Re: [PATCH[ re-enable cygwin CI builds (Github Actions)

чт, 23 янв. 2020 г. в 15:20, Willy Tarreau : > On Wed, Jan 22, 2020 at 11:10:05PM +0100, Tim Düsterhus wrote: > > > both travis and github actions do offer 4 parallel builds, while > cirrus and > > > app veyor offer 1 parallel build. > > > > Parallel Builds just improve test speed. I don't

Re: arm64 builds?

чт, 23 янв. 2020 г. в 15:14, Willy Tarreau : > On Thu, Jan 23, 2020 at 01:09:22PM +0500, ??? wrote: > > hello, > > > > I tried to build using cross compiler (arm32 on amd64). sorry for > > screenshot. > > Willy, do you mean errors like that ? > > So for those not seeing the screenshot,

Re: arm64 builds?

hello, I tried to build using cross compiler (arm32 on amd64). sorry for screenshot. Willy, do you mean errors like that ? [image: Screenshot from 2020-01-23 13-03-49.png] ср, 6 нояб. 2019 г. в 12:26, Willy Tarreau : > Hi Ilya, > > On Tue, Nov 05, 2019 at 07:20:43PM +0500, ???

Re: [PATCH v3] BUG/MINOR: dns: allow 63 char in hostname

such things are fragile. once fixed, they can silently break during further refactoring. on other hand, such functions are good candidates to write unit tests. maybe we should consider things like cmocka ? вс, 26 янв. 2020 г. в 22:44, William Dauchy : > hostname were limited to 62 char, which

Re: [PATCH v3] BUG/MINOR: dns: allow 63 char in hostname

вс, 26 янв. 2020 г. в 23:12, William Dauchy : > On Sun, Jan 26, 2020 at 7:08 PM Илья Шипицин wrote: > > such things are fragile. once fixed, they can silently break during > further refactoring. > > on other hand, such functions are good candidates to write unit tests

Re: Disabling regtests in Travis ?

btw, we can remove "allowed failure" since this test is slow and excluded https://travis-ci.com/haproxy/haproxy/jobs/280882138 пн, 27 янв. 2020 г. в 17:35, Martin Grigorov : > > > On Fri, Jan 24, 2020 at 6:43 PM Willy Tarreau wrote: > >> On Fri, Jan 24, 2020 at 09:12:58PM +0500, ???

Re: Lua detection on aarch64

I'm stupid. I took %{?el8:BuildRequires: lua-devel} %{?el7:BuildRequires: lua53-static} %{?el7:BuildRequires: lua53-devel} obviously, it does not contain fedora ср, 29 янв. 2020 г. в 19:54, William Lallemand : > On Wed, Jan 29, 2020 at 02:34:19PM +0500, Илья Шипицин wrote: > > Hello,

how to properly reload haproxy (from systemd + master-worker) ?

Hello, I'm playing with RPM built here: https://copr.fedorainfracloud.org/coprs/roidelapluie/haproxy/ it is shipped with systemd unit: ExecReload=/usr/sbin/haproxy -f $CONFIG -c -q ExecReload=/bin/kill -USR2 $MAINPID actually it works. however, if I add dataplane api:

Re: how to properly reload haproxy (from systemd + master-worker) ?

btw, is it possible to configure haproxy "to run either with or without configured program" ? actually, I'm ok if it will start even if dataplane api failed. вс, 2 февр. 2020 г. в 22:58, Tim Düsterhus : > Ilya, > > Am 02.02.20 um 18:52 schrieb Илья Шипицин: > > Feb 02

Re: how to properly reload haproxy (from systemd + master-worker) ?

20:50:07 xxx systemd[1]: Unit haproxy.service entered failed state. Feb 02 20:50:07 xxx systemd[1]: haproxy.service failed. [root@xxx ~]# вс, 2 февр. 2020 г. в 19:18, Tim Düsterhus : > Ilya, > > Am 02.02.20 um 14:54 schrieb Илья Шипицин: > > haproxy terminates on "systemctl rel

Re: how to properly reload haproxy (from systemd + master-worker) ?

Ilya, > > Am 02.02.20 um 18:52 schrieb Илья Шипицин: > > Feb 02 20:50:07 xxx haproxy[2851]: [NOTICE] 032/205007 (2851) : New > worker > > #1 (2897) forked > > Feb 02 20:50:07 xxx haproxy[2851]: [ALERT] 032/205007 (2851) : Current > > program 'api' (2896) exited

Re: how to properly reload haproxy (from systemd + master-worker) ?

