Re: OpenSSL 1.1.0 support => merged

2016-11-08 Thread Willy Tarreau
Hi Dirkjan, I finally merged your patch after discussing with Emeric. He's fine with it as well. Both of us think that the breakage of openssl 0.9.8 is not a showstopper at the moment and that the best way to know if/how it needs to be fixed is to let it go in the wild. Given that openssl 1.1.0

HAProxy Client Certificate OCSP Validation

2016-11-08 Thread Hari Chandrasekhar
Hello, Does HAProxy support OCSP for client certification validations? I see certificate revocation list option in the configuration but could not find anything related to OCSP other than the OCSP Stapling for server certification. I have also posted the question in stackoverflow -

Re: option dontlognull

2016-11-08 Thread Willy Tarreau
On Tue, Nov 08, 2016 at 07:51:55PM +0100, Arnall wrote: > > Then do not log, that's much better. You can even change the log level with > > the "set-log-level silent" directive. That seems to better match your needs. > I do want to log denied request ! :) I just want to know what is the exact >

Re: option dontlognull

2016-11-08 Thread Arnall
Le 08/11/2016 à 16:36, Willy Tarreau a écrit : Hello, On Tue, Nov 08, 2016 at 03:55:04PM +0100, Arnall wrote: Hello everyone, i've made some test on the 'option dontlognull' / 'no option dontlognull' and 'tcp-request deny', because i want to be sure that IP in blacklist is logged correctly.

Re: OpenSSL 1.1.0 support

2016-11-08 Thread Willy Tarreau
Just resending, I noticed that my message didn't make it through the list, and no, it was not caught by the anti-spam :-) On Mon, Nov 07, 2016 at 08:19:06PM +0100, Willy Tarreau wrote: > Hi Dirkjan, > > On Mon, Nov 07, 2016 at 01:02:33PM +0100, Dirkjan Bussink wrote: > > Hi Willy, > > > > > On

Re: [PATCH] Enable Scientiamobile WURFL device detection module

2016-11-08 Thread Willy Tarreau
On Tue, Nov 08, 2016 at 04:36:21PM +0100, Scientiamobile wrote: > Hi Willy > > Everything in your patch in order to augment code isolation is fine (we > just checked it locally), thank you ! > From our point of view, you can proceed to merge it in 1.7-dev OK, will do it then, thanks for your

Re: [PATCH] Enable Scientiamobile WURFL device detection module

2016-11-08 Thread Scientiamobile
Hi Willy Everything in your patch in order to augment code isolation is fine (we just checked it locally), thank you ! >From our point of view, you can proceed to merge it in 1.7-dev Some words about your performance/accuracy benchmarks: - Performance mode speeds up detection only when working

Re: option dontlognull

2016-11-08 Thread Willy Tarreau
Hello, On Tue, Nov 08, 2016 at 03:55:04PM +0100, Arnall wrote: > Hello everyone, > > i've made some test on the 'option dontlognull' / 'no option dontlognull' > and 'tcp-request deny', because i want to be sure that IP in blacklist is > logged correctly. I'm still not sure about the behavior, if

option dontlognull

2016-11-08 Thread Arnall
Hello everyone, i've made some test on the 'option dontlognull' / 'no option dontlognull' and 'tcp-request deny', because i want to be sure that IP in blacklist is logged correctly. I'm still not sure about the behavior, if i have "no option dontlognull' i have all denied requests logged,

Re: [PATCH] Enable Scientiamobile WURFL device detection module

2016-11-08 Thread Willy Tarreau
Hi, it's now merged. I've reformated a bit the configuration.txt changes to fit within the 80-column limit. I noticed that it is possible to perform a small change to completely avoid including wurfl/wurfl.h from the other C files, and which shows that in the end the wurfl.h file doesn't even