On Mon, Nov 27, 2017 at 08:23:29PM +0100, Claudio Jeker wrote: > Instead of using imsg to pass certificates, pass the fd to the cert to the > relay processes. This allows for large certificates and esp. ca file to > work. OCSP stapling will also be added through this.
relayd regression tests pass with that diff. When I make run-regress-args-https-inspect.pl in a loop it fails after a while. So there is a race, question is whether it is the test or in relayd. I did not see that before, so it might be introduced by your change. I will keep an eye on this. bluhm
