Re: Old style OCSP not working anymore?

2023-07-21 Thread Jarno Huuskonen
Hi, On Thu, 2023-07-20 at 20:27 +0200, Sander Klein wrote: > > The best thing to do is to test with `openssl s_client -showcerts > > -connect some.hostname.nl:443` with both your versions to identify what > > changed. > > I've tested with 'openssl s_client -showcerts -connect mydomain.com:443 >

Re: Old style OCSP not working anymore?

2023-07-21 Thread Sander Klein
On 2023-07-21 11:51, Jarno Huuskonen wrote: If I change the order of ipv4 / ipv6 binds (so bind ipv6@:::443 name v6ssl... is first) then haproxy(2.8.1) sends ocsp with ipv6 connection and not with ipv4. Hmmm, I cannot reproduce this, but this might be because I have multiple frontends with m

Re: Old style OCSP not working anymore?

2023-07-21 Thread Remi Tricot-Le Breton
Hello, On 21/07/2023 11:51, Jarno Huuskonen wrote: Hi, On Thu, 2023-07-20 at 20:27 +0200, Sander Klein wrote: The best thing to do is to test with `openssl s_client -showcerts -connect some.hostname.nl:443` with both your versions to identify what changed. I've tested with 'openssl s_client -

Re: [PATCH 1/2] BUG/MINOR: server-state: Avoid warning on 'file not found'

2023-07-21 Thread Christopher Faulet
Le 7/20/23 à 22:21, Marcos de Oliveira a écrit : From: Marcos de Oliveira On a clean installation, users might want to use server-state-file and the recommended zero-warning option. This caused a problem if server-state-file was not found, as a warning was emited, causing startup to fail. This

Formilux | Black_Hat_USA_2023_Participants_list

2023-07-21 Thread Thiago Pessoa
Hi There, Recently updated Black Hat USA - 2023 Attendees_list will help marketers connect with their target_audience with ease at the event. I hope your organization is planning to Build brand awareness, engage with decision makers, launch new products and services at the upcoming BLACK HAT

Re: Old style OCSP not working anymore?

2023-07-21 Thread Remi Tricot-Le Breton
Hello, On 21/07/2023 14:40, Remi Tricot-Le Breton wrote: Hello, On 21/07/2023 11:51, Jarno Huuskonen wrote: Hi, On Thu, 2023-07-20 at 20:27 +0200, Sander Klein wrote: The best thing to do is to test with `openssl s_client -showcerts -connect some.hostname.nl:443` with both your versions to i

[ANNOUNCE] haproxy-2.9-dev2

2023-07-21 Thread Willy Tarreau
Hi, HAProxy 2.9-dev2 was released on 2023/07/21. It added 91 new commits after version 2.9-dev1. This remains pretty calm for 3 weeks, because everyone seems to be busy making progress on complex stuff thanks to 2.8 appearing to be pretty good for now. There are now a number of low-importance fix