вт, 4 февр. 2020 г. в 00:20, William Lallemand : > On Sun, Feb 02, 2020 at 11:23:09PM +0500, Илья Шипицин wrote: > > btw, is it possible to configure haproxy "to run either with or without > > configured program" ? > > > > It's not possible. > &g

[PATCH] add workaround to cirrus-ci

Hello, I attached a workaround to recent cirrus-ci failures. also, few improvements. Cheers, Ilya Shipitcin From bbefa0574b0e3b8e872422f9419a458928a433d0 Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Sat, 8 Feb 2020 13:30:54 +0500 Subject: [PATCH] cirrus-ci: workaround "pkg install" bug

Re: [PATCH[ re-enable cygwin CI builds (Github Actions)

чт, 23 янв. 2020 г. в 15:20, Willy Tarreau : > On Wed, Jan 22, 2020 at 11:10:05PM +0100, Tim Düsterhus wrote: > > > both travis and github actions do offer 4 parallel builds, while > cirrus and > > > app veyor offer 1 parallel build. > > > > Parallel Builds just improve test speed. I don't

Re: [PATCH[ re-enable cygwin CI builds (Github Actions)

чт, 23 янв. 2020 г. в 20:54, Willy Tarreau : > On Thu, Jan 23, 2020 at 08:40:19PM +0500, ??? wrote: > > those timeouts are not related to travis itself, I beleive they are > mostly > > related to either real failures or tests instability (race condition). > > These tests are racy by

Re: arm64 builds?

чт, 23 янв. 2020 г. в 15:14, Willy Tarreau : > On Thu, Jan 23, 2020 at 01:09:22PM +0500, ??? wrote: > > hello, > > > > I tried to build using cross compiler (arm32 on amd64). sorry for > > screenshot. > > Willy, do you mean errors like that ? > > So for those not seeing the screenshot,

Re: Disabling regtests in Travis ?

пт, 24 янв. 2020 г. в 20:34, Willy Tarreau : > On Fri, Jan 24, 2020 at 04:31:07PM +0100, Willy Tarreau wrote: > > So I'm proposing that we try a last time to run with > > "REGTESTS_TYPES=default,bug,devel" > > That should probably give this : > > diff --git a/.travis.yml b/.travis.yml > index

Re: Disabling regtests in Travis ?

пт, 24 янв. 2020 г. в 20:44, Илья Шипицин : > > > пт, 24 янв. 2020 г. в 20:34, Willy Tarreau : > >> On Fri, Jan 24, 2020 at 04:31:07PM +0100, Willy Tarreau wrote: >> > So I'm proposing that we try a last time to run with >> > "REGTESTS_TYPES=default,b

Re: arm64 builds?

чт, 23 янв. 2020 г. в 23:17, Willy Tarreau : > On Thu, Jan 23, 2020 at 10:59:00PM +0500, ??? wrote: > > > Could you please try to use (size_t) instead of (unsigned int) ? If > it's > > > enough to shut it up, I'm fine with doing that change. Otherwise we'll > > > probably get rid of that

Re: arm64 builds?

пт, 24 янв. 2020 г. в 00:54, Willy Tarreau : > On Fri, Jan 24, 2020 at 12:46:12AM +0500, ??? wrote: > > > diff --git a/Makefile b/Makefile > > > index 8399f6ca35..4757bc77e6 100644 > > > --- a/Makefile > > > +++ b/Makefile > > > @@ -199,6 +199,7 @@ SPEC_CFLAGS += $(call >

Re: Disabling regtests in Travis ?

вт, 28 янв. 2020 г. в 16:02, Willy Tarreau : > On Tue, Jan 28, 2020 at 02:13:15PM +0500, ??? wrote: > > btw, we can remove "allowed failure" since this test is slow and excluded > > > > https://travis-ci.com/haproxy/haproxy/jobs/280882138 > > My understanding of the commit message was

Re: Disabling regtests in Travis ?

вт, 28 янв. 2020 г. в 18:15, Willy Tarreau : > On Tue, Jan 28, 2020 at 06:02:16PM +0500, ??? wrote: > > ??, 28 ???. 2020 ?. ? 16:02, Willy Tarreau : > > > > > On Tue, Jan 28, 2020 at 02:13:15PM +0500, ??? wrote: > > > > btw, we can remove "allowed failure" since this test is

Lua detection on aarch64

Hello, I started to work on rpm packages. I also applied at Linaro for arm64 vm (request is not completed yet). interesting that Lua is not detected: https://copr-be.cloud.fedoraproject.org/results/chipitsine/haproxy-rpm/fedora-31-aarch64/01207488-haproxy/builder-live.log.gz Martin, do you

Re: [PATCH] CLEANUP: Remove unused static function `free_dcache`

it is the last warning in travis-ci. we may consider adding ERR=1 ср, 5 февр. 2020 г. в 21:22, Tim Duesterhus : > The function was change to be static in commit > 6c39198b57566ddfc5368e481d2a7cf8111d, but even that commit > no longer uses it. The purpose of the change vs. outright removal >

