Re: executable properties (checksec, BinSkim)

2021-10-06 Thread Илья Шипицин
No interest :) ? On Sat, Sep 18, 2021, 3:05 PM Илья Шипицин wrote: > Hello, > > I checked how looks binary shipped in several popular distributions > (ppa:vbernat/haproxy-2.4, docker haproxytech/haproxy-ubuntu, docker > haproxy). > > are we aware of those security features ? shall we move them

[PATCH v2] BUILD: SSL: function "ERR_func_error_string" is deprecated in OpenSSL-3.0.0

2021-10-06 Thread Ilya Shipitsin
let us prepare for using OpenSSL-3.0.0 in no deprecation mode --- include/haproxy/openssl-compat.h | 7 +++ src/ssl_sock.c | 2 +- 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/include/haproxy/openssl-compat.h b/include/haproxy/openssl-compat.h index

Re: [PATCH v2] BUILD: SSL: function "ERR_func_error_string" is deprecated in OpenSSL-3.0.0

2021-10-06 Thread Willy Tarreau
Hi Ilya, On Wed, Oct 06, 2021 at 11:26:13PM +0500, Ilya Shipitsin wrote: > +/* ERR_func_error_string is deprecated in OpenSSL-3.0.0 */ > +#if (OPENSSL_VERSION_NUMBER >= 0x3000L) > +#define HA_ERR_func_error_string(ret) "OPENSSL_internal" > +#else > +#define HA_ERR_func_error_string(ret)

Re: [PATCH] DOC: configuration: add clarification on escaping in keyword arguments

2021-10-06 Thread Willy Tarreau
On Mon, Oct 04, 2021 at 01:02:58AM -0600, astrotha...@gmail.com wrote: > From: Thayne McCombs > > Add a more precise description on how backslash escaping is different > than the top-level parser, and give examples of how to handle single > quotes inside arguments. This looks good, and thanks