mirrors/haproxy
1
0
Fork 0
mirror of https://git.haproxy.org/git/haproxy.git/ synced 2026-03-14 19:41:33 +01:00
Code Issues Projects Releases Wiki Activity
haproxy/src
History
William Lallemand ea92b0ef01 BUG/MINOR: ssl: SSL_CERT_DIR environment variable doesn't affect haproxy 
The documentation of @system-ca specifies that one can overwrite the
value provided by the SSL Library using SSL_CERT_DIR.

However it seems like X509_get_default_cert_dir() is not affected by
this environment variable, and X509_get_default_cert_dir_env() need to
be used in order to get the variable name, and get the value manually.

This could be backported in every stable branches. Note that older
branches don't have the memprintf in ssl_sock.c.
2026-02-10 21:34:45 +01:00
..
_ceb_addr.c
IMPORT: cebtree: import version 0.5.0 to support duplicates
2025-09-16 09:23:46 +02:00
_ceb_blk.c
IMPORT: cebtree: import version 0.5.0 to support duplicates
2025-09-16 09:23:46 +02:00
_ceb_int.c
IMPORT: cebtree: import version 0.5.0 to support duplicates
2025-09-16 09:23:46 +02:00
_ceb_str.c
IMPORT: cebtree: import version 0.5.0 to support duplicates
2025-09-16 09:23:46 +02:00
acl.c
BUG/MINOR: acl: warn if "_sub" derivative used with an explicit match
2025-10-28 11:59:32 +01:00
acme.c
BUG/MINOR: acme: fix ha_alert() call
2025-11-25 20:20:25 +01:00
action.c
…
activity.c
MINOR: activity: allow to switch per-task lock/memory profiling at runtime
2026-02-10 17:53:01 +01:00
applet.c
BUG/MEDIUM: applet: Fix test on shut flags for legacy applets
2026-01-30 09:55:18 +01:00
arg.c
…
auth.c
…
backend.c
MINOR: backend: add function to check support for dynamic servers
2026-02-06 14:35:19 +01:00
base64.c
…
buf.c
…
cache.c
MEDIUM: counters: mostly revert da813ae4d7cb77137ed
2026-01-14 12:39:14 +01:00
calltrace.c
…
ceb32_tree.c
IMPORT: cebtree: import version 0.5.0 to support duplicates
2025-09-16 09:23:46 +02:00
ceb64_tree.c
IMPORT: cebtree: import version 0.5.0 to support duplicates
2025-09-16 09:23:46 +02:00
ceba_tree.c
IMPORT: cebtree: import version 0.5.0 to support duplicates
2025-09-16 09:23:46 +02:00
cebb_tree.c
IMPORT: cebtree: import version 0.5.0 to support duplicates
2025-09-16 09:23:46 +02:00
cebib_tree.c
IMPORT: cebtree: import version 0.5.0 to support duplicates
2025-09-16 09:23:46 +02:00
cebis_tree.c
IMPORT: cebtree: import version 0.5.0 to support duplicates
2025-09-16 09:23:46 +02:00
cebl_tree.c
IMPORT: cebtree: import version 0.5.0 to support duplicates
2025-09-16 09:23:46 +02:00
cebs_tree.c
IMPORT: cebtree: import version 0.5.0 to support duplicates
2025-09-16 09:23:46 +02:00
cebtree-dbg.c
IMPORT: cebtree: import version 0.5.0 to support duplicates
2025-09-16 09:23:46 +02:00
cebtree-prv.h
…
cfgcond.c
MINOR: cfgcond: add "awslc_api_atleast" and "awslc_api_before"
2025-11-14 11:01:45 +01:00
cfgdiag.c
MINOR: check: clarify check-reuse-pool interaction with reuse policy
