Well, that's what I ought to ear from you ;) Let's wait and keep this one opened at least for future reference.
Thanks and have a nice day! Raphaël On 28 January 2015 at 09:20, Vincent Bernat <[email protected]> wrote: > ❦ 27 janvier 2015 15:54 +0100, Raphaël Enrici <[email protected]> : > >> HAproxy currently uses readdir() function to list the directory >> where the SSL certificates are stored. >> As readdir() does not guarantee any order in the listing (neither >> alphabetical nor time ordered one), this can lead to a situation >> where two members of an active/passive HAProxy "cluster" behave >> differently without any information about it resulting in misbehaviour >> for non SNI aware devices. >> >> Based on the report you can find here[1] a patch has been provided >> by Cyril Bonté and accepted upstream. You can find this patch >> here[2]. It would be great if you could include it before the next >> jessie is released. If not possible at all because of the freeze, any >> future inclusion of this patch before the next HAProxy stable release >> would be welcome :) > > Unfortunately, the bug being "minor", we cannot push the patch to Jessie > (at this stage, only critical patches are accepted). Also, > wheezy-backports being in sync with Jessie, it is not possible to push > the patch to wheezy-backports either. You have to wait for the release > of Jessie to have things moving forward. > -- > Terminate input by end-of-file or marker, not by count. > - The Elements of Programming Style (Kernighan & Plauger) -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]

