Re: Buffer limits when adding a large number of CA certs into one ca-file via socket

2022-08-17 Thread Lais, Alexander
Dear William, Thank you. We will adjust our planning accordingly. Kind regards, Alex > On 16. Aug 2022, at 15:24, William Lallemand wrote: > > On Tue, Aug 16, 2022 at 11:16:43AM +, Lais, Alexander wrote: >> Hi William, >> >> Thank you! I figured you were on holidays. A lot of our team

Re: Buffer limits when adding a large number of CA certs into one ca-file via socket

2022-08-16 Thread William Lallemand
On Tue, Aug 16, 2022 at 11:16:43AM +, Lais, Alexander wrote: > Hi William, > > Thank you! I figured you were on holidays. A lot of our team are as well. > > Do you see this being back ported to 2.5 / 2.6 (LTS) as well? Unfortunately we usually don't backport this kind of features as this is

Re: Buffer limits when adding a large number of CA certs into one ca-file via socket

2022-08-16 Thread Lais, Alexander
Hi William, Thank you! I figured you were on holidays. A lot of our team are as well. Do you see this being back ported to 2.5 / 2.6 (LTS) as well? Thanks and kind regards, Alex > On 16. Aug 2022, at 11:07, William Lallemand wrote: > > On Thu, Aug 04, 2022 at 11:57:16AM +, Lais,

Re: Buffer limits when adding a large number of CA certs into one ca-file via socket

2022-08-16 Thread William Lallemand
On Thu, Aug 04, 2022 at 11:57:16AM +, Lais, Alexander wrote: > Hi William, > > thanks again for the PoC you referenced in the GitHub issue. > This would solve the use case for us and would fix the ca-cert editing / > updating feature introduced in HAProxy 2.5. > > Can we support further

Re: Buffer limits when adding a large number of CA certs into one ca-file via socket

2022-07-29 Thread William Lallemand
On Tue, Jul 26, 2022 at 03:04:41PM +, Lais, Alexander wrote: > Dear all, > > We are now using the new feature of adding CA files dynamically via the stats > / admin socket. > > Assuming that the CA file does not exist yet, our understanding is that we: > > 1. Create a CA file (new ssl