Re: Self-signed cert at haproxy, formal cert on backend web server

2022-03-18 Thread Shawn Heisey
On 3/18/2022 9:28 AM, Moore, Dan [TREAS] wrote: This all works except the client browser is showing the connection as insecure. Would a formal certificate at haproxy fix this or is there another way to keep the browser happy using the self-signed cert? The config I'm using is below. Thanks!

Self-signed cert at haproxy, formal cert on backend web server

2022-03-18 Thread Moore, Dan [TREAS]
Hello all, We have been using SSL passthrough for a long time but a new set of applications require I decrypt at the load-balancer to direct traffic and re-encrypt for sending to the backend. For testing, I'm using a self-signed cert at haproxy and the back end web server has a formal

Re: [PATCH] CI: switch to LibreSSL-3.5.1

2022-03-18 Thread William Lallemand
On Wed, Mar 16, 2022 at 12:29:41PM +0500, Илья Шипицин wrote: > Hello, > > as LibreSSL-3.5.1 is released, let us switch to the most recent release. > > thanks, > Ilya Thanks, applied. -- William Lallemand

Re: CI caching improvement

2022-03-18 Thread William Lallemand
On Wed, Mar 16, 2022 at 09:31:56AM +0100, Tim Düsterhus wrote: > Willy, > > On 3/8/22 20:43, Tim Düsterhus wrote: > >> Yes my point was about VTest. However you made me think about a very good > >> reason for caching haproxy builds as well :-) Very commonly, some VTest > >> randomly fails.