Re: problems with req.ssl_ec_ext

2016-06-01 Thread Pavlos Parissis
On 01/06/2016 03:19 μμ, Willy Tarreau wrote: > Hi Pavlos, > > On Tue, May 31, 2016 at 12:06:14PM +0200, Pavlos Parissis wrote: >> >> On 30/05/2016 05:24 , Nenad Merdanovic wrote: >>> Hello Bjorn, >>> >>> On 5/30/2016 4:29 PM, Björn Zettergren wrote: Hi, I've been playing

Re: problems with req.ssl_ec_ext

2016-06-01 Thread Willy Tarreau
Hi Pavlos, On Tue, May 31, 2016 at 12:06:14PM +0200, Pavlos Parissis wrote: > > On 30/05/2016 05:24 , Nenad Merdanovic wrote: > > Hello Bjorn, > > > > On 5/30/2016 4:29 PM, Björn Zettergren wrote: > >> Hi, > >> > >> I've been playing around with the ECC+RSA certificate on same IP as > >>

Re: problems with req.ssl_ec_ext

2016-05-31 Thread Pavlos Parissis
On 30/05/2016 05:24 μμ, Nenad Merdanovic wrote: > Hello Bjorn, > > On 5/30/2016 4:29 PM, Björn Zettergren wrote: >> Hi, >> >> I've been playing around with the ECC+RSA certificate on same IP as >> described in the haproxy blog at >>

Re: problems with req.ssl_ec_ext

2016-05-31 Thread Björn Zettergren
On Mon, May 30, 2016 at 5:24 PM, Nenad Merdanovic wrote: > Yes, it seems like the case is that the fetch is only called once, when > there is not enough data in the buffer. You can work around this like: > tcp-request inspect-delay 5s > tcp-request content accept if

Re: problems with req.ssl_ec_ext

2016-05-30 Thread Nenad Merdanovic
Hello Bjorn, On 5/30/2016 4:29 PM, Björn Zettergren wrote: > Hi, > > I've been playing around with the ECC+RSA certificate on same IP as > described in the haproxy blog at > http://blog.haproxy.com/2015/07/15/serving-ecc-and-rsa-certificates-on-same-ip-with-haproxy/ > > However, I get