Hi William,

I'm having an issue with the latest master code 2.1-dev2-4a66013. It does compile but doesn't want to load my crt-list with .ocsp files present for the certificates mentioned. The commit that broke this is: 246c024

# haproxy -v
HA-Proxy version 2.1-dev2-4a66013 2019/10/14 - https://haproxy.org/
# haproxy -f ./PB-TEST/ultimo_testcase/xxx/haproxy.cfg -d
[ALERT] 286/223026 (39111) : parsing [./PB-TEST/ultimo_testcase/xxx/haproxy.cfg:61] : 'bind 0.0.0.0:443' : 'crt-list' : error processing line 1 in file '/usr/ports-pb_haproxy-devel/PB-TEST/ultimo_testcase/xxx/rtrcld.xxx.crt_list' : (null) [ALERT] 286/223026 (39111) : Error(s) found in configuration file : ./PB-TEST/ultimo_testcase/xxx/haproxy.cfg
[ALERT] 286/223026 (39111) : Fatal errors found in configuration.

Content of the crt-list file, but removing the alpn stuff doesn't help...:
/usr/ports-pb_haproxy-devel/PB-TEST/ultimo_testcase/xxx/rtrcld.xxx.pem [ alpn h2,http/1.1] /usr/ports-pb_haproxy-devel/PB-TEST/ultimo_testcase/xxx/rtrcld.xxx/rtrcld.xxx_5ab0da70ab0cc.pem [ alpn h2,http/1.1]

The last line is an empty one.. but it already complains about line 1... which seems valid and the .pem file exists.. exact same config loads alright commits before this one: 246c024.

I do have a 'filled' .ocsp file present. But no matter if its outdated, empty or correct the error above stays. When the .ocsp is absent it complains about line 2 of the cert-list.. Which has its own .ocsp as well..

Can you take a look? Thanks in advance.

Regards,
PiBa-NL (Pieter)


Reply via email to