From d8ea18805885d886bcf9f77f8dff9902e2043c55 Mon Sep 17 00:00:00 2001 From: Amaury Denoyelle Date: Fri, 19 Feb 2021 15:37:40 +0100 Subject: [PATCH] REGTESTS: workaround for a crash with recent libressl on http-reuse sni Disable the ssl-reuse for the sni test on http_reuse_conn_hash vtc. This seems to be the origin of a crash with libressl environment from 3.2.2 up to 3.3.1 included. For now, it is not determined if the root cause is in haproxy or libressl. Please look for the github issue #1115 for all the details. --- reg-tests/connection/http_reuse_conn_hash.vtc | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/reg-tests/connection/http_reuse_conn_hash.vtc b/reg-tests/connection/http_reuse_conn_hash.vtc index 991e86f7a..81d16f963 100644 --- a/reg-tests/connection/http_reuse_conn_hash.vtc +++ b/reg-tests/connection/http_reuse_conn_hash.vtc @@ -9,9 +9,11 @@ haproxy h1 -conf { mode http # sni + # ssl-reuse is disabled because it seems to be the origin of a crash with + # libressl from 3.2.2 on the CI (cf github issue #1115) listen sender-sni bind "fd@${feS_sni}" - server srv2 ${h1_feR_ssl_addr}:${h1_feR_ssl_port} ssl sni "req.hdr(x-sni)" verify none pool-low-conn 2 + server srv2 ${h1_feR_ssl_addr}:${h1_feR_ssl_port} ssl sni "req.hdr(x-sni)" verify none pool-low-conn 2 no-ssl-reuse # set-dst # specify dst1_addr for server, which should be identical to dst2_addr