Commit Graph

181 Commits

Author SHA256 Message Date
4ab0507fcf - Update to version 2.7.0+git0.437fd289f:
https://www.haproxy.com/blog/announcing-haproxy-2-7/

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=274
2022-12-01 15:28:45 +00:00
08ee4dd97b - reenable the pcre jit after the last change
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=273
2022-11-22 13:14:31 +00:00
53b24469e2 Accepting request 1010887 from home:coolo:branches:openSUSE:Factory
- Switch from unmaintained pcre 8.45 to pcre2 10

OBS-URL: https://build.opensuse.org/request/show/1010887
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=272
2022-11-22 13:12:10 +00:00
44022b3ab7 - Update to version 2.6.6+git0.274d1a4df:
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=271
2022-09-26 13:20:26 +00:00
90554ff6aa Accepting request 1004374 from home:dirkmueller:Factory
- Update to version 2.6.5+git0.987a4e248:
  * [RELEASE] Released version 2.6.5
  * BUG/MINOR: http-act: initialize http fmt head earlier
  * MINOR: debug: report applet pointer and handler in crashes when known
  * DEBUG: stream: minor rearrangement of a few fields in struct stream.
  * BUG/MINOR: mux-fcgi: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h1: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h2: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: httpclient: keep-alive was accidentely disabled
  * BUG/MEDIUM: httpclient: always detach the caller before self-killing
  * BUG/MINOR: h2: properly set the direction flag on HTX response
  * BUG/MINOR: quic: Frames leak during retransmissions
  * MINOR: quic: Trace typo fix in qc_release_frm()
  * MINOR: quic: Add TX frames addresses to traces to several trace events
  * BUG/MINOR: quic: Do not ack when probing
  * MINOR: backend: always satisfy the first req reuse rule with l7 retries
  * BUG/MEDIUM: mux-h1: always use RST to kill idle connections in pools
  * REGTESTS: http_request_buffer: Add a barrier to not mix up log messages
  * BUG/MINOR: regex: Properly handle PCRE2 lib compiled without JIT support
  * BUILD: debug: make sure debug macros are never empty
  * CLEANUP: exclude haring with .gitignore
  * DEV: haring: support remapping LF in contents with CR VT
  * DEV: haring: add a simple utility to read file-backed rings
  * MINOR: sink/ring: rotate non-empty file-backed contents only
  * MINOR: ring: archive a previous file-backed ring on startup
  * BUILD: sink: replace S_IRUSR, S_IWUSR with their octal value
  * MINOR: ring: add support for a backing-file
  * MINOR: ring: support creating a ring from a linear area
  * BUILD: ring: forward-declare struct appctx to avoid a build warning
  * BUG/MINOR: ssl: leak of ckch_inst_link in ckch_inst_free() v2

OBS-URL: https://build.opensuse.org/request/show/1004374
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=270
2022-09-26 12:04:39 +00:00
9f75067d28 - Update to version 2.6.4+git0.2a2078cba:
* [RELEASE] Released version 2.6.4
  * BUG/MAJOR: mworker: fix infinite loop on master with no proxies.
  * BUG/MINOR: ssl/cli: error when the ca-file is empty

