Re: QUIC with a fcgi backend

2023-07-24 Thread Yaacov Akiba Slama
On 24/07/2023 19:02, Aleksandar Lazic wrote: Are the HAProxy and the FCGI Server on the same host/network or is there any firewall or anything in between? Both run in the same host. In order to reproduce the problem I had with php-fpm, I am using a simple go fcgi server: package main

Re: QUIC with a fcgi backend

2023-07-24 Thread Aleksandar Lazic
Yaacov. On 2023-07-24 (Mo.) 15:08, Christopher Faulet wrote: Le 7/24/23 à 12:24, Yaacov Akiba Slama a écrit : Hi Christopher, Thanks for report. It is not a known issue, but I can confirm it. When H3 HEADERS frames are converted to the internal HTTP representation (HTX), a flag is missing to

Re: QUIC with a fcgi backend

2023-07-24 Thread Christopher Faulet
Le 7/24/23 à 12:24, Yaacov Akiba Slama a écrit : Hi Christopher, Thanks for report. It is not a known issue, but I can confirm it. When H3 HEADERS frames are converted to the internal HTTP representation (HTX), a flag is missing to specify a content-length was found. I pushed a flag, it should

Re: QUIC with a fcgi backend

2023-07-24 Thread Yaacov Akiba Slama
Hi Christopher, Thanks for report. It is not a known issue, but I can confirm it. When H3 HEADERS frames are converted to the internal HTTP representation (HTX), a flag is missing to specify a content-length was found. I pushed a flag, it should be fixed: commit

Re: QUIC with a fcgi backend

2023-07-24 Thread Christopher Faulet
Le 7/22/23 à 21:48, Yaacov Akiba Slama a écrit : Hi, It seems that there is a bug in QUIC when using a fastcgi backend: As soon as the size of the uploaded data is more than bufsize, the server returns 400 Bad request and shows PH-- in the logs. The problem occurs with both haproxy 2.8.1 and

Re: Old style OCSP not working anymore?

2023-07-24 Thread wlallem...@haproxy.com
On Mon, Jul 24, 2023 at 07:21:16AM +, Jarno Huuskonen wrote: > Hello, > > On Fri, 2023-07-21 at 17:31 +0200, Remi Tricot-Le Breton wrote: > > I found the faulty commit for Jarno's issue ("cc346678d MEDIUM: ssl: Add > > ocsp_certid in ckch structure and discard ocsp buffer early"). > > Here's

Re: Old style OCSP not working anymore?

2023-07-24 Thread Jarno Huuskonen
Hello, On Fri, 2023-07-21 at 17:31 +0200, Remi Tricot-Le Breton wrote: > I found the faulty commit for Jarno's issue ("cc346678d MEDIUM: ssl: Add > ocsp_certid in ckch structure and discard ocsp buffer early"). > Here's a patch that should fix it. If you want to try it with your > setups be my