Re: [PATCH] unveal the power of BoringSSL by setting its own version back to 1.1.1

2020-11-24 Thread William Lallemand
On Sat, Nov 21, 2020 at 11:23:32PM +0500, Илья Шипицин wrote: > hopefully final BoringSSL patches this week. > > Ilya Thanks, all merged! -- William Lallemand

Re: Proxy Protocol Implementation validation

2020-11-24 Thread Willy Tarreau
Hi, On Tue, Nov 24, 2020 at 09:42:53AM +0100, Lothruin Mirwen wrote: > Hi! > > I've seen on proxy protocol spec ( > https://www.haproxy.org/download/2.3/doc/proxy-protocol.txt) the section > "Validation" with a list of tested implementations for some protocols. > > Right now on SubEthaSMTP we

Re: [PATCH] Fix lacking init of log-format list

2020-11-24 Thread Tim Düsterhus
Maciej, Am 23.11.20 um 22:44 schrieb Maciej Zdeb: > There's a crash report on github: > https://github.com/haproxy/haproxy/issues/909#issuecomment-732241492 with a > reproducer and also stack trace from Willy. That list init is necessary > because release_http_action() is trying to iterate over

Re: Content inspection using tcp-request/tcp-response content send-spoa-group

2020-11-24 Thread Stanislav Pavlíček
út 24. 11. 2020 v 12:28 odesílatel Aleksandar Lazic napsal: > I have downloaded the zip and see that you use the "contrib/spoa_server" > which have some issues which have Christopher Faulet explained in this post > https://www.mail-archive.com/haproxy@formilux.org/msg38484.html > > As far as I

Re: [PATCH] DOC: clarify how to create a fallback crt

2020-11-24 Thread William Lallemand
Hello Joao, On Sat, Nov 21, 2020 at 12:33:38PM -0300, Joao Morais wrote: > > It’s indeed rather confusing, sorry about the mess. > > Here is a new proposal of the last paragraph, how it sounds? - suggestions > welcome, note that I’m not very familiar with english > > > > The first

Re: [PATCH] Fix lacking init of log-format list

2020-11-24 Thread Maciej Zdeb
wt., 24 lis 2020 o 10:34 Willy Tarreau napisał(a): > I prefer the former. If there's a list head, it must be valid. We must > not start to look at list pointers to guess whether or not they are > properly initialized, there are enough exceptions and special cases > everywhere in the code not to

Re: [PATCH] Fix lacking init of log-format list

2020-11-24 Thread Willy Tarreau
Hi guys, On Tue, Nov 24, 2020 at 09:52:24AM +0100, Tim Düsterhus wrote: > > Now I had more time to look at the code and maybe a cleaner solution is to > > add an additional check to release_http_action() instead of initializing > > the list (patch attached). > > From my point of view: I like

Re: [PATCH] DOC: clarify how to create a fallback crt

2020-11-24 Thread Joao Morais
> Em 24 de nov de 2020, à(s) 05:47, William Lallemand > escreveu: > > Hello Joao, > > On Sat, Nov 21, 2020 at 12:33:38PM -0300, Joao Morais wrote: >> >> It’s indeed rather confusing, sorry about the mess. >> >> Here is a new proposal of the last paragraph, how it sounds? - suggestions >>

Proxy Protocol Implementation validation

2020-11-24 Thread Lothruin Mirwen
Hi! I've seen on proxy protocol spec ( https://www.haproxy.org/download/2.3/doc/proxy-protocol.txt) the section "Validation" with a list of tested implementations for some protocols. Right now on SubEthaSMTP we have created a new release with support for proxy protocol

Recent temporary regression in 2.4-dev1 and maintenance branches

2020-11-24 Thread Willy Tarreau
Hi all, this week-end I had to roll back haproxy.org on 2.3 from 2.4-dev1 after William Dauchy informed me that git clone was crawling very slowly. The problem appeared with recent fix "BUG/MEDIUM: filters: Forward all filtered data at the end of http filtering" that was already backported as far