2025-11-14 10:44:05 +01:00
cfgparse-global.c
MEDIUM: proxy: implement persistent named defaults
2026-01-22 18:06:42 +01:00
cfgparse-listen.c
MINOR: proxy: parse mode on dynamic backend creation
2026-02-06 17:27:50 +01:00
cfgparse-peers.c
REORG: cfgparse: move peers parsing to cfgparse-peers.c
2026-01-20 17:17:37 +01:00
cfgparse-quic.c
BUG/MINOR: quic: fix deprecated warning for window size keyword
2026-01-07 09:54:31 +01:00
cfgparse-ssl.c
BUG/MINOR: config/ssl: fix spelling of "expose-experimental-directives"
2026-01-29 11:07:55 +01:00
cfgparse-tcp.c
MINOR: tcp: add new bind option "tcp-ss" to instruct the kernel to save the SYN
2025-12-24 11:35:09 +01:00
cfgparse-unix.c
…
cfgparse.c
MINOR: proxy: assign dynamic proxy ID
2026-02-06 17:28:27 +01:00
channel.c
MINOR: channel: Remove total field from channels
2025-11-06 15:01:29 +01:00
check.c
MEDIUM: counters: mostly revert da813ae4d7cb77137ed
2026-01-14 12:39:14 +01:00
chunk.c
…
cli.c
BUG/MINOR: server: ensure server is detached from proxy list before being freed
2026-01-19 14:24:04 +01:00
clock.c
CLEANUP: use the automatic alignment feature
2025-12-09 17:14:58 +01:00
compression.c
MEDIUM: tree-wide: replace most DECLARE_POOL with DECLARE_TYPED_POOL
2025-08-11 19:55:30 +02:00
connection.c
MINOR: connection/ssl: Store the SNI hash value in the connection itself
2025-12-08 15:22:01 +01:00
counters.c
MEDIUM: counters: Dynamically allocate per-thread group counters
2026-01-13 11:12:34 +01:00
cpu_topo.c
BUG/MINOR: cpu-topo: count cores not cpus to distinguish core types
2026-02-04 08:49:18 +01:00
cpuset.c
BUG/MINOR: cpu_topo: work around a small bug in musl's CPU_ISSET()
2025-09-06 11:05:52 +02:00
debug.c
BUG/MEDIUM: debug: only dump Lua state when panicking
2026-01-22 15:47:42 +01:00
dgram.c
…
dict.c
…
dns_ring.c
…
dns.c
MEDIUM: dns: bind the nameserver sockets to the initiating thread
2025-09-10 16:48:09 +02:00
dynbuf.c
OPTIM: buffers: align the buffer pool to 64
2025-08-11 19:55:30 +02:00
eb32sctree.c
…
eb32tree.c
IMPORT: ebtree: only use __builtin_prefetch() when supported
2025-09-17 14:30:32 +02:00
eb64tree.c
IMPORT: ebtree: only use __builtin_prefetch() when supported
2025-09-17 14:30:32 +02:00
ebimtree.c
…
ebistree.c
…
ebmbtree.c
…
ebsttree.c
…
ebtree.c
…
ech.c
CLEANUP: assorted typo fixes in the code, commits and doc
2025-12-25 19:45:29 +01:00
errors.c
…
ev_epoll.c
…
ev_evports.c
…
ev_kqueue.c
…
ev_poll.c
…
ev_select.c
…
event_hdl.c
MEDIUM: tree-wide: replace most DECLARE_POOL with DECLARE_TYPED_POOL
2025-08-11 19:55:30 +02:00
extcheck.c
…
fcgi-app.c
MEDIUM: stats: consider that shared stats pointers may be NULL
2025-09-18 16:49:51 +02:00
fcgi.c
…
fd.c
CLEANUP: fd: make use of ha_aligned_alloc() for the fdtab
2025-08-11 19:55:30 +02:00
filters.c
MEDIUM: htx: Remove the HTX extra field
2025-10-08 11:10:42 +02:00
fix.c
…
