Re: [ANNOUNCE] haproxy-1.7.1

2017-01-03 Thread Willy Tarreau
On Tue, Jan 03, 2017 at 06:21:18PM +0100, Lukas Tribus wrote: > Hi Igor, > > > Am 16.12.2016 um 12:52 schrieb Igor Pav: > > Cool, even TLS 1.3 0 RTT feature requires no changes? > > Nope, the early-data mode will require API changes: > >

Re: [ANNOUNCE] haproxy-1.7.1

2017-01-03 Thread Lukas Tribus
Hi Igor, Am 16.12.2016 um 12:52 schrieb Igor Pav: Cool, even TLS 1.3 0 RTT feature requires no changes? Nope, the early-data mode will require API changes: https://github.com/openssl/openssl/issues/1541#issuecomment-269567480 Lukas

Re: [ANNOUNCE] haproxy-1.7.1

2016-12-16 Thread Igor Pav
Cool, even TLS 1.3 0 RTT feature requires no changes? On Fri, Dec 16, 2016 at 3:03 AM, Lukas Tribus wrote: > Hi Igor, > > > Am 14.12.2016 um 20:47 schrieb Igor Pav: >> >> Hi Lukas, in fact, openssl already gets early TLS 1.3 adoption in dev, >> will release in 1.1.1, and BoringSSL

Re: [ANNOUNCE] haproxy-1.7.1

2016-12-15 Thread Bertrand Jacquin
On 15/12/2016 19:03, Lukas Tribus wrote: Hi Igor, Am 14.12.2016 um 20:47 schrieb Igor Pav: Hi Lukas, in fact, openssl already gets early TLS 1.3 adoption in dev, will release in 1.1.1, and BoringSSL supports TLSv1.3 already. That's nice, and in fact since 1.1.1 will be API compatible with

Re: [ANNOUNCE] haproxy-1.7.1

2016-12-15 Thread Lukas Tribus
Hi Igor, Am 14.12.2016 um 20:47 schrieb Igor Pav: Hi Lukas, in fact, openssl already gets early TLS 1.3 adoption in dev, will release in 1.1.1, and BoringSSL supports TLSv1.3 already. That's nice, and in fact since 1.1.1 will be API compatible with 1.1.0 [1] *and* support TLS 1.3 (or

Re: [ANNOUNCE] haproxy-1.7.1

2016-12-14 Thread Igor Pav
Hi Lukas, in fact, openssl already gets early TLS 1.3 adoption in dev, will release in 1.1.1, and BoringSSL supports TLSv1.3 already. On Thu, Dec 15, 2016 at 1:48 AM, Lukas Tribus wrote: > Hi Igor, > > > Am 14.12.2016 um 14:37 schrieb Igor Pav: >> >> That's great! >> >> Will

Re: [ANNOUNCE] haproxy-1.7.1

2016-12-14 Thread Lukas Tribus
Hi Igor, Am 14.12.2016 um 14:37 schrieb Igor Pav: That's great! Will HAProxy adopt TLS 1.3 soon? This actually depends way more on openssl than it depends on haproxy (which most likely only needs a few tweaks). TLS 1.3 is the primary focus of the next openssl release [1], which I assume

Re: [ANNOUNCE] haproxy-1.7.1

2016-12-14 Thread Igor Pav
That's great! Will HAProxy adopt TLS 1.3 soon? On Tue, Dec 13, 2016 at 7:39 AM, Willy Tarreau wrote: > Hi, > > HAProxy 1.7.1 was released on 2016/12/13. It added 28 new commits > after version 1.7.0. > > It addresses a few issues related to how buffers are allocated under > low

[ANNOUNCE] haproxy-1.7.1

2016-12-12 Thread Willy Tarreau
Hi, HAProxy 1.7.1 was released on 2016/12/13. It added 28 new commits after version 1.7.0. It addresses a few issues related to how buffers are allocated under low memory condition consecutive to the applet scheduling changes introduced before 1.6 was released (Christopher found a nest of