Re: [PATCH] guard "ERR_func_error_string" for OpenSSL-3.0.0 no deprecated mode

2021-09-24 Thread Илья Шипицин
пт, 24 сент. 2021 г. в 20:23, Willy Tarreau : > On Fri, Sep 24, 2021 at 08:09:29PM +0500, ??? wrote: > > ??, 24 . 2021 ?. ? 19:49, Willy Tarreau : > > > > > On Fri, Sep 24, 2021 at 07:14:40PM +0500, ??? wrote: > > > > > I'd really prefer that we address all this API stuff

Re: [PATCH] guard "ERR_func_error_string" for OpenSSL-3.0.0 no deprecated mode

2021-09-24 Thread Willy Tarreau
On Fri, Sep 24, 2021 at 08:09:29PM +0500, ??? wrote: > ??, 24 . 2021 ?. ? 19:49, Willy Tarreau : > > > On Fri, Sep 24, 2021 at 07:14:40PM +0500, ??? wrote: > > > > I'd really prefer that we address all this API stuff through the > > > > openssl-compat stuff, so that over

Re: [PATCH] guard "ERR_func_error_string" for OpenSSL-3.0.0 no deprecated mode

2021-09-24 Thread Willy Tarreau
On Fri, Sep 24, 2021 at 08:25:23PM +0500, ??? wrote: > I thought that it would be overcomplicating, but I've got your idea. > I will send v2 this weekend or early next week Thank you :-) No rush anyway. Willy

Re: AW: Disabling HTTP/1.1 pipelining

2021-09-24 Thread Christopher Faulet
Le 9/21/21 à 6:00 PM, Stefan Behte a écrit : Hi Christopher, thank you for the hint, I'm aware of the different ways to mitigate DDoS with rate limits etc., I was just curious about the pipelining vector. :) http://www.haproxy.org/download/2.4/doc/configuration.txt says: " By default HAProxy

Re: [PATCH] CLEANUP: slz: Mark `reset_refs` as static

2021-09-24 Thread Tim Düsterhus
Willy, On 9/24/21 3:09 PM, Willy Tarreau wrote: please also apply to https://github.com/wtarreau/libslz/. [...] Now applied, thanks! Not seeing anything in the libslz repository yet. Did you forget to push? :-) Best regards Tim Düsterhus

Re: [PATCH] CLEANUP: slz: Mark `reset_refs` as static

2021-09-24 Thread Willy Tarreau
On Fri, Sep 24, 2021 at 03:33:14PM +0200, Tim Düsterhus wrote: > Willy, > > On 9/24/21 3:09 PM, Willy Tarreau wrote: > > > please also apply to https://github.com/wtarreau/libslz/. > > > [...] > > > > Now applied, thanks! > > Not seeing anything in the libslz repository yet. Did you forget to

Re: [PR] Using standard 'OOM' instead of 'Out of Memory'

2021-09-24 Thread Willy Tarreau
Hello, On Sat, Sep 18, 2021 at 05:23:01PM +0200, PR Bot wrote: > Dear list! > > Author: SuvP > Number of patches: 1 > > This is an automated relay of the Github pull request: >Using standard 'OOM' instead of 'Out of Memory' > > Patch title(s): >Using standard 'OOM' instead of 'Out of

Re: [PATCH] guard "ERR_func_error_string" for OpenSSL-3.0.0 no deprecated mode

2021-09-24 Thread Willy Tarreau
Hi Ilya, On Mon, Sep 20, 2021 at 10:37:04PM +0500, ??? wrote: > Subject: [PATCH] BUILD: SSL: function "ERR_func_error_string" is deprecated in > OpenSSL-3.0.0 > > let us prepare for using OpenSSL-3.0.0 in no deprecation mode > --- > src/ssl_sock.c | 7 ++- > 1 file changed, 6

Re: [PR] Using standard 'OOM' instead of 'Out of Memory'