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=269
2022-08-22 13:30:08 +00:00
f5c09f6b08 - Update to version 2.6.3+git0.76f187b36:
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=268
2022-08-19 16:10:25 +00:00
3528fca25f Accepting request 991595 from home:dirkmueller:Factory
- Update to version 2.6.2+git0.16a3646fd:
  * [RELEASE] Released version 2.6.2
  * BUG/MINOR: backend: Fallback on RR algo if balance on source is impossible
  * BUILD: quic: fix anonymous union for gcc-4.4
  * BUG/MEDIUM: stconn: Only reset connect expiration when processing backend side
  * BUILD: add detection for unsupported compiler models
  * BUG/MEDIUM: mworker: proc_self incorrectly set crashes upon reload
  * BUG/MAJOR: mux_quic: fix invalid PROTOCOL_VIOLATION on POST data overlap
  * BUG/MINOR: mworker/cli: relative pid prefix not validated anymore
  * BUG/MINOR: quic: do not send CONNECTION_CLOSE_APP in initial/handshake
  * BUG/MINOR: tools: fix statistical_prng_range()'s output range
  * BUG/MINOR: ssl: allow duplicate certificates in ca-file directories
  * BUG/MINOR: resolvers: shut off the warning for the default resolvers
  * MINOR: resolvers: resolvers_destroy() deinit and free a resolver
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds (try 2)
  * BUILD: makefile: Fix install(1) handling for OpenBSD/NetBSD/Solaris/AIX
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds
  * BUG/MINOR: debug: enter ha_panic() only once
  * BUG/MEDIUM: cli/threads: make "show threads" more robust on applets
  * BUG/MINOR: quic: fix closing state on NO_ERROR code sent
  * BUG/MEDIUM: mux-quic: fix server chunked encoding response
  * CLEANUP: h2: Typo fix in h2_unsubcribe() traces
  * MINOR: qpack: properly handle invalid dynamic table references
  * MINOR: h3: handle errors on HEADERS parsing/QPACK decoding
  * MINOR: h3: add h3c pointer into h3s instance
  * BUG/MINOR: mux-quic: do not signal FIN if gap in buffer
  * MINOR: ncbuf: implement ncb_is_fragmented()
  * MINOR: quic: Increase the QUIC connections RX buffer size (upto 64Kb)
  * MINOR: quic: Improvements for the datagrams receipt
  * MINOR: task: Add tasklet_wakeup_after()

OBS-URL: https://build.opensuse.org/request/show/991595
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=267
2022-07-28 21:02:04 +00:00
6348412bb9 Accepting request 988057 from home:elimat:branches:server:http
- Update to version 2.6.1+git0.f6ca66d44:
  * [RELEASE] Released version 2.6.1
  * REGTESTS: ssl: add the same cert for client/server
  * BUG/MEDIUM: mworker: use default maxconn in wait mode
  * BUG/MINOR: quic: Acknowledgement must be forced during handshake
  * BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list
  * BUG/MINOR: quic: free rejected Rx packets
  * BUG/MINOR: quic: purge conn Rx packet list on release
  * BUG/MINOR: quic_stats: Duplicate "quic_streams_data_blocked_bidi" field name
  * BUG/MINOR: quic: Unexpected half open connection counter wrapping
  * BUG/MINOR: log: Properly test connection retries to fix dontlog-normal option
  * MINOR: stream: Rely on stconn flags to abort stream destructive upgrade
  * BUG/MEDIUM: stream: Properly handle destructive client connection upgrades
  * BUG/MINOR: task: fix thread assignment in tasklet_kill()
  * BUG/MINOR: quic: Wrong PTO calculation
  * BUG/MINOR: quic: Stop hardcoding Retry packet Version field
  * BUG/BUILD: h3: fix wrong label name
  * BUG/MINOR: h3/qpack: deal with too many headers
  * MINOR: qpack: add comments and remove a useless trace
  * BUG/MINOR: qpack: support header litteral name decoding
  * BUG/MEDIUM: mux-quic: fix segfault on flow-control frame cleanup
  * BUG/MEDIUM: cli: Notify cli applet won't consume data during request processing
  * BUG/MEDIUM: stconn: Don't wakeup applet for send if it won't consume data
  * BUG/MINOR: tcp-rules: Make action call final on read error and delay expiration
  * BUG/MINOR: mux-quic: fix memleak on frames rejected by transport
  * BUG/MEDIUM: mux-quic: fix flow control connection Tx level
  * BUG/MINOR: cli/stats: add missing trailing LF after "show info json"
  * BUG/MINOR: server: do not enable DNS resolution on disabled proxies
  * BUG/MINOR: cli/stats: add missing trailing LF after JSON outputs
  * BUG/MINOR: h3: fix frame type definition
  * REGTESTS: healthcheckmail: Relax health-check failure condition
  * REGTESTS: healthcheckmail: Update the test to be functionnal again
  * BUG/MINOR: checks: Properly handle email alerts in trace messages
  * BUG/MINOR: trace: Test server existence for health-checks to get proxy
  * BUG/MEDIUM: mailers: Set the object type for check attached to an email alert
  * BUILD: compiler: implement unreachable for older compilers too
  * REGTESTS: restrict_req_hdr_names: Extend supported versions
  * REGTESTS: http_abortonclose: Extend supported versions
  * BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_crlfile I/O handler
  * BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cafile I/O handler
  * BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cert I/O handler
  * BUG/MINOR: ssl_ckch: Init right field when parsing "commit ssl crl-file" cmd
  * BUG/MINOR: ssl_ckch: Dump cert transaction only once if show command yield
  * BUG/MINOR: ssl_ckch: Dump CA transaction only once if show command yield
  * BUG/MINOR: ssl_ckch: Dump CRL transaction only once if show command yield
  * BUG/MINOR: ssl_ckch: Use right type for old entry in show_crlfile_ctx
  * REGTESTS: http_request_buffer: Increase client timeout to wait "slow" clients
  * REGTESTS: abortonclose: Add a barrier to not mix up log messages
  * MEDIUM: httpclient: Don't close CLI applet at the end of a response
  * MEDIUM: http-ana: Always report rewrite failures as PRXCOND in logs
  * BUG/MEDIUM: httpclient: Rework CLI I/O handler to handle full buffer cases
  * BUG/MEDIUM: httpclient: Don't remove HTX header blocks before duplicating them
  * BUG/MEDIUM: ssl/crt-list: Rework 'add ssl crt-list' to handle full buffer cases
  * BUG/MEDIUM: ssl_ckch: Rework 'commit ssl ca-file' to handle full buffer cases
  * BUG/MEDIUM: ssl_ckch: Rework 'commit ssl cert' to handle full buffer cases
  * BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a CA/CRL entry
  * BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a cert entry
  * BUG/MEDIUM: ssl_ckch: Don't delete CA/CRL entry if it is being modified
  * BUG/MEDIUM: ssl_ckch: Don't delete a cert entry if it is being modified
  * BUG/MINOR: ssl_ckch: Free error msg if commit changes on a CA/CRL entry fails
  * BUG/MINOR: ssl_ckch: Free error msg if commit changes on a cert entry fails

