[PATCH] MINOR: systemd: Include MONOTONIC_USEC field in RELOADING=1 message

2024-04-03 Thread Tim Duesterhus
As per the `sd_notify` manual: > A field carrying the monotonic timestamp (as per CLOCK_MONOTONIC) formatted > in decimal in μs, when the notification message was generated by the client. > This is typically used in combination with "RELOADING=1", to allow the > service manager to properly

[PATCH 1/1] CI: extend Fedora Rawhide, add m32 mode

2024-04-03 Thread Ilya Shipitsin
hopefully it will allow to catch regressions like this https://github.com/haproxy/haproxy/commit/e41638a --- .github/workflows/fedora-rawhide.yml | 18 -- 1 file changed, 12 insertions(+), 6 deletions(-) diff --git a/.github/workflows/fedora-rawhide.yml

[PATCH 0/1] CI: extend Fedora Rawhide to run x86 bit as well

2024-04-03 Thread Ilya Shipitsin
it seems to be the easiest to build "m32" on Fedora comparing to Ubuntu, let's stick on that for a while Ilya Shipitsin (1): CI: extend Fedora Rawhide, add m32 mode .github/workflows/fedora-rawhide.yml | 18 -- 1 file changed, 12 insertions(+), 6 deletions(-) -- 2.44.0

Re: How to check if a domain is known to HAProxy

2024-04-03 Thread Shawn Heisey
On 4/3/24 06:02, Froehlich, Dominik wrote: I fear that strict-sni won’t get us far. The issue is that the SNI is just fine (it is in the crt-list), however we also need to check if the host-header is part of the crt-list. E.g. William's answer should work. The strict-sni setting makes sure

Re: How to check if a domain is known to HAProxy

2024-04-03 Thread Froehlich, Dominik
Hello Willian, Thank you for your response. I fear that strict-sni won’t get us far. The issue is that the SNI is just fine (it is in the crt-list), however we also need to check if the host-header is part of the crt-list. E.g. curl https://my-host.domain.com -H

[PATCH] DOC: configuration: grammar fixes for strict-sni

2024-04-03 Thread Nicolas CARPi
Hello, Please find attached a little patch for the "strict-sni" configuration documentation, which had incorrect grammar. Best, ~Nicolas >From 077761ca4b9b3b420ad1f635179cd747dfb7a8eb Mon Sep 17 00:00:00 2001 From: Nicolas CARPi Date: Wed, 3 Apr 2024 13:43:59 +0200 Subject: [PATCH] DOC:

Re: How to check if a domain is known to HAProxy

2024-04-03 Thread William Lallemand
On Wed, Apr 03, 2024 at 07:47:44AM +, Froehlich, Dominik wrote: > Subject: How to check if a domain is known to HAProxy > Hello everyone, > > This may be kind of a peculiar request. > > We have the need to block requests that are not in the crt-list of our > frontend. > > So, the

How to check if a domain is known to HAProxy

2024-04-03 Thread Froehlich, Dominik
Hello everyone, This may be kind of a peculiar request. We have the need to block requests that are not in the crt-list of our frontend. So, the expectation would be that HAProxy does a lookup of the domain (as it does for the crt-list entry) but for domain-fronted requests, i.e. we have to