Compiling HAProxy 2.8.1 with WolfSSL 5.6.3 yields errors about OCSP

2023-07-14 Thread Marcel Menzel
Hello List, Trying to compile HAProxy version 2.8.1 with WolfSSL 5.6.3 results in the following error: src/ssl_sock.c: In function ‘ssl_sock_load_ocsp’: src/ssl_sock.c:1117:9: error: unknown type name ‘tlsextStatusCb’  1117 | tlsextStatusCb callback;   | ^~

Re: Question about the "name" option for the bind line

2023-01-07 Thread Marcel Menzel
Hello Willy, Am 07/01/2023 um 15:46 schrieb Willy Tarreau: Hello Marcel, Indeed, you need "option socket-stats" in the frontend that has such listeners, so that the stats are collected per-listening socket (this is not the case by default). Yes, that was my missing option I was looking for.

Question about the "name" option for the bind line

2023-01-07 Thread Marcel Menzel
dmin if TRUE   stats realm Haproxy\ Statistics    stats uri /    stats show-legends   stats show-desc stats show-node    stats show-modules Am I missing something out here? Kind regards, Marcel Menzel 1: https://docs.haproxy.org/2.7/configuration.html#5.1-name

Log the reason for SSL handshake failure

2020-06-23 Thread Marcel Menzel
we had to use tcpdump to get SSL alert number leading to an aborted SSL handshake. Kind regards, Marcel Menzel