Re: [PATC H] adjust vtc for cert revocation check

2021-12-10 Thread William Lallemand 
On Sat, Dec 04, 2021 at 02:45:15PM +0500, Илья Шипицин wrote:
> Subject: [PATC H] adjust vtc for cert revocation check
>
> hello,
> 
> breaking behaviour was introduced on LibreSSL side.
> more details: https://github.com/libressl-portable/portable/issues/697
> 
> in short, currently vtc expects 21, but some openssl variations return 20
> 
> X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE   = 21
> X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY = 20
> 
> cheers,
> Ilya

Thanks, applied.

-- 
William Lallemand

Re: OT: https://www.haproxy.org/ has some broken links

2021-12-10 Thread Willy Tarreau 
On Fri, Dec 10, 2021 at 03:35:34PM +0100, Willy Tarreau wrote:
> > If I browse https://www.haproxy.org/, the links to haproxy.com do not work.
> > Clicking on the banners on the left ("Looking for support?", "Looking for
> > Easy?",...) I land on a 404 not found.
> > 
> > http://www.haproxy.org/external?link=1  -> works
> > https://www.haproxy.org/external?link=1 -> 404
> > 
> > Sorry for the OT
> 
> Thank you for reporting, I'll check!

So in the end I got caught by H2 and an old "url" rule:

   http-request redirect ... if { url /external?link=1 }

This one was used to match both the path and the query string in the
past, but with H2 it's missing the host component so it never matches.
I replaced it with "pathq" instead and now it works.

That's a good reminder to get rid of the "url" directive when H2 is
being used. Unfortunately I don't see any way to warn about this at
config time :-/

Thanks again,
Willy

Re: OT: https://www.haproxy.org/ has some broken links

2021-12-10 Thread Willy Tarreau 
Hi Marco,

On Fri, Dec 10, 2021 at 12:29:00PM +0100, Marco Corte wrote:
> Hi.
> 
> Sorry for the OT
> 
> If I browse https://www.haproxy.org/, the links to haproxy.com do not work.
> Clicking on the banners on the left ("Looking for support?", "Looking for
> Easy?",...) I land on a 404 not found.
> 
> http://www.haproxy.org/external?link=1  -> works
> https://www.haproxy.org/external?link=1 -> 404
> 
> Sorry for the OT

Thank you for reporting, I'll check!

Have a nice week-end,
Willy

OT: https://www.haproxy.org/ has some broken links

2021-12-10 Thread Marco Corte 

Hi.

Sorry for the OT

If I browse https://www.haproxy.org/, the links to haproxy.com do not 
work.
Clicking on the banners on the left ("Looking for support?", "Looking 
for Easy?",...) I land on a 404 not found.


http://www.haproxy.org/external?link=1  -> works
https://www.haproxy.org/external?link=1 -> 404

Sorry for the OT

.marcoc