Finally got through the compilation of haproy-2.8, almost (had to apt  install 
libpcre2-dev )
to get around missing 
               from src/ssl_sock.c:47:
include/haproxy/regex-t.h:40:10: fatal error: pcre2.h: No such file or directory
   40 | #include <pcre2.h>
> 

After having that fixed,compilation lastly stumbled across a missing 
fatal error: systemd/sd-daemon.h: No such file or directory

which I was able to repair by 

apt install libsystemd-dev

So I finally got it compiled.
Now haproxy fails on my config (which the former version 2.4 I was running 
before, didn't)

This is the line in question:

 bind *:443 ssl crt /etc/haproxy/fullchain.pem crt ssl-skip-self-issued-ca

How do I fix this? 

Put crt ssl-skip-self-issued-ca
in a separate line?

Where?

> Am 07.11.2023 um 12:27 schrieb Christoph Kukulies <k...@kukulies.org>:
> 
> I found that a missing psutil module (python3) breaks the scripts. The # of 
> CPUs is gained from psutil query to
> give the make -j an argument. Missing argument should be intercepted.
> 
> I fixed this by installing psutil using pip3. (hope I didn't break my python 
> system environment)
> 
> Anyway, new-quic ran:
> 
> I 2023-11-07T12:17:36: Building quictls, may take a few minutes
> I 2023-11-07T12:17:36: Using 3 threads with make
> mv: cannot stat '/opt/quictls': No such file or directory
> I 2023-11-07T12:21:32: Installing quictls
> created directory `/opt/quictls'
> created directory `/opt/quictls/lib64'
> *** Installing runtime libraries
> install libcrypto.so.81.3 -> /opt/quictls/lib64/libcrypto.so.81.3
> install libssl.so.81.3 -> /opt/quictls/lib64/libssl.so.81.3
> *** Installing development files
> 
> ...
> 
> install apps/tsget.pl -> /opt/quictls/ssl/misc/tsget.pl
> link /opt/quictls/ssl/misc/tsget -> /opt/quictls/ssl/misc/tsget.pl
> install ./apps/openssl.cnf -> /opt/quictls/ssl/openssl.cnf.dist
> install ./apps/openssl.cnf -> /opt/quictls/ssl/openssl.cnf
> install ./apps/ct_log_list.cnf -> /opt/quictls/ssl/ct_log_list.cnf.dist
> install ./apps/ct_log_list.cnf -> /opt/quictls/ssl/ct_log_list.cnf
> rm -f libcrypto.so.81.3
> rm -f libcrypto.so
> rm -f libssl.so.81.3
> rm -f libssl.so
> root@mail:~/haproxy-scripts# 
> 
> 
>> Am 07.11.2023 um 11:53 schrieb Christoph Kukulies <k...@kukulies.org 
>> <mailto:k...@kukulies.org>>:
>> 
>> Thanks, Shawn.
>> I git-cloned all  links. I now have directories:
>> 
>> /root/haproxy-2.8
>> /root/haproxy-scripts
>> /root/openssl
>> 
>> 
>> I don't have a separate docker server available. Must do this in my 
>> production site (although it can tolerate short outages :)
>> 
>> I started the script new-haproxy (Ubuntu 22.04.3 LTS):
>> 
>> 
>> ...:
>> include/haproxy/openssl-compat.h:10:10: fatal error: openssl/bn.h: No such 
>> file or directory
>>    10 | #include <openssl/bn.h>
>>       |          ^~~~~~~~~~~~~~
>> compilation terminated.
>> compilation terminated.
>> 
>> (trimmed down the output a bit)
>> 
>> What is missing? zlib? 
>> 
>> --
>> Christoph
>> 
>> 
>>> Am 06.11.2023 um 00:38 schrieb Shawn Heisey <hapr...@elyograg.org 
>>> <mailto:hapr...@elyograg.org>>:
>>> 
>>> https://git.haproxy.org/git/haproxy-2.8.git 
>>> <https://git.haproxy.org/git/haproxy-2.8.git>
> 

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to