Content inspection using tcp-request/tcp-response content send-spoa-group

2020-11-24 Thread Stanislav Pavlíček
Hello, I'm trying to implement content inspection using haproxy/SPOE and SPOA agent. I created basic sample configuration to demonstrate my issue: https://github.com/haproxy/haproxy/issues/956#issuecomment-732806414 To reproduce locally, just download contentdebug.zip archive from link above,

Re: Content inspection using tcp-request/tcp-response content send-spoa-group

2020-11-24 Thread Aleksandar Lazic
Hi. On 24.11.20 11:48, Stanislav Pavlíček wrote: Hello, I'm trying to implement content inspection using haproxy/SPOE and SPOA agent. I created basic sample configuration to demonstrate my issue: https://github.com/haproxy/haproxy/issues/956#issuecomment-732806414 To reproduce locally,

Re: Recent temporary regression in 2.4-dev1 and maintenance branches

2020-11-24 Thread Christopher Faulet
Le 24/11/2020 à 10:27, Willy Tarreau a écrit : Hi all, this week-end I had to roll back haproxy.org on 2.3 from 2.4-dev1 after William Dauchy informed me that git clone was crawling very slowly. The problem appeared with recent fix "BUG/MEDIUM: filters: Forward all filtered data at the end of

Re: Content inspection using tcp-request/tcp-response content send-spoa-group

2020-11-24 Thread Stanislav Pavlíček
út 24. 11. 2020 v 14:29 odesílatel Stanislav Pavlíček < stanislav.pavli...@gmail.com> napsal: > tcp rulesets are only evaluated once. But, you may wait to eval a rule > using an > >> ACL. For instance "if { req.len gt 0 }". >> > I tried to follow your example and with acl and req.body as argument

Re: Content inspection using tcp-request/tcp-response content send-spoa-group

2020-11-24 Thread Christopher Faulet
Le 24/11/2020 à 11:48, Stanislav Pavlíček a écrit : Hello, I'm trying to implement content inspection using haproxy/SPOE and SPOA agent. I created basic sample configuration to demonstrate my issue: https://github.com/haproxy/haproxy/issues/956#issuecomment-732806414

Re: Content inspection using tcp-request/tcp-response content send-spoa-group

2020-11-24 Thread Stanislav Pavlíček
út 24. 11. 2020 v 13:57 odesílatel Christopher Faulet napsal: > > The issue is that although I declared tcp-request/tcp-reponse content > > send-spoa-group rules, my SPOA agent is called only once with request > length 0 > > and no payload. > > > > tcp rulesets are only evaluated once. But, you

Re: Recent temporary regression in 2.4-dev1 and maintenance branches

2020-11-24 Thread Willy Tarreau
On Tue, Nov 24, 2020 at 03:22:53PM +0100, Christopher Faulet wrote: > The fix has been merged and backported as far as 2.0. The commit in the > 2.4-dev is 401e6dbff ("BUG/MAJOR: filters: Always keep all offsets up to > date during data filtering"). Thanks for the quick fix, Christopher. And I can

Bid Writing, Major Donors and Volunteering Workshops

2020-11-24 Thread NFP Workshops
NFP WORKSHOPS 18 Blake Street, York YO1 8QG 01133 280988 Affordable Training Courses for Charities, Schools & Public Sector Organisations This email has been sent to haproxy@formilux.org CLICK TO UNSUBSCRIBE FROM LIST Alternatively send a blank e-mail to unsubscr...@nfpmail2001.co.uk

Re: [PATCH] DOC: clarify how to create a fallback crt

2020-11-24 Thread William Lallemand
On Tue, Nov 24, 2020 at 08:59:05AM -0300, Joao Morais wrote: > > > > Em 24 de nov de 2020, à(s) 05:47, William Lallemand > > escreveu: > > > > Hello Joao, > > > > On Sat, Nov 21, 2020 at 12:33:38PM -0300, Joao Morais wrote: > >> > >> It’s indeed rather confusing, sorry about the mess. > >>