Re: [PATCH] compression/lua_validation.vtc depends on "which" utility

when specifying "shell" in vtc, can we require posix /bin/sh ? or is it by chance ? shell { HOST=${h1_fe1_addr} if [ "${h1_fe1_addr}" = "::1" ] ; then HOST="\[::1\]" fi md5=$(which md5 || which md5sum) вт, 18 февр. 2020 г. в 18:24, Willy Tarreau : > On Tue, Feb 18,

[PATCH[ partially enable s390x builds in travis-ci

Hello, I enabled s390x builds except reg-tests/seamless-reload/abns_socket.vtc Cheers, Ilya Shipitcin From 8924057b8a25cf8f6595929f4b18fec1a85a10c5 Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Wed, 19 Feb 2020 23:47:56 +0500 Subject: [PATCH] BUILD: travis-ci: enable s390x builds

Re: haproxy 2.1.2 and 2.1.3

useful things to debug would be 1) haorpxy -vv 2) config 3) bt full can you please open a github issue at https://github.com/haproxy/haproxy/issues ? пт, 21 февр. 2020 г. в 13:55, : > Hi all, > > > > At this moment we’re using HA-Proxy version 2.0.0 2019/06/16 - > https://haproxy.org/ > >

[PATCH] travis-ci: remove "allow failures", add ERR=1, modernize build-ssl.sh script

Hello, I split patch into separate patches. cheers, Ilya Shipitcin From 17b0b5fae3afe6df42e938073ccf8d7a2105fbb7 Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Tue, 11 Feb 2020 14:29:41 +0500 Subject: [PATCH 1/3] BUILD: travis-ci: no more allowed failures for openssl-1.0.2 since 23fb037

Re: [PATCH] add workaround to cirrus-ci

Hello, here's patch split into 3 patches. вт, 11 февр. 2020 г. в 12:17, Willy Tarreau : > On Tue, Feb 11, 2020 at 12:14:47PM +0500, ??? wrote: > > I will send patch series soon. > Thank you! > willy > From e47087ecaea0aa32475593afbf460dc0cf72c1f9 Mon Sep 17 00:00:00 2001 From: Ilya

Re: [PATCH] AIX 7.2 support

there's AIX related build guide https://github.com/haproxy/haproxy/blob/master/INSTALL#L512-L517 maybe it should be updated as well пн, 10 февр. 2020 г. в 16:45, Chris : > Hi Willy, > > thanks a lot for your input and sorry for the delay. Work is pretty > rough right now... > > > Thank you for

Re: [PATCH] compression/lua_validation.vtc depends on "which" utility

вс, 16 февр. 2020 г. в 01:55, Tim Düsterhus : > Ilya, > > Am 15.02.20 um 20:38 schrieb Илья Шипицин: > > that utility is not available by default in Fedora docker image. > > I believe we can rewrite that test to use the `type` builtin instead of > `which`: > is it

Re: [PATCH 2/2] CLEANUP: namespace: remove uneeded ns check in my_socketat

чт, 13 февр. 2020 г. в 01:26, William Dauchy : > we check ns variable but we don't use it later > we "use" it. depending on true/false we either return -1 or not > > Signed-off-by: William Dauchy > --- > src/namespace.c | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > > diff --git

[PATCH] add ERR=1 to cygwin builds

Hello, another CI hardening. Cheers, Ilya Shipitcin From 64bf8ef27486feb6e12b183d563b887473afb4cf Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Sat, 15 Feb 2020 18:58:22 +0500 Subject: [PATCH 1/2] BUILD: enable ERR=1 in github cygwin builds --- .github/workflows/windows-latest.yml | 2

[PATCH] compression/lua_validation.vtc depends on "which" utility

Hello, that utility is not available by default in Fedora docker image. Cheers, Ilya Shipitcin From fd8045f2f6a3c455642dc797ae6ac838f66529a6 Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Sun, 16 Feb 2020 00:34:10 +0500 Subject: [PATCH] REGTESTS: add dependency

Re: [PATCH] BUG/MINOR: ssl: Stop passing dynamic strings as format arguments

It happens because we now run ERR=1 in ci builds On Wed, Feb 19, 2020, 3:41 PM Tim Duesterhus wrote: > gcc complains rightfully: > > src/ssl_sock.c: In function ‘ssl_load_global_issuers_from_path’: > src/ssl_sock.c:9860:4: warning: format not a string literal and no format > arguments

is it allowed to bind both http and https on the same port ?

hello, while playing with dataplane api (I copy-pasted code), accidentally I created the following config frontend git_example_com_https_frontend mode http bind 10.216.7.1:7080 name http bind 10.216.7.1:7080 name https crt /etc/haproxy/bundle.pem ssl alpn h2,http/1.1 default_backend

Re: how to properly reload haproxy (from systemd + master-worker) ?

