Hey Emeric,
I have just consulted the Readme of the haproxy source and it says in the OpenSSL section:
»The BSD and OSX makefiles do not support build options for OpenSSL nor zlib. Also, at least on OpenBSD, pthread_mutexattr_setpshared() does not exist so the SSL session cache cannot be shared between multiple processes. If you want to enable these options, you need to use GNU make with the default makefile as follows :«
I have just checked if pthread_mutexattr_setpshared is available in FreeBSD and it does not seem to be the case. So maybe we're on the right track here.
I will try to apply your patch and confirm this. Would that mean that we have to use the solution proposed by Willy? Using a source hash to balance to multiple ssl enabled frontends?
Kind regards, John