Re: [PATCH] BUILD: ssl: fix SSL_OP_NO_SSLv3 with LibreSSL >= 2.3.0

2017-05-23 Thread Cyril Bonté
Hi Emmanuel, Sorry for the delay and for the lack of details in my previous mail. During this week-end I was in a world without computer :) Le 22/05/2017 à 14:31, Emmanuel Hocdet a écrit : Hi Cyril, This patch should fix the build issue Can you check it’s your case? It didn't but now I

HAProxy won't shut down

2017-05-23 Thread Patrick Hemmer
We've been running across a fair amount of haproxy processes lately that won't shut down. We're currently using 1.7.5, but have also experienced the issue with earlier versions, 1.7.2 for sure, but likely back even further. The processes are getting signaled to shut down by the

New feature proposal: Add support for decompressing proxyed gziped requests

2017-05-23 Thread Vasileios Kyrillidis
Hello, We would like to add support for decompressing proxyed gziped requests (i.e. those with "Content-Encoding: gzip") to HAProxy. Would there be interest in such a feature? i.e. is it likely it could be accepted into the main repo? Is anyone else already working on such a feature?

[PATCH] MEDIUM: ssl: disable SSLv3 per default for bind

2017-05-23 Thread Emmanuel Hocdet
Hi,I think it’s time to disable SSLv3 on bind line per default.All configurations should have no-sslv3 (or used a ssllib without sslv3).SSLv3 can be enable with "ssl-min-ver SSLv3.What do you think?Manu* This patch depend of "MINOR: ssl: support ssl-min-ver and ssl-max-ver with crt-list"

Re: haproxy does not capture the complete request header host sometimes

2017-05-23 Thread Aleksandar Lazic
Hi siclesang. siclesang have written on Mon, 22 May 2017 11:11:31 +0800 (CST): > hi > i have a problem:haproxy does not capture the complete request > header host sometimes Which header do you miss? How long is the header? > i run haroxpy with -d for some time > > haproxy -vv > HA-Proxy