I confirm that adding "no option start-on-reload" resolves the reload issue. I'll report to dataplane documentation. вт, 4 февр. 2020 г. в 16:01, William Lallemand : > On Tue, Feb 04, 2020 at 12:48:18AM +0500, Илья Шипицин wrote: > > > > вс, 2 февр. 2020

[PATCH] CLEANUP: remove unused functions from openssl-compat level

Hello, while investigating #429, I've found some unused functions. let us remove them. Cheers, Ilya Shipitcin From 4b882141a1e8e364aa5339c5090bf40a673876aa Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Thu, 13 Feb 2020 14:07:36 +0500 Subject: [PATCH] CLEANUP:

Re: [PATCH] MINOR: ssl: add "issuers-chain-path" directive.

вт, 18 февр. 2020 г. в 21:44, Emmanuel Hocdet : > > > Le 18 févr. 2020 à 14:36, William Lallemand a > écrit : > > > > On Tue, Feb 18, 2020 at 01:58:39PM +0100, Emmanuel Hocdet wrote: > >> > >>> Le 18 févr. 2020 à 11:45, Emmanuel Hocdet a écrit : > >>> > Can you add a little bit of

Re: [PATCH] CLEANUP: server: remove unused err section in server_finalize_init

btw, if you add "Fixes: #438", the issue will be closed automatically https://help.github.com/en/github/managing-your-work-on-github/closing-issues-using-keywords чт, 9 янв. 2020 г. в 01:33, William Dauchy : > Since commit 980855bd953c ("BUG/MEDIUM: server: initialize the orphaned > conns lists

Re: ARM(64) builds

Hello, Martin! btw, just curious, how is Apache Foundation (or you personally) interested in all that ? please do not blame me, I really like to know. чт, 16 янв. 2020 г. в 12:32, Martin Grigorov : > Hello HAProxy developers, > > At work we are going to use more and more ARM64 based servers

Re: ARM(64) builds

чт, 16 янв. 2020 г. в 13:26, Martin Grigorov : > Hi Илья, > > On Thu, Jan 16, 2020 at 10:19 AM Илья Шипицин > wrote: > >> >> Hello, Martin! >> >> btw, just curious, how is Apache Foundation (or you personally) >> interested in all that ? >> ple

Re: ARM(64) builds

чт, 16 янв. 2020 г. в 13:37, Илья Шипицин : > > > чт, 16 янв. 2020 г. в 13:26, Martin Grigorov : > >> Hi Илья, >> >> On Thu, Jan 16, 2020 at 10:19 AM Илья Шипицин >> wrote: >> >>> >>> Hello, Martin! >>> >>> btw, ju

Re: [PATCH] BUG/MINOR: dns: Make dns_query_id_seed unsigned

how noisy is ubsan ? should we add it to CI ? сб, 18 янв. 2020 г. в 06:07, Tim Duesterhus : > Left shifting of large signed values and negative values is undefined. > > In a test script clang's ubsan rightfully complains: > > > runtime error: left shift of 1934242336581872173 by 13 places cannot

[PATCH] improving ssl defines

Hello, let us switch to constants check, not versions. cheers, Ilya Shipitcin From a8b68e746bb71c4fee65a05bea8287ad970c979c Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Sat, 18 Jan 2020 18:42:45 +0500 Subject: [PATCH] BUG/MINOR: ssl: fix build on openssl-1.1.0 while working on issue

Re: ARM(64) builds

вс, 19 янв. 2020 г. в 13:13, Martin Grigorov : > Hi, > > On Sat, Jan 18, 2020, 22:10 Илья Шипицин wrote: > >> tests on ARM64 randomly fail >> https://travis-ci.com/chipitsine/haproxy/jobs/277236120 >> >> (after restart there's a good chance to success

Re: ARM(64) builds

tests on ARM64 randomly fail https://travis-ci.com/chipitsine/haproxy/jobs/277236120 (after restart there's a good chance to success) сб, 18 янв. 2020 г. в 09:52, Martin Grigorov : > > > On Fri, Jan 17, 2020 at 11:17 PM Martin Grigorov < > martin.grigo...@gmail.com> wrote: > >> >> >> On Fri,

Re: [PATCH] BUG/MINOR: dns: Make dns_query_id_seed unsigned

вс, 19 янв. 2020 г. в 14:09, Willy Tarreau : > On Sun, Jan 19, 2020 at 12:38:43PM +0500, ??? wrote: > > > > how noisy is ubsan ? should we add it to CI ? > > > > > > > > > > No idea. I created a dedicated test executable and copied over the > > > implementation to avoid needing to

[PATCH] better anti replay check

Hello, let us check constants, not openssl versions. Cheers, Ilya Shipitcin From eab262bda04f0f0caf8020a6837a75cdd5821e94 Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Sun, 19 Jan 2020 12:20:14 +0500 Subject: [PATCH] BUILD: ssl: more elegant anti-reply feature presence check ---

[PATCH] introduce ARM64 travis-ci builds

hello, sometimes arm64 builds fails, I think it is good chance to introduce regular builds and fix them. also, few small improvements. cheers, Ilya Shipicin From e13a8d0e0e324c49f6a34d74b889a1c3fae6b6d9 Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Sun, 19 Jan 2020 12:14:02 +0500