OBS-URL: https://build.opensuse.org/request/show/988057
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=266
2022-07-20 13:06:37 +00:00
1b9d0c4fc0 - Update to version 2.6.0+git0.a1efc048b:
https://www.mail-archive.com/haproxy@formilux.org/msg42371.html
- refreshed patches
  - haproxy-1.6.0-makefile_lib.patch
  - haproxy-1.6.0-sec-options.patch
  - haproxy-1.6.0_config_haproxy_user.patch
  - lua54.patch

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=265
2022-05-31 16:03:09 +00:00
1b2148db56 - Update to version 2.5.7+git0.2ef551d02:
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=264
2022-05-13 15:05:48 +00:00
e7ae44ed03 - Update to version 2.5.6+git0.ba44b4312:
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=263
2022-04-26 22:10:21 +00:00
2eb2200b6b - Update to version 2.5.5+git0.384c5c59a:
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=262
2022-03-14 17:11:47 +00:00
dc820ede31 - Update to version 2.5.4+git0.e55ab4208:
* [RELEASE] Released version 2.5.4
  * BUG/MEDIUM: stream: Abort processing if response buffer allocation fails
  * CI: github: enable pool debugging by default
  * REGTESTS: fix the race conditions in 40be_2srv_odd_health_checks
  * BUG/MINOR: proxy: preset the error message pointer to NULL in parse_new_proxy()
  * DOC: Fix usage/examples of deprecated ACLs
  * BUG/MAJOR: mux-h2: Be sure to always report HTX parsing error to the app layer
  * BUG/MEDIUM: mux-h1: Don't wake h1s if mux is blocked on lack of output buffer
  * BUG/MEDIUM: htx: Be sure to have a buffer to perform a raw copy of a message

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=261
2022-02-25 16:22:53 +00:00
7e4ab87d11 - apparmor: profile now needs access to /sys/devices/system/node/
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=260
2022-02-24 18:16:38 +00:00
4b73053dfd add issue references
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=258
2022-02-24 13:59:18 +00:00
d6dc3f675d - Update to version 2.5.3+git0.abf078b15:
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=257
2022-02-18 21:47:48 +00:00
Thorsten Kukuk
9c6dee7c39 Accepting request 951547 from home:gmbr3:Active
- Add now working CONFIG parameter to sysusers generator

