Re: Issue with TCP splicing

2018-08-24 Thread haproxy
private keys private key defiantly need revoked i attached key to show how easy it is to xtract from coredump you can download certificate https://crt.sh/?d=511527676 and verify signature of message.txt using openssl smime -verify -in message.txt.p7s -content message.txt -inform PEM

Re: Issue with TCP splicing

2018-08-24 Thread Lukas Tribus
Hello Julien, On Thu, 23 Aug 2018 at 20:49, Julien Semaan wrote: > > Hi Olivier, > > Sorry for the delay, obtaining the core dump from a production environment > was a bit tricky. > > So, I have attached the core dump to this email. I hope this will help you > identify the issue. The

Re: Issue with TCP splicing

2018-07-25 Thread Olivier Houchard
On Wed, Jul 25, 2018 at 09:02:24AM -0400, Julien Semaan wrote: > Hi Olivier, > > Thanks for the time you're taking to check the issue. > > I'll get an environment back with TCP splicing enabled and I'll run it in > GDB and provide you a core dump > That would be great, thank you ! Olivier

Re: Issue with TCP splicing

2018-07-25 Thread Julien Semaan
Hi Olivier, Thanks for the time you're taking to check the issue. I'll get an environment back with TCP splicing enabled and I'll run it in GDB and provide you a core dump Best Regards, -- Julien Semaan jsem...@inverse.ca :: +1 (866) 353-6153 *155 ::www.inverse.ca Inverse inc. ::

Re: Issue with TCP splicing

2018-07-25 Thread Olivier Houchard
Hi Julien, On Tue, Jul 24, 2018 at 01:29:49PM -0400, Julien Semaan wrote: > > Sorry, that was a "can" that really meant "can't" :) I can't reproduce it. >     Aw well, I was surprised it was so easy :) > yea, that would be too easy :) > > Can you try to upgrade to 1.8.12 ? A number of bugs

Re: Issue with TCP splicing

2018-07-24 Thread Julien Semaan
> Sorry, that was a "can" that really meant "can't" :) I can't reproduce it.     Aw well, I was surprised it was so easy :) > Can you try to upgrade to 1.8.12 ? A number of bugs have been fixed since     I did try the upgrade to 1.8.12, got the same results (segfault) although I wasn't able to

Re: Issue with TCP splicing

2018-07-24 Thread Olivier Houchard
Hi Julian, On Tue, Jul 24, 2018 at 12:58:27PM -0400, Julien Semaan wrote: > Hi Olivier, > > Glad you're able to replicate it because I can't get it to happen > consistently! > I'd be happy if you could share the details of how it could be replicated if > that's not too complex or hard to explain

Re: Issue with TCP splicing

2018-07-24 Thread Julien Semaan
Hi Olivier, Glad you're able to replicate it because I can't get it to happen consistently! I'd be happy if you could share the details of how it could be replicated if that's not too complex or hard to explain via email. Anyway, attached to this email, you'll find the haproxy configuration

Re: Issue with TCP splicing

2018-07-24 Thread Olivier Houchard
Hi Julian, On Mon, Jul 23, 2018 at 09:07:32AM -0400, Julien Semaan wrote: > Hi all, > > We're currently using haproxy in our project PacketFence > (https://packetfence.org) and are currently experiencing an issue with > haproxy segfaulting when TCP splicing is enabled. > > We're currently

Re: Issue with TCP splicing

2018-07-24 Thread Aleksandar Lazic
Hi Julien. On 23/07/2018 13:59, Julien Semaan wrote: Doing it with the patch does the equivalent of disabling it with the option (realized there was an option afterwards). We're more looking to know if the haproxy team is interested in getting the issue addressed more than just getting the

Re: Issue with TCP splicing

2018-07-23 Thread Julien Semaan
Doing it with the patch does the equivalent of disabling it with the option (realized there was an option afterwards). We're more looking to know if the haproxy team is interested in getting the issue addressed more than just getting the workaround Thanks! -- Julien Semaan

Re: Issue with TCP splicing

2018-07-23 Thread Aleksandar Lazic
Hi Julien. On 23/07/2018 09:07, Julien Semaan wrote: Hi all, We're currently using haproxy in our project PacketFence (https://packetfence.org) and are currently experiencing an issue with haproxy segfaulting when TCP splicing is enabled. We're currently running version 1.8.9 and are

Issue with TCP splicing

2018-07-23 Thread Julien Semaan
Hi all, We're currently using haproxy in our project PacketFence (https://packetfence.org) and are currently experiencing an issue with haproxy segfaulting when TCP splicing is enabled. We're currently running version 1.8.9 and are occasionally getting segfaults on this specific line in