Re: Use default/first crt only if all snifilter fails

2020-11-17 Thread William Lallemand
On Mon, Nov 16, 2020 at 08:44:58PM -0300, Joao Morais wrote: > > Hello list, I have a `crt-list` keyword configuring a list of > crt/keys, something like this: > > /tmp/default.pem > /tmp/a.pema.local > /tmp/b.pemb.local > > We consider the first line the fallback cer

Re: Use default/first crt only if all snifilter fails

2020-11-17 Thread William Lallemand
On Tue, Nov 17, 2020 at 09:09:38AM +0100, William Lallemand wrote: > On Mon, Nov 16, 2020 at 08:44:58PM -0300, Joao Morais wrote: > > > > Hello list, I have a `crt-list` keyword configuring a list of > > crt/keys, something like this: > > > > /tmp/default.pem > > /tmp/a.pema.local

Bid Writing, Major Donors and Volunteering Workshops

2020-11-17 Thread NFP Workshops
NFP WORKSHOPS 18 Blake Street, York YO1 8QG 01133 280988 Affordable Training Courses for Charities, Schools & Public Sector Organisations This email has been sent to haproxy@formilux.org CLICK TO UNSUBSCRIBE FROM LIST Alternatively send a blank e-mail to unsubscr...@nfpmail2001.co.uk quot

Re: [PATCH] CI: Make the h2spec workflow more consistent with the VTest workflow

2020-11-17 Thread Willy Tarreau
On Fri, Nov 13, 2020 at 08:15:53PM +0100, Tim Duesterhus wrote: > This PR aims to make the workflow more consistent, by reusing the same wording > for the step names and the same commands to make it look like the vtest > workflow as much as possible. (...) Merged, thanks Tim! Willy

Re: [PATCH v2] CI: Stop hijacking the hosts file

2020-11-17 Thread Willy Tarreau
On Wed, Nov 11, 2020 at 10:36:54PM +0100, Tim Duesterhus wrote: > Willy, > > fixed a typo in the commit message. not -> now. Sorry for the noise with the > separate mails! No problem, now merged, thank you Tim! Willy

Re: do we want to keep CentOS 6 builds?

2020-11-17 Thread Willy Tarreau
Hi all, On Tue, Nov 17, 2020 at 12:10:41AM +0100, Lukas Tribus wrote: > No, but since we *only test* master, this is the only way we get > *some* coverage for the changes we are backporting to stable branches. > After all, a large percentage of them come from master. How do we know > that a fix th

Re: [PATCH] remote couple of travis jobs (migrated to github actions), unmark arm64 as allowed to fail

2020-11-17 Thread Willy Tarreau
On Sun, Nov 15, 2020 at 11:59:54PM +0500, ??? wrote: > One of those jobs uses ERR= > I keep an eye on them:) will remove them sometimes OK series merged then. Thanks! Willy

Re: Use default/first crt only if all snifilter fails

2020-11-17 Thread Joao Morais
> Em 17 de nov de 2020, à(s) 05:28, William Lallemand > escreveu: > > You could also do > > /tmp/default.pem !* > > That will ignore the creation of the SNI entries. Wow thank you so much Willian, as far as I can tell and based on ~5min tests, this worked like a charm without any back

Re: Use default/first crt only if all snifilter fails

2020-11-17 Thread William Lallemand
On Tue, Nov 17, 2020 at 09:18:43AM -0300, Joao Morais wrote: > > > > Em 17 de nov de 2020, à(s) 05:28, William Lallemand > > escreveu: > > > > You could also do > > > > /tmp/default.pem !* > > > > That will ignore the creation of the SNI entries. > > Wow thank you so much Willian, as fa

Re: Disable client keep-alive using ACL

2020-11-17 Thread Tim Düsterhus , WoltLab GmbH
Hi Am 09.11.20 um 12:36 schrieb Tim Düsterhus, WoltLab GmbH: > is it possible to reliably disable client keep-alive on demand based on > the result of an ACL? > > I was successful for HTTP/1 requests by using: > > http-after-response set-header connection close if foo > > But apparently that ha

Re: do we want to keep CentOS 6 builds?

2020-11-17 Thread William Lallemand
On Tue, Nov 17, 2020 at 12:16:05PM +0100, Willy Tarreau wrote: > Hi all, > > On Tue, Nov 17, 2020 at 12:10:41AM +0100, Lukas Tribus wrote: > > No, but since we *only test* master, this is the only way we get > > *some* coverage for the changes we are backporting to stable branches. > > After all,

Re: do we want to keep CentOS 6 builds?

2020-11-17 Thread Илья Шипицин
вт, 17 нояб. 2020 г. в 18:51, William Lallemand : > On Tue, Nov 17, 2020 at 12:16:05PM +0100, Willy Tarreau wrote: > > Hi all, > > > > On Tue, Nov 17, 2020 at 12:10:41AM +0100, Lukas Tribus wrote: > > > No, but since we *only test* master, this is the only way we get > > > *some* coverage for the

Re: do we want to keep CentOS 6 builds?

2020-11-17 Thread Willy Tarreau
On Tue, Nov 17, 2020 at 02:50:52PM +0100, William Lallemand wrote: > I agree with that, however the problem will be the test of features that > require an up to date version of OpenSSL, maybe we should improve the > script so we could at least exclude non-openssl and non-1.1.1 versions. This is a

Re: Disable client keep-alive using ACL

2020-11-17 Thread Lukas Tribus
Hi Tim, On Tue, 17 Nov 2020 at 13:35, Tim Düsterhus, WoltLab GmbH wrote: > > Hi > > Am 09.11.20 um 12:36 schrieb Tim Düsterhus, WoltLab GmbH: > > is it possible to reliably disable client keep-alive on demand based on > > the result of an ACL? > > > > I was successful for HTTP/1 requests by using

stable-bot: Bugfixes waiting for a release 2.2 (14), 2.1 (9), 2.0 (8)

2020-11-17 Thread stable-bot
Hi, This is a friendly bot that watches fixes pending for the next haproxy-stable release! One such e-mail is sent periodically once patches are waiting in the last maintenance branch, and an ideal release date is computed based on the severity of these fixes and their merge date. Responses t