mirror of
https://git.haproxy.org/git/haproxy.git/
synced 2025-08-06 23:27:04 +02:00
REGTESTS: revert workaround for a crash with recent libressl on http-reuse sni
LibreSSL-3.2.5 has fixed "use-after-free" in tls session resumption, let us enable session resumption back
This commit is contained in:
parent
d21f4e1e71
commit
19d14710e9
@ -9,11 +9,9 @@ haproxy h1 -conf {
|
|||||||
mode http
|
mode http
|
||||||
|
|
||||||
# sni
|
# sni
|
||||||
# ssl-reuse is disabled because it seems to be the origin of a crash with
|
|
||||||
# libressl from 3.2.2 on the CI (cf github issue #1115)
|
|
||||||
listen sender-sni
|
listen sender-sni
|
||||||
bind "fd@${feS_sni}"
|
bind "fd@${feS_sni}"
|
||||||
server srv2 ${h1_feR_ssl_addr}:${h1_feR_ssl_port} ssl sni "req.hdr(x-sni)" verify none pool-low-conn 2 no-ssl-reuse
|
server srv2 ${h1_feR_ssl_addr}:${h1_feR_ssl_port} ssl sni "req.hdr(x-sni)" verify none pool-low-conn 2
|
||||||
|
|
||||||
# set-dst
|
# set-dst
|
||||||
# specify dst1_addr for server, which should be identical to dst2_addr
|
# specify dst1_addr for server, which should be identical to dst2_addr
|
||||||
|
Loading…
Reference in New Issue
Block a user