Accepting request 238588 from network:ha-clustering:Factory

1 OBS-URL: https://build.opensuse.org/request/show/238588 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haproxy?expand=0&rev=6
2014-06-25 13:24:23 +00:00
parent d02a0c91a8
commit 815be0e3e6
25 changed files with 345 additions and 1163 deletions
--- a/haproxy.changes
+++ b/haproxy.changes
@@ -1,3 +1,126 @@
+-------------------------------------------------------------------
+Tue Jun 24 15:55:48 UTC 2014 - mrueckert@suse.de
+
+- install the vim file into the versioned directory and dont cover
+  the current symlink with a directory
+
+-------------------------------------------------------------------
+Tue Jun 24 13:00:39 UTC 2014 - mrueckert@suse.de
+
+- add Requires to vim to make the ownership of the vim directory
+  clear and not break any symlink handling the vim package might
+  use.
+
+-------------------------------------------------------------------
+Tue Jun 24 12:23:55 UTC 2014 - mrueckert@suse.de
+
+- update to 1.5.1
+  - BUG/MINOR: config: http-request replace-header arg typo
+  - BUG/MINOR: ssl: rejects OCSP response without nextupdate.
+  - BUG/MEDIUM: ssl: Fix to not serve expired OCSP responses.
+  - BUG/MINOR: ssl: Fix OCSP resp update fails with the same
+    certificate configured twice.     (cherry picked from commit
+    1d3865b096b43b9a6d6a564ffb424ffa6f1ef79f)
+  - BUG/MEDIUM: Consistently use 'check' in process_chk
+  - BUG/MAJOR: session: revert all the crappy client-side timeout
+    changes
+  - BUG/MINOR: logs: properly initialize and count log sockets
+- drop haproxy-1.5.0_consistently_use_check.patch:
+  included upstream
+
+-------------------------------------------------------------------
+Tue Jun 24 09:51:25 UTC 2014 - kgronlund@suse.com
+
+- Install vim file to a more appropriate location 
+
+-------------------------------------------------------------------
+Mon Jun 23 09:19:04 UTC 2014 - kgronlund@suse.com
+
+- added pre macro for systemd service file 
+
+-------------------------------------------------------------------
+Mon Jun 23 08:28:06 UTC 2014 - kgronlund@suse.com
+
+- Use better systemd detection consistently
+
+-------------------------------------------------------------------
+Sun Jun 22 19:48:11 UTC 2014 - mrueckert@suse.de
+
+- pull commit 9ac7cabaf9945fb92c96cb92f5ea85235f54f7d6:
+  Consistently use 'check' in process_chk
+  I am not entirely sure that this is a bug, but it seems
+  to me that it may cause a problem if there agent-check is
+  configured and there is some kind of error making a connection
+  for it.
+  adds patch haproxy-1.5.0_consistently_use_check.patch
+
+-------------------------------------------------------------------
+Fri Jun 20 14:37:21 UTC 2014 - mrueckert@suse.de
+
+- update to 1.5.0
+  For people who don't follow the development versions, 1.5 expands
+  1.4 with many new features and performance improvements,
+  including native SSL support on both sides with SNI/NPN/ALPN and
+  OCSP stapling, IPv6 and UNIX sockets are supported everywhere,
+  full HTTP keep-alive for better support of NTLM and improved
+  efficiency in static farms, HTTP/1.1 compression (deflate, gzip)
+  to save bandwidth, PROXY protocol versions 1 and 2 on both sides,
+  data sampling on everything in request or response, including
+  payload, ACLs can use any matching method with any input sample
+  maps and dynamic ACLs updatable from the CLI stick-tables support
+  counters to track activity on any input sample custom format for
+  logs, unique-id, header rewriting, and redirects, improved health
+  checks (SSL, scripted TCP, check agent, ...), much more scalable
+  configuration supports hundreds of thousands of backends and
+  certificates without sweating.
+
+  For all the details see /usr/share/doc/packages/haproxy/CHANGELOG
+
+- enable tcp fast open if the kernel is recent enough
+- enable PCRE JIT if PCRE is recent enough
+- enable openssl support!
+  - haproxy can finally terminate ssl itself and also talk SSL to
+    the backend servers.
+  - including SNI/NPN/ALPN support.
+  new buildrequires openssl and pkgconfig
+- enable deflate support
+  new buildrequires zlib-devel
+- enable transparent proxy support
+- enable usage of accept4. reduces the syscall amount.
+- enable building and installing of halog
+- install vim file into the correct place
+- dropped patches:
+  0001-MEDIUM-add-systemd-service.patch
+  0002-MEDIUM-add-haproxy-systemd-wrapper.patch
+  0003-MEDIUM-New-cli-option-Ds-for-systemd-compatibility.patch
+  0004-BUG-MEDIUM-systemd-wrapper-don-t-leak-zombie-process.patch
+  0005-BUILD-stdbool-is-not-portable-again.patch
+  0006-MEDIUM-haproxy-systemd-wrapper-Use-haproxy-in-same-d.patch
+  0007-MEDIUM-systemd-wrapper-Kill-child-processes-when-int.patch
+  0008-LOW-systemd-wrapper-Write-debug-information-to-stdou.patch
+  0009-openSUSE-Configure-haproxy-user.patch
+  0010-openSUSE-Fix-path-to-PCRE-library.patch
+  0011-BUILD-MINOR-systemd-fix-compiler-warning-about-unuse.patch
+  0012-BUG-MEDIUM-systemd-wrapper-fix-locating-of-haproxy-b.patch
+  0013-MINOR-systemd-wrapper-re-execute-on-SIGUSR2.patch
+  0014-MINOR-systemd-wrapper-improve-logging.patch
+  0015-MINOR-systemd-wrapper-propagate-exit-status.patch
+- added haproxy-1.2.16_config_haproxy_user.patch:
+  (replaces 0009-openSUSE-Configure-haproxy-user.patch)
+- added haproxy-1.5_check_config_before_start.patch:
+  systemd allows us to run other things before we start the final
+  daemon. use this to check the configuration before launching.
+- added haproxy-makefile_lib.patch
+  (replaces 0010-openSUSE-Fix-path-to-PCRE-library.patch)
+- added sec-options.patch:
+  allow it more easily to build haproxy with PIE, stackprotector
+  and relro. all those options are enabled on our build.
+- added apparmor profile
+  usr.sbin.haproxy.apparmor
+  local.usr.sbin.haproxy.apparmor
+- change the conditionals for systemd to use bcond_with to make it
+  more obvious what we are guarding.
+
 -------------------------------------------------------------------
 Wed May 21 10:50:21 UTC 2014 - jsegitz@novell.com