be useful for future tests as well.

[PATCH 2/3] CLEANUP: Make errptr const in `parse_line()`

2021-06-05 Thread Maximilian Mader
Hi, I’m not sure whether this change causes any non-obvious issues but the compiler was happy. Regards Max Apply with `git am --scissors` to automatically cut the commit message. -- >8 -- This change is for consistency with `cfg_eval_condition()`. --- include/haproxy/tools.h | 2 +-

[PATCH 1/3] CLEANUP: cfgparse: Remove duplication of `MAX_LINE_ARGS + 1`

2021-06-05 Thread Maximilian Mader
From: Tim Duesterhus We can calculate the number of possible arguments based off the size of the `args` array. We should do so to prevent the two values from getting out of sync. --- src/cfgparse.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/cfgparse.c

Re: [PATCH] CI: enable openssl-3.0.0 builds

2021-06-05 Thread Tim Düsterhus
Ilya, On 6/5/21 5:10 AM, Илья Шипицин wrote: here are two patches: - deprecated warnings suppressed - openssl-3.0.0 enabled In the second patch you forgot the 'CI:' prefix in the commit message. Other than that the patches LGTM with regard to the CI changes. Best regards Tim Düsterhus

[PATCH] DOC: use the req.ssl_sni in examples

2021-06-05 Thread Aleksandar Lazic
Hi. This patch fixes the usage of req_ssl_sni in the doc. Any plan to remove the old keyword or add some warning that this keyword is deprecated? Regards Alex >From 84fe0fa89548c384322f47bc3eb37ea9843d0eb8 Mon Sep 17 00:00:00 2001 From: Alex Date: Sat, 5 Jun 2021 13:23:08 +0200 Subject: