Re: [PATCH] MINOR: Fix checks when connect_conn_chk() fails srv_update_status()

2017-10-25 Thread Willy Tarreau
On Tue, Oct 24, 2017 at 07:14:59PM +0200, Olivier Houchard wrote: > When checks were modified to dynamically allocate a connection, in case > connect_conn_chk() fails, the connection was never free'd, which made the > check unable to run again. I missed this one yesterday. Now merged. thanks, Wil

Re: [PATCH] support Openssl 1.1.1 early callback API for HS

2017-10-25 Thread Emmanuel Hocdet
> Le 25 oct. 2017 à 15:45, Emmanuel Hocdet a écrit : > > > Hi Olivier, > > >> Le 25 oct. 2017 à 14:57, Olivier Houchard a écrit : >> >> On Wed, Oct 25, 2017 at 02:37:58PM +0200, Emmanuel Hocdet wrote: >>> Hi, >>> >>> . patches serie rebase from master >>> . update openssl 1.1.1 api calls

Re: [PATCH] support Openssl 1.1.1 early callback API for HS

2017-10-25 Thread Emmanuel Hocdet
Hi Olivier, > Le 25 oct. 2017 à 14:57, Olivier Houchard a écrit : > > On Wed, Oct 25, 2017 at 02:37:58PM +0200, Emmanuel Hocdet wrote: >> Hi, >> >> . patches serie rebase from master >> . update openssl 1.1.1 api calls with new early callback name >> (https://www.openssl.org/docs/manmaster/m

Re: [PATCH] support Openssl 1.1.1 early callback API for HS

2017-10-25 Thread Olivier Houchard
Hi Emmanuel, On Wed, Oct 25, 2017 at 02:37:58PM +0200, Emmanuel Hocdet wrote: > Hi, > > . patches serie rebase from master > . update openssl 1.1.1 api calls with new early callback name > (https://www.openssl.org/docs/manmaster/man3/SSL_CTX_set_client_hello_cb.html >

Re: [PATCH] support Openssl 1.1.1 early callback API for HS

2017-10-25 Thread Emmanuel Hocdet
Hi,. patches serie rebase from master . update openssl 1.1.1 api calls with new early callback name(https://www.openssl.org/docs/manmaster/man3/SSL_CTX_set_client_hello_cb.html)Le 4 sept. 2017 à 16:39, Emmanuel Hocdet a écrit :Hi Emeric, ChristopherIf you can review when you have t

[PATCH] lua: add regexes

2017-10-25 Thread Thierry Fournier
Hi, This is a patch for lua which adds HAProxy internal regexes support. Thierry >From 4796c98641f14f165db79227db85afc03d587337 Mon Sep 17 00:00:00 2001 From: Thierry FOURNIER Date: Wed, 25 Oct 2017 12:59:51 +0200 Subject: [PATCH] MINOR: hlua: Add regexes class This patch simply add HAProxy int

Re: Fix building haproxy with recent LibreSSL

2017-10-25 Thread Emeric Brun
On 10/24/2017 05:57 PM, Emmanuel Hocdet wrote: > >> Le 3 août 2017 à 10:07, Willy Tarreau mailto:w...@1wt.eu>> a >> écrit : >> >> Hi Bernard, >> >> I'm CCing Emeric since this affects SSL. I have some comments below. >> >> On Tue, Jul 25, 2017 at 05:03:10PM +0200, Bernard Spil wrote: >> >>> --- s

Re: [PATCH] MINOR: ssl: build with recent BoringSSL library

2017-10-25 Thread Emmanuel Hocdet
> Le 24 oct. 2017 à 19:59, Willy Tarreau a écrit : > > On Tue, Oct 24, 2017 at 06:58:43PM +0200, Emmanuel Hocdet wrote: >> It's in #ifdef BORINGSSL and it's an old BoringSSL API call moved to an >> openssl 1.1.0 compat API call. >> It's really part of the patch. > > OK, got it once seen in co

Re: In core.register_service use socket.http block?

2017-10-25 Thread Thierry Fournier
Hi, Luasocket is not compliant with haproxy i/o and blocks the process waiting for the socket response. You should use core.tcp() which provide the same interface that luasocket and it is compliant wit haproxy i/o. Thierry Le 25 octobre 2017 5:37:17 AM aogooc xu a écrit : Use luasocket