Re: [PATCH] BUG/MINOR: dns: Make dns_query_id_seed unsigned

сб, 18 янв. 2020 г. в 15:30, Tim Düsterhus : > Ilya, > > Am 18.01.20 um 10:02 schrieb Илья Шипицин: > > how noisy is ubsan ? should we add it to CI ? > > > > No idea. I created a dedicated test executable and copied over the > implementation to avoid needing t

Re: freebsd ci is broken - commit 08fa16e - curl download stalls in reg-tests/compression/lua_validation.vtc

14-1-2020 om 07:48 schreef Илья Шипицин: > > Hello, > > since > > https://github.com/haproxy/haproxy/commit/08fa16e397ffb1c6511b98ade2a3bfff9435e521 > > freebsd CI is red: https://cirrus-ci.com/task/5960933184897024 > > I'd say "it is something with CI itself

Re: freebsd ci is broken - commit 08fa16e - curl download stalls in reg-tests/compression/lua_validation.vtc

ср, 15 янв. 2020 г. в 04:18, PiBa-NL : > Hi Ilya, Willy, > > Op 14-1-2020 om 21:40 schreef Илья Шипицин: > > PiBa, how many CPU cores are you running ? > > > > it turned out that I run tests on very low vm, which only has 1 core. > > and tests pass. > > cirr

Re: [PATCH] improving ssl defines

ср, 22 янв. 2020 г. в 11:24, Willy Tarreau : > Hi Ilya, > > On Sat, Jan 18, 2020 at 06:47:48PM +0500, ??? wrote: > > Hello, > > > > let us switch to constants check, not versions. > > > > cheers, > > Ilya Shipitcin > > > From a8b68e746bb71c4fee65a05bea8287ad970c979c Mon Sep 17 00:00:00

Re: [PATCH] introduce ARM64 travis-ci builds

ср, 22 янв. 2020 г. в 10:49, Willy Tarreau : > On Sun, Jan 19, 2020 at 12:18:00PM +0500, ??? wrote: > > hello, > > > > sometimes arm64 builds fails, I think it is good chance to introduce > > regular builds > > and fix them. > > > > also, few small improvements. > occasionely, I

[PATCH] temporarily mark openssl-1.0.2 builds as allowed failure

Hello, this is a follow up patch for the recent travis-ci improvement. Cheers, Ilya Shipitcin From f13c8cd8c28d376c914cee24ac9b7e09a7203473 Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Wed, 22 Jan 2020 15:23:51 +0500 Subject: [PATCH] BUILD: CI: temporarily mark openssl-1.0.2 as allowed

[PATCH[ re-enable cygwin CI builds (Github Actions)

Hello, I spent lots of time trying to get cygwin on travis working. no luck. let us move it to Github Actions. as far as I tried no extra step are required for enabling, just proper file in .github/workflows (attached in patch). Cheers, Ilya Shipitcin From

Re: [PATCH[ re-enable cygwin CI builds (Github Actions)

чт, 23 янв. 2020 г. в 02:59, Tim Düsterhus : > Ilya, > > Am 22.01.20 um 22:41 schrieb Илья Шипицин: > > let us move it to Github Actions. > > as far as I tried no extra step are required for enabling, just proper > file > > in > > > > .github/workflows

Re: [PATCH[ re-enable cygwin CI builds (Github Actions)

чт, 23 янв. 2020 г. в 03:10, Tim Düsterhus : > Ilya, > > Am 22.01.20 um 23:04 schrieb Илья Шипицин: > >> Yes, that's my understanding of GitHub actions as well. However I > >> dislike having three types of CI (Travis, Cirrus and GitHub Actions). > >> Can Tr

Re: ARM(64) builds

привет! пт, 17 янв. 2020 г. в 11:42, Martin Grigorov : > Привет Илья, > > On Thu, Jan 16, 2020 at 10:37 AM Илья Шипицин > wrote: > >> >> >> чт, 16 янв. 2020 г. в 13:26, Martin Grigorov : >> >>> Hi Илья, >>> >>> On Thu, Jan

Re: ARM(64) builds

ssed (after few failures due to timing > issues (I guess) > timing out might happen because of https://github.com/haproxy/haproxy/commit/ac8147446c7a3d1aa607042bc782095b03bc8dc4 your fork is 16 commits behind current master. try to rebase to master > > >> Regards, >> Marti

