Re: [PATCH] MINOR: ssl: Add aes_gcm_dec converter

2019-03-23 Thread Nenad Merdanovic
Hey Willy, On 3/22/2019 5:38 PM, Willy Tarreau wrote: Hi Nenad, On Fri, Mar 22, 2019 at 12:02:24PM +0100, Nenad Merdanovic wrote: The converter can be used to decrypt the raw byte input using the AES-GCM algorithm, using provided nonce, key and AEAD tag. This can be useful to decrypt

Re: [PATCH] MINOR: ssl: Add aes_gcm_dec converter

2019-03-23 Thread Willy Tarreau
Hi Nenad, On Sat, Mar 23, 2019 at 10:48:35AM +0100, Nenad Merdanovic wrote: > >CC src/ssl_sock.o > > src/ssl_sock.c: In function 'sample_conv_aes_gcm_dec': > > src/ssl_sock.c:9166:27: error: 'EVP_CTRL_AEAD_SET_IVLEN' undeclared (first > > use in this function) > >

[PATCH] MINOR: ssl: Add aes_gcm_dec converter

2019-03-23 Thread Nenad Merdanovic
The converter can be used to decrypt the raw byte input using the AES-GCM algorithm, using provided nonce, key and AEAD tag. This can be useful to decrypt encrypted cookies for example and make decisions based on the content. --- doc/configuration.txt | 12 src/ssl_sock.c| 148

Re: [PATCH] MINOR: ssl: Add aes_gcm_dec converter

2019-03-23 Thread Nenad Merdanovic
Hey Willy, On 3/23/2019 11:24 AM, Willy Tarreau wrote: I'm not sure why this is needed, because my first impression was that if this part can be an argument in the decode it ought to be one as well for the encoder, but that's where my ignorance of crypto shines, as I understand from your

Re: [PATCH] MINOR: ssl: Add aes_gcm_dec converter

2019-03-23 Thread Nenad Merdanovic
Hello Willy, On 3/22/2019 5:40 PM, Willy Tarreau wrote: Hmmm sorry, but I'm getting this here : CC src/ssl_sock.o src/ssl_sock.c: In function 'sample_conv_aes_gcm_dec': src/ssl_sock.c:9166:27: error: 'EVP_CTRL_AEAD_SET_IVLEN' undeclared (first use in this function)

Re: H2 Protocol Errors in HTX Mode (1.9.4 & 1.9.4-dev)

2019-03-23 Thread Willy Tarreau
Hi Luke, On Sat, Mar 23, 2019 at 02:52:26PM +0100, Luke Seelenbinder wrote: > Hi Willy, > > I just upgraded to 1.9.5, and this bug is still present (but seems to be > somewhat diminished). On 1.9.4, approximately 5 of these images failed to > load, on 1.9.5, it's usually 1 or 2. So overall it

Re: DNS Resolver Issues

2019-03-23 Thread PiBa-NL
Hi Daniel, Baptiste, @Daniel, can you remove the 'addr loadbalancer-internal.xxx.yyy' from the server check? It seems to me that that name is not being resolved by the 'resolvers'. And even if it would it would be kinda redundant as it is in the example as it is the same as the servername.?.

Re: H2 Protocol Errors in HTX Mode (1.9.4 & 1.9.4-dev)

2019-03-23 Thread Luke Seelenbinder
Hi Willy, I just upgraded to 1.9.5, and this bug is still present (but seems to be somewhat diminished). On 1.9.4, approximately 5 of these images failed to load, on 1.9.5, it's usually 1 or 2. So overall it seems there is improvement, but something is still a bit wonky. :) Best, Luke — Luke

stable-bot: INFO: 3 bug fixes in queue for next release

2019-03-23 Thread stable-bot
Hi, This is a friendly bot that watches fixes pending for the next haproxy-stable release! One such e-mail is sent periodically once patches are waiting in the last maintenance branch, and an ideal release date is computed based on the severity of these fixes and their merge date. Responses

stable-bot: WARNING: 7 bug fixes in queue for next release

2019-03-23 Thread stable-bot
Hi, This is a friendly bot that watches fixes pending for the next haproxy-stable release! One such e-mail is sent periodically once patches are waiting in the last maintenance branch, and an ideal release date is computed based on the severity of these fixes and their merge date. Responses