OBS-URL: https://build.opensuse.org/request/show/951547
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=256
2022-02-07 10:37:58 +00:00
beaec7a986 - Update to version 2.5.1+git0.86b093a51:
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=255
2022-01-11 17:22:09 +00:00
35ad665cc8 - Update to version 2.5.0+git0.f2e0833f1:
https://www.mail-archive.com/haproxy@formilux.org/msg41508.html
- refreshed patches to apply cleanly again
  haproxy-1.6.0-sec-options.patch
  haproxy-1.6.0_config_haproxy_user.patch
  lua54.patch

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=254
2021-11-23 16:47:06 +00:00
8bb11b8817 - Update to version 2.4.8+git0.d1f8d41e0:
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=253
2021-11-03 16:42:10 +00:00
375ea722aa - Update to version 2.4.7+git0.b5e51a5e2:
* [RELEASE] Released version 2.4.7
  * BUG/MEDIUM: http-ana: Clear request analyzers when applying redirect rule

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=252
2021-10-04 13:18:40 +00:00
b389c9324c - Update to version 2.4.6+git0.d83fd76a1:
* [RELEASE] Released version 2.4.6
  * BUG/MEDIUM: filters: Fix a typo when a filter is attached blocking the release

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=251
2021-10-04 10:25:16 +00:00
aaa5f3bebd - Update to version 2.4.5+git0.e74a1b34b:
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=250
2021-10-01 16:45:41 +00:00
67809aa6e7 - Update to version 2.4.4+git0.acb1d0bea: CVE-2021-40346 (boo#1189877)
* [RELEASE] Released version 2.4.4
  * Revert "BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive"
  * BUG/MAJOR: htx: fix missing header name length check in htx_add_header/trailer
  * CLEANUP: htx: remove comments about "must be < 256 MB"
  * BUG/MINOR: config: reject configs using HTTP with bufsize >= 256 MB
  * DOC: configuration: remove wrong tcp-request examples in tcp-response
  * BUG/MINOR: vars: fix set-var/unset-var exclusivity in the keyword parser
  * CLEANUP: Add missing include guard to signal.h
  * BUG/MINOR: tools: Fix loop condition in dump_text()
  * BUG/MINOR threads: Use get_(local|gm)time instead of (local|gm)time
  * BUG/MINOR: ebtree: remove dependency on incorrect macro for bits per long
  * MINOR: time: add report_idle() to report process-wide idle time
  * BUG/MINOR: time: fix idle time computation for long sleeps
  * BUG/MINOR: lua: use strlcpy2() not strncpy() to copy sample keywords
  * MINOR: compiler: implement an ONLY_ONCE() macro
  * BUG/MINOR: base64: base64urldec() ignores padding in output size check
  * BUG/MEDIUM: base64: check output boundaries within base64{dec,urldec}
  * BUG/MINOR: stick-table: fix the sc-set-gpt* parser when using expressions
  * MINOR: hlua: take the global Lua lock inside a global function
  * REGTESTS: abortonclose: after retries, 503 is expected, not close
  * REGTESTS: http_upgrade: fix incorrect expectation on TCP->H1->H2
  * BUG/MEDIUM: h2: match absolute-path not path-absolute for :path

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=249
2021-09-07 15:46:15 +00:00
426c2a43da add new bugnumbers and CVEs
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=248
2021-08-18 08:40:45 +00:00
a34696f427 - Update to version 2.4.3+git0.4dd5a5a6c: (boo#1189366)
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=247
2021-08-17 16:02:03 +00:00
341822f8b5 - Update to version 2.4.2+git0.553dee326:
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=246
2021-07-07 23:32:24 +00:00
debd37458a - Update to version 2.4.1+git0.1ce7d4925:
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=245
2021-06-17 16:39:25 +00:00
ecc24395b9 - Update to version 2.4.0+git0.6cbbecf09:
https://www.haproxy.com/blog/announcing-haproxy-2-4/
  
  for all the details see /usr/share/doc/packages/haproxy/CHANGELOG
- refreshed patches to apply cleanly again
  haproxy-1.6.0-makefile_lib.patch
  haproxy-1.6.0-sec-options.patch
  lua54.patch