[PATCH] adapt regtest for travis-ci

Hello, for some reason "echo -e" does not work at least in travis-ci. as discussed in #423 it is good to use "printf" instead. Cheers, Ilya Shipitcin From e0ae24b754b6f660b0d942df25ed1e0bfe189967 Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Wed, 8 Jan 2020 22:56:30 +0500 Subject: [PATCH]

freebsd ci is broken

Hello, since https://github.com/haproxy/haproxy/commit/08fa16e397ffb1c6511b98ade2a3bfff9435e521 freebsd CI is red: https://cirrus-ci.com/task/5960933184897024 I'd say "it is something with CI itself", when I run the same tests locally on freebsd, it is green. PiBa ? thanks, Ilya Shipitcin

learning SSL stuff

Hello, while working on #429, I noticed strange things that I do not understand for example if (ecdhe == NULL) { (void)SSL_CTX_set_ecdh_auto(ctx, 1); return cfgerr; } why do we need to call SSL_CTX_set_ecdh_auto right before returning error ? Cheers, Ilya Shipitsin

[PATCH] modernize cirrus-ci

Hello, small refinement of cirrus-ci magic. Cheers, Ilya Shipicin From bc6989debcd3b2e4a45f18d2a58e65fa4ab2f555 Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Thu, 26 Dec 2019 13:37:36 +0500 Subject: [PATCH] BUILD: CI: modernize cirrus-ci use freebsd-12.1 instead of freebsd-12.0, add

[PATCH] cirrus-ci: choose proper openssl package name

hello, freebsd-11.3 names package "openssl" freebsd-12.1 names package "openssl111" I added switch for that Cheers, Ilya Shipitcin From 614d7497641f0a2459c5f0b584fc84345ba5aeee Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Tue, 7 Jan 2020 23:41:24 +0500 Subject: [PATCH] BUILD:

Re: TLS tickets prone to MITM attacks (was: [PR] Docs tls tickets)

пн, 9 мар. 2020 г. в 23:21, Björn Jacke : > On 2020-03-09 at 17:44 +0100 Lukas Tribus sent off: > > Perhaps we can relax the wording a bit here and describe the actual > > technical issue along with some recommendations. Apache for example > > documents [1]: > > I think the wording from the patch

Re: TLS tickets prone to MITM attacks (was: [PR] Docs tls tickets)

пн, 9 мар. 2020 г. в 23:59, Willy Tarreau : > On Mon, Mar 09, 2020 at 07:18:23PM +0100, Björn Jacke wrote: > > On 2020-03-09 at 17:44 +0100 Lukas Tribus sent off: > > > Perhaps we can relax the wording a bit here and describe the actual > > > technical issue along with some recommendations.

Re: TLS tickets prone to MITM attacks (was: [PR] Docs tls tickets)

ср, 11 мар. 2020 г. в 04:09, Björn Jacke : > On 09.03.20 20:37, Lukas Tribus wrote: > >> I think the wording from the patch is still quite relaxed :). One of > the best > >> summaries describing the session ticket flaws, which I recommend is > this: > >>

Re: TLS tickets prone to MITM attacks (was: [PR] Docs tls tickets)

вт, 10 мар. 2020 г. в 05:37, Lukas Tribus : > Hello, > > > On Mon, 9 Mar 2020 at 20:39, Илья Шипицин wrote: > >> I would disable session tickets by default in haproxy. Given that most > >> clients support TLS 1.3 already this change would not even slow down > m

[PATCH[ special purpose weekly CI (spellcheck)

Hello, I implemented spell check CI. it is a bit noisy, however, I hope we will polish it soon. Cheers, Ilya Shipitcin From b58cc1f207649deea6d1053d62d311501e775c5e Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Tue, 10 Mar 2020 12:10:26 +0500 Subject: [PATCH] BUILD: add spellcheck github

[PATCH] cleanup: typo fixes in code comments

Hello, another part of typo cleanup. Cheers, Ilya Shipitcin From 4384a8ad97c3b4f24b17f58e411351ac51a7cff9 Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Tue, 10 Mar 2020 12:06:11 +0500 Subject: [PATCH] CLEANUP: assorted typo fixes in the code and comments --- include/common/defaults.h

Re: Tests timeout on my ARM64 test VM

I will a look during next weekend BTW, I've managed to get Linaro VM :) On Wed, Mar 11, 2020, 5:40 PM Martin Grigorov wrote: > Hi, > > On Mon, Mar 9, 2020 at 10:22 PM Martin Grigorov > wrote: > >> Hi, >> >> I am not sure what have changed on my test ARM64 VM but the reg tests >> started

[PATCH] 3rd round of documentation typo fixes

Hello, I attached a patch based on documentation spelcheck. Cheers, Ilya Shipitcin From ad38d6c0819df867524338a55ac51b3ed8e510be Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Fri, 6 Mar 2020 23:22:22 +0500 Subject: [PATCH] DOC: assorted typo fixes in the documentation This is the third

[PATCH] fourth round of typo fixes

Hello, more documentation fixes. Ilya Shipitcin From de4a671e8530b36fea78749455c1dd868c986522 Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Sat, 14 Mar 2020 17:47:28 +0500 Subject: [PATCH] DOC: assorted typo fixes in the documentation This is the fourth round of cleanups in various docs