2021-09-24 Thread Suvarna Pattayil
Hi, Yes, it does make sense. The original issue actually pertains to making the messages uniform. To do this, a better approach is to see the individual .c files. Each one of then have a different format of the error message and try to unify those. Thanks, Suvarna 'SuvP' Pattayil On Fri, 24

Re: [PATCH] guard "ERR_func_error_string" for OpenSSL-3.0.0 no deprecated mode

2021-09-24 Thread Илья Шипицин
пт, 24 сент. 2021 г. в 18:44, Willy Tarreau : > Hi Ilya, > > On Mon, Sep 20, 2021 at 10:37:04PM +0500, ??? wrote: > > Subject: [PATCH] BUILD: SSL: function "ERR_func_error_string" is > deprecated in > > OpenSSL-3.0.0 > > > > let us prepare for using OpenSSL-3.0.0 in no deprecation mode

Re: [PATCH] CLEANUP: slz: Mark `reset_refs` as static

2021-09-24 Thread Willy Tarreau
Hi Tim, On Mon, Sep 20, 2021 at 07:59:42PM +0200, Tim Duesterhus wrote: > Willy, > > please also apply to https://github.com/wtarreau/libslz/. > Best regards > Tim Düsterhus > > Apply with `git am --scissors` to automatically cut the commit message. > > -- >8 -- > This function has no

Re: AW: Disabling HTTP/1.1 pipelining

2021-09-24 Thread Willy Tarreau
On Fri, Sep 24, 2021 at 10:05:19AM +0200, Christopher Faulet wrote: > > So I guess I did just misunderstand the documentation and it would be nice > > to just clarify it in the docs that haproxy does not support HTTP/1.1 > > pipelining. > > I agree. Pipelining should at least be removed from

[ANNOUNCE] haproxy-2.5-dev8

2021-09-24 Thread Willy Tarreau
Hi, HAProxy 2.5-dev8 was released on 2021/09/24. It added 200 new commits after version 2.5-dev7. This version looks huge because Fred and Amaury merged a large number of QUIC/H3 patches (~140 patches, no less!). The code is still in development state with bugs, known limitations and even

Re: [PATCH] guard "ERR_func_error_string" for OpenSSL-3.0.0 no deprecated mode

2021-09-24 Thread Willy Tarreau
On Fri, Sep 24, 2021 at 07:14:40PM +0500, ??? wrote: > > I'd really prefer that we address all this API stuff through the > > openssl-compat stuff, so that over time we can more easily drop > > unneeded stuff. Above that could be done this way: > > > > #if (OPENSSL_VERSION_NUMBER >=

Re: [PR] Using standard 'OOM' instead of 'Out of Memory'

2021-09-24 Thread Willy Tarreau
Hi, On Fri, Sep 24, 2021 at 07:36:20PM +0530, Suvarna Pattayil wrote: > Hi, > > Yes, it does make sense. The original issue actually pertains to making the > messages uniform. But why ? Most of them are just partial messages that are combined in larger and more detailed messages, like "parsing

Re: haproxy and CARP - binding a frontend to a specific IP on the backup-server

2021-09-24 Thread Willy Tarreau
Hi Rainer, On Fri, Sep 17, 2021 at 11:22:02AM +0200, rai...@ultra-secure.de wrote: > Hi, > > I run two FreeBSD 12.2 servers with haproxy 2.0.22 in a CARP setup. > > The frontend-interfaces have multiple IPs and I need to have this statement > in at least one backend service: > > source

Re: [PATCH] guard "ERR_func_error_string" for OpenSSL-3.0.0 no deprecated mode

2021-09-24 Thread Илья Шипицин
пт, 24 сент. 2021 г. в 19:49, Willy Tarreau : > On Fri, Sep 24, 2021 at 07:14:40PM +0500, ??? wrote: > > > I'd really prefer that we address all this API stuff through the > > > openssl-compat stuff, so that over time we can more easily drop > > > unneeded stuff. Above that could be done