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=244
2021-05-14 10:30:30 +00:00
b6784f8e37 - Update to version 2.3.10+git0.4764f0e4e:
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=243
2021-04-23 20:36:22 +00:00
6cbf653a6b - Update to version 2.3.9+git1.afb63bc04:
* BUILD: backend: fix build breakage in idle conn locking fix
  * [RELEASE] Released version 2.3.9
  * BUG/MEDIUM: time: make sure to always initialize the global tick
  * BUG/MINOR: stats: Apply proper styles in HTML status page.
  * BUG/MINOR: payload: Wait for more data if buffer is empty in payload/payload_lv
  * MEDIUM: backend: use a trylock to grab a connection on high FD counts as well
  * BUG/MEDIUM: mux-h1: make h1_shutw_conn() idempotent

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=242
2021-03-30 17:49:45 +00:00
e43173f9d3 - Update to version 2.3.8+git0.e572195c7:
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=241
2021-03-25 15:52:05 +00:00
4ccae67e36 - Update to version 2.3.7+git0.2d39ce334:
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=240
2021-03-16 15:27:56 +00:00
76f82709a9 - Update to version 2.3.6+git0.7851701ed:
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=239
2021-03-03 15:17:37 +00:00
65765c3a3c - Update to version 2.3.5+git0.5902ad99b:
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=238
2021-02-06 16:38:44 +00:00
4b9536a493 Accepting request 867553 from home:gmbr3:Lua
- Add lua54.patch to fix building with lua 5.4

OBS-URL: https://build.opensuse.org/request/show/867553
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=237
2021-02-03 15:00:09 +00:00
3e2d4a99ea - Update to version 2.3.4+git0.10189c965:
* [RELEASE] Released version 2.3.4
  * MINOR: contrib/prometheus-exporter: use fill_info for process dump
  * MINOR: contrib/prometheus-exporter: avoid connection close header
  * BUG/MINOR: init: enforce strict-limits when using master-worker
  * BUG/MINOR: check: Don't perform any check on servers defined in a frontend
  * BUG/MINOR: sample: Memory leak of sample_expr structure in case of error
  * Revert "BUG/MINOR: dns: SRV records ignores duplicated AR records"
  * MINOR: reg-tests: add base prometheus test
  * BUG/MINOR: reg-tests: fix service dependency script
  * BUG/MINOR: sample: check alloc_trash_chunk return value in concat()
  * MINOR: reg-tests: add a way to add service dependency

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=236
2021-01-13 16:08:00 +00:00
b04f7f04e3 - Update to version 2.3.3+git0.9233c2143:
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=235
2021-01-08 21:12:25 +00:00
9ca0f86db4 - Update to version 2.3.2+git0.d522db763:
* [RELEASE] Released version 2.3.2
  * BUG/MINOR: http-fetch: Fix smp_fetch_body() when called from a health-check
  * DOC: config: Move req.hdrs and req.hdrs_bin in L7 samples fetches section
  * BUG/MAJOR: tcpcheck: Allocate input and output buffers from the buffer pool
  * MINOR: tcpcheck: Don't handle anymore in-progress send rules in tcpcheck_main
  * BUG/MINOR: tcpcheck: Don't forget to reset tcp-check flags on new kind of check
  * DOC: Clarify %HP description in log-format
  * DOC: better document the config file format and escaping/quoting rules
  * BUG/MAJOR: peers: fix partial message decoding
  * BUG/MEDIUM: http_act: Restore init of log-format list
  * BUILD: Show the value of DEBUG= in haproxy -vv
  * BUILD: Make DEBUG part of .build_opts
  * MINOR: http_act: Add -m flag for del-header name matching method
  * REGTESTS: converter: add url_dec test
  * REGTESTS: Add sample_fetches/cook.vtc
  * DOC: cache: Add new caching limitation information
  * MEDIUM: cache: Change caching conditions
  * BUG/MAJOR: filters: Always keep all offsets up to date during data filtering
  * DOC: better describes how to configure a fallback crt
  * BUG/MINOR: http_htx: Fix searching headers by substring
  * BUG/MAJOR: connection: reset conn->owner when detaching from session list
  * CLEANUP: connection: do not use conn->owner when the session is known
  * DOC: clarify how to create a fallback crt
  * BUILD: makefile: enable crypt(3) for OpenBSD
  * BUG/MEDIUM: ssl/crt-list: fix error when no file found
  * BUG/MINOR: ssl/crt-list: load bundle in crt-list only if activated
  * BUG/MEDIUM: ssl: error when no certificate are found
  * BUG/MEDIUM: ssl/crt-list: bundle support broken in crt-list
  * BUG/MEDIUM: http-ana: Don't eval http-after-response ruleset on empty messages