Re: [PATCH] switch to clang-9 in Linux/travis-ci builds

пн, 16 мар. 2020 г. в 13:40, Willy Tarreau : > On Mon, Mar 16, 2020 at 12:51:20PM +0500, ??? wrote: > > From 5d5891166389dc03ab4fb63ca9edaa35feca8fcc Mon Sep 17 00:00:00 2001 > > From: Ilya Shipitsin > > Date: Mon, 16 Mar 2020 12:49:34 +0500 > > Subject: [PATCH] CI: switch BoringSSL

Re: [PATCH] switch to clang-9 in Linux/travis-ci builds

пн, 16 мар. 2020 г. в 14:54, Willy Tarreau : > On Mon, Mar 16, 2020 at 10:49:26AM +0100, Tim Düsterhus wrote: > > Ilya, > > > > Am 16.03.20 um 07:52 schrieb ???: > > > we use clang because of its address sanitizer. I found gcc asan more > noisy > > > and less usable. > > > > I believe

Re: HAproxy Error

ср, 15 апр. 2020 г. в 16:41, : > Hi Team, > > > > We are in the process of using newer HAproxy version. > > Below is the scenario explained where we are stuck. > > > > · In RHEL 8.1 version, installed the latest version of the > application. > >

[PATCH] CI: special purpose build, testing compatibility against "no-deprecated" openssl

Hello, I added weekly build for detection incompatibilities against "no-deprecated" openssl. (well, I first thought to add those option to travis, but it became over-engineered from my point of view) Lukas, if you have suggestions how to add to travis, I can try. Cheers, Ilya Shipitsin From

[PATCH] 8th iteration of typo fixes

Hello, next typo fixes. Ilya Shipitcin From 40a7e81223c783836d6e7d3726ad3db2f9ca418e Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Thu, 16 Apr 2020 23:51:34 +0500 Subject: [PATCH] CLEANUP: assorted typo fixes in the code and comments This is 8th iteration of typo fixes ---

Re: HAProxy and musl (was: Re: HAproxy Error)

чт, 16 апр. 2020 г. в 16:26, Willy Tarreau : > On Thu, Apr 16, 2020 at 12:29:42PM +0200, Tim Düsterhus wrote: > > > FWIW musl seems to work OK here when building for linux-glibc-legacy. > > > > Yes. HAProxy linked against Musl is smoke tested as part of the Docker > > Official Images program,

[PATCH] CI: fix openssl download script

Hello, previous patch fixed builds for openssl-1.1.1f however, links for download latest and previous releases are now different, so I adopted script to handle older releases too. Cheers, Ilya Shipitcin From c0023f9a7328980e7313c0f7ebfb6d355dab0ea9 Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin

[PATCH] CI: rename "openssl111" to "openssl" after it is renamed in FreeBSD

Hello, this is required to get freebsd builds green again. Cheers, Ilya Shipitcin From 0a50786e6b255f990af5f2c8bcc37c0d463a23fd Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Wed, 8 Apr 2020 00:29:26 +0500 Subject: [PATCH] CI: cirrus-ci: rename openssl package after it is renamed in

[PATCH] weekly typo fixes

Hello, 7th iteration of typo fixes. Cheers, Ilya Shipitcin From 51fa043677ee1783a2c3c92b37ff48ac7b21b647 Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Wed, 8 Apr 2020 01:07:56 +0500 Subject: [PATCH] CLEANUP: assorted typo fixes in the code and comments This is 7th iteration of typo fixes

Re: [PATCH] CI: special purpose build, testing compatibility against "no-deprecated" openssl

nice, I finished all CI stuff :) I'll focus in copr / rpm next вт, 21 апр. 2020 г. в 13:29, William Lallemand : > On Mon, Apr 20, 2020 at 07:12:41PM +0500, Илья Шипицин wrote: > > Lukas, Willy ? > > > > чт, 16 апр. 2020 г. в 23:16, Илья Шипицин : > > > > &g

Re: [ANNOUNCE] haproxy-2.1.4

another option would be to enlist project at HackerOne and wait while Guido Vranken will fuzz it :) he already fuzzed dozens of projects, including openssl, openvpn, ... https://guidovranken.com/ вт, 21 апр. 2020 г. в 18:21, Tim Düsterhus : > Willy, > > Am 02.04.20 um 15:03 schrieb Willy

Re: [ANNOUNCE] haproxy-2.1.4

вт, 21 апр. 2020 г. в 18:21, Tim Düsterhus : > Willy, > > Am 02.04.20 um 15:03 schrieb Willy Tarreau: > > The main driver for this release is that it contains a fix for a serious > > vulnerability that was responsibly reported last week by Felix Wilhelm > > from Google Project Zero, affecting the

