RepoMirrors
/
haproxy
mirror of http://git.haproxy.org/git/haproxy.git/
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

REGTESTS: workaround for a crash with recent libressl on http-reuse sni 

Disable the ssl-reuse for the sni test on http_reuse_conn_hash vtc. This
seems to be the origin of a crash with libressl environment from 3.2.2
up to 3.3.1 included.

For now, it is not determined if the root cause is in haproxy or
libressl.

Please look for the github issue #1115 for all the details.
This commit is contained in:
Amaury Denoyelle 2021-02-19 15:37:40 +01:00 committed by Willy Tarreau
parent 3d752a8f97
commit d8ea188058
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
reg-tests/connection/http_reuse_conn_hash.vtc
View File

@ -9,9 +9,11 @@ haproxy h1 -conf {
mode http
# sni
# ssl-reuse is disabled because it seems to be the origin of a crash with
# libressl from 3.2.2 on the CI (cf github issue #1115)
listen sender-sni
bind "fd@${feS_sni}"
server srv2 ${h1_feR_ssl_addr}:${h1_feR_ssl_port} ssl sni "req.hdr(x-sni)" verify none pool-low-conn 2
server srv2 ${h1_feR_ssl_addr}:${h1_feR_ssl_port} ssl sni "req.hdr(x-sni)" verify none pool-low-conn 2 no-ssl-reuse
# set-dst
# specify dst1_addr for server, which should be identical to dst2_addr