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=234
2020-11-30 17:04:26 +00:00
c933930574 - Update to version 2.3.1+git0.bdd7178b8:
* [RELEASE] Released version 2.3.1
  * REGTEST: make ssl_client_samples and ssl_server_samples require to 2.2
  * MINOR: peers: Add traces to peer_treat_updatemsg().
  * REGTEST: ssl: mark reg-tests/ssl/ssl_crt-list_filters.vtc as broken
  * REGTEST: ssl: test wildcard and multi-type + exclusions
  * MINOR: cfgparse: tighten the scope of newnameserver variable, free it on error.
  * MINOR: config/mux-h2: Return ERR_ flags from init_h2() instead of a status
  * MINOR: init: Fix the prototype for per-thread free callbacks
  * BUG/MINOR: tcpcheck: Don't warn on unused rules if check option is after
  * MINOR: spoe: Don't close connection in sync mode on processing timeout
  * BUG/MAJOR: spoe: Be sure to remove all references on a released spoe applet
  * BUG/MINOR: http-htx: Handle warnings when parsing http-error and http-errors
  * MINOR: check: report error on incompatible connect proto
  * MINOR: check: report error on incompatible proto
  * BUG/MEDIUM: check: reuse srv proto only if using same mode
  * BUG/MINOR: http-fetch: Fix calls w/o parentheses of the cookie sample fetches
  * BUG/MINOR: http-fetch: Extract cookie value even when no cookie name
  * BUG/MEDIUM: peers: fix decoding of multi-byte length in stick-table messages
  * BUG/MINOR: peers: Missing TX cache entries reset.
  * BUG/MINOR: peers: Do not ignore a protocol error for dictionary entries.
  * BUG/MINOR: stats: free dynamically stats fields/lines on shutdown
  * BUG/MINOR: lua: set buffer size during map lookups
  * BUG/MINOR: pattern: a sample marked as const could be written

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=233
2020-11-13 22:16:32 +00:00
b714a11eec - Update to version 2.3.0+git4.689d98154:
* BUG/MEDIUM: ssl/crt-list: correctly insert crt-list line if crt already loaded

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=232
2020-11-06 16:14:41 +00:00
eefc8dcd32 - Update to version 2.3.0+git3.7a50763d1:
* DOC: config: Fix a typo on ssl_c_chain_der
  * MINOR: http-htx: Add understandable errors for the errorfiles parsing
  * BUG/MINOR: ssl: don't report 1024 bits DH param load error when it's higher

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=231
2020-11-06 13:16:47 +00:00
06d388183d - apparmor: do not limit to tcp sockets. haproxy can do udp as
well.

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=230
2020-11-05 18:56:32 +00:00
4e594d7360 - Update to version 2.3.0+git0.1c0a722a8:
https://www.haproxy.com/blog/announcing-haproxy-2-3/
  for all the details see
  /usr/share/doc/packages/haproxy/CHANGELOG

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=229
2020-11-05 18:10:17 +00:00
7119023647 - Update to version 2.2.5+git0.34b2b1066:
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=228
2020-11-05 14:49:36 +00:00
11e00851c5 - apparmor profile:
- we need net_admin capability for non local bind and setting
    "source" for server entries.

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=227
2020-11-02 13:16:23 +00:00
bdec498733 - apparmor profile fixes:
- include abstractions that give access to the openssl config,
    ssl certs and ssl keys
  - include local configs only with "if exists" so they do not have
    to exist.
- move local files to %ghost

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=226
2020-10-24 01:23:11 +00:00
6202e19018 - use parallel build
- Update to version 2.2.4+git0.de456726d:

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=225
2020-10-02 14:39:10 +00:00
c8fd09fbbd - Update to version 2.2.3+git0.0e58a340d:
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=224
2020-09-08 15:06:47 +00:00