Re: [ANNOUNCE] haproxy-2.1.4

вт, 21 апр. 2020 г. в 19:13, Tim Düsterhus : > Ilya, > > Am 21.04.20 um 15:47 schrieb Илья Шипицин: > >> The write-up is available now: > >> https://bugs.chromium.org/p/project-zero/issues/detail?id=2023 > >> > >> It has a "Methodology-Fuzzing

Re: [PATCH] CI: special purpose build, testing compatibility against "no-deprecated" openssl

Lukas, Willy ? чт, 16 апр. 2020 г. в 23:16, Илья Шипицин : > Hello, > > I added weekly build for detection incompatibilities against > "no-deprecated" openssl. > > (well, I first thought to add those option to travis, but it became > over-engineered from my point

Re: HAproxy Error

чт, 16 апр. 2020 г. в 12:48, Lukas Tribus : > Hello, > > On Thu, 16 Apr 2020 at 06:04, wrote: > > > > Hi Team > > > > Let us know your availability to work on this. > > As Aleks already said: > > This haproxy executable has been build without OpenSSL support, which > is required for your

Re: HAproxy Error

hmm. seems, we need some musl or picolibc in CI. beeing glibc dependent is dangerous чт, 16 апр. 2020 г. в 13:29, Willy Tarreau : > Hi Lukas, > > On Thu, Apr 16, 2020 at 09:44:39AM +0200, Lukas Tribus wrote: > > Provide the output of "which haproxy" and "haproxy -vv", I doubt you > > are

Re: HAProxy and musl (was: Re: HAproxy Error)

yep, I thought about alpine as well. I'm not sure how often official docker validation runs. If it runs often enough, maybe we do not need CI. чт, 16 апр. 2020 г. в 15:29, Tim Düsterhus : > Willy, > > [removed Bindushree from Cc as we disgress from the main topic] > > Am 16.04.20 um 11:44

Re: [PATCH] CI: minor cleanup on SSL linking

Hello, that patch was not applied? пт, 3 апр. 2020 г. в 17:18, Willy Tarreau : > On Thu, Apr 02, 2020 at 11:46:58PM +0500, ??? wrote: > > Hello, > > > > this PR cleans up SSL linking. > > it is very well aligned to "how to link to custom openssl" documentation. > > It's indeed cleaner,

Re: s390x and HAProxy?

пт, 13 мар. 2020 г. в 16:48, Aleksandar Lazic : > Mar 13, 2020 12:11:16 PM Илья Шипицин : > > > initial motivation was that article > > > > https://docs.travis-ci.com/user/multi-cpu-architectures > > Thanks for the link. > > > travis allows to run b

Re: s390x and HAProxy?

initial motivation was that article https://docs.travis-ci.com/user/multi-cpu-architectures travis allows to run builds on various archs, why not to test ? пт, 13 мар. 2020 г. в 16:07, Aleksandar Lazic : > Hi. > > I'm wondering that this target is tested. > >

Re: Tests timeout on my ARM64 test VM

tests are easy to reproduce manually. each test consiss of few parts 1) prepare config 2) start haproxy 3) perform queries against it it might be something like iptables (just guess). I would have a look inside some (failing) vtc and create config to start haproxy manually On Sun, Mar 15,

Re: [PATCH[ special purpose weekly CI (spellcheck)

Willy, can we apply this? I scheduled it on tuesday every week. вт, 10 мар. 2020 г. в 12:12, Илья Шипицин : > Hello, > > I implemented spell check CI. > it is a bit noisy, however, I hope we will polish it soon. > > Cheers, > Ilya Shipitcin >

"warning" on reg-tests

Hello, there's always noise like that *** h1 debug|[WARNING] 072/163523 (6090) : config : log format ignored for proxy 'testme' since it has no log address. *** h1 debug|[WARNING] 072/163523 (6090) : config : log format ignored for frontend 'test_abns' since it has no log address. any

Re: [PATCH] switch to clang-9 in Linux/travis-ci builds

пн, 16 мар. 2020 г. в 11:35, Willy Tarreau : > On Sun, Mar 15, 2020 at 10:54:56PM +0500, ??? wrote: > > ??, 14 ???. 2020 ?. ? 14:23, Willy Tarreau : > > > > > Hi Ilya, > > > > > > On Fri, Jan 24, 2020 at 11:46:45AM +0500, ??? wrote: > > > > Hello, > > > > > > > > let us use

Re: [PATCH] switch to clang-9 in Linux/travis-ci builds

пн, 16 мар. 2020 г. в 12:09, Willy Tarreau : > On Mon, Mar 16, 2020 at 11:52:27AM +0500, ??? wrote: > > ??, 16 ???. 2020 ?. ? 11:35, Willy Tarreau : > > > > > On Sun, Mar 15, 2020 at 10:54:56PM +0500, ??? wrote: > > > > ??, 14 ???. 2020 ?. ? 14:23, Willy Tarreau : > > > > > > >

<    1   2   3   4   5   6   7   8   9   10   >