Hey guys,
I just wanted to close the loop here. As suggested I switched from 1.0.2a to 1.0.1m and for the last two weeks things have been stable , so I think we are good here. The problem definitely seems to be related to the 1.0.2 branch of OpenSSL. Thanks again for everyone's help. John — Sent from Mailbox On Fri, Apr 3, 2015 at 10:05 AM, John Dyer <[email protected]> wrote: > Willy, > Yep, I already rebuilt w/ 1.0.1m but I am on vacation for the next week so I > won’t be able to test. When I get back I’ll try it again. Thanks for your > suggestions. > -John > -- > John Dyer > Sent with Airmail > On April 3, 2015 at 10:04:25 AM, Willy Tarreau ([email protected]) wrote: > On Fri, Apr 03, 2015 at 09:58:15AM -0400, John Dyer wrote: >> Willy, >> >> I was using OpenSSL 1.0.2 with zlib 1.2.6, and there is a 1.2.8 which is >> ~14 months newer then 1.2.6. What version where you using ? > As I said it was with openvpn, not haproxy, so there was no zlib involved. > But it may just be a coincidence, the point being that in your case it is > important to retest with an up to date openssl 1.0.1 first. > Willy