flt_bwlim.c
BUG/MINOR: freq_ctr: Prevent possible signed overflow in freq_ctr_overshoot_period
2025-11-24 14:10:13 +01:00
flt_http_comp.c
MINOR: compression: Use the <kip> value to check body size
2025-10-08 11:10:42 +02:00
flt_spoe.c
BUG/MEDIUM: spoe: Improve error detection in SPOE applet on client abort
2025-08-26 16:12:18 +02:00
flt_trace.c
…
freq_ctr.c
BUG/MINOR: freq_ctr: Prevent possible signed overflow in freq_ctr_overshoot_period
2025-11-24 14:10:13 +01:00
frontend.c
MEDIUM: stats: avoid 1 indirection by storing the shared stats directly in counters struct
2025-07-25 16:46:10 +02:00
guid.c
MEDIUM: guid: switch guid to more compact cebuis_tree
2025-09-16 09:23:46 +02:00
h1_htx.c
MEDIUM: h1: strictly verify quoting in chunk extensions
2026-01-28 18:54:23 +01:00
h1.c
BUG/MEDIUM: h1/h2/h3: reject forbidden chars in the Host header field
2025-05-16 15:13:17 +02:00
h2.c
BUG/MINOR: h2: forbid 'Z' as well in header field names checks
2025-10-02 15:29:58 +02:00
h3_stats.c
…
h3.c
BUG/MEDIUM: h3: fix access to QCS <sd> definitely
2025-12-10 12:04:37 +01:00
haproxy.c
CLEANUP: haproxy: fix bad line wrapping in run_poll_loop()
2026-02-10 14:11:42 +01:00
hash.c
…
hlua_fcn.c
BUG/MINOR: hlua_fcn: ensure Patref:add_bulk() is given a table object before using it
2026-01-12 17:30:54 +01:00
hlua.c
BUG/MINOR: hlua: consume error object if ignored after a failing lua_pcall()
2026-01-23 11:23:37 +01:00
hpack-dec.c
…
hpack-enc.c
…
hpack-huff.c
…
hpack-tbl.c
…
hq_interop.c
MINOR: channel: Remove total field from channels
2025-11-06 15:01:29 +01:00
http_acl.c
…
http_act.c
BUG/MINOR: config: check capture pool creations for failures
2026-01-26 11:45:49 +01:00
http_ana.c
BUG/MEDIUM: http-ana: Properly detect client abort when forwarding response (v2)
2025-12-12 08:41:08 +01:00
http_client.c
MEDIUM: counters: Dynamically allocate per-thread group counters
2026-01-13 11:12:34 +01:00
http_conv.c
…
http_ext.c
…
http_fetch.c
MINOR: hlua/http-fetch: Use <kip> instead of HTX extra field to get body size
2025-10-08 11:10:25 +02:00
http_htx.c
…
http_rules.c
…
http.c
MINOR: http: fix 405,431,501 default errorfile
2025-10-29 08:47:19 +01:00
httpclient_cli.c
MINOR: httpclient-cli: Reset httpclient HTX buffer instead of removing blocks
2025-07-24 12:13:42 +02:00
htx.c
…
init.c
MINOR: init: add REGISTER_POST_DEINIT_MASTER() hook
2025-08-07 22:27:14 +02:00
jwe.c
MINOR: jwe: Some algorithms not supported by AWS-LC
2026-01-15 10:56:28 +01:00
jws.c
BUG/MEDIUM: jws: return size_t in JWS functions
2025-09-11 14:31:32 +02:00
jwt.c
MINOR: jwt: Add specific error code for known but unavailable certificate
2025-10-13 10:38:52 +02:00
lb_chash.c
BUG/MEDIUM: lb-chash: always properly initialize lb_nodes with dynamic servers
2026-02-10 07:22:54 +01:00
lb_fas.c
…
lb_fwlc.c
BUG/MEDIUM: fwlc: Handle memory allocation failures.
2025-10-01 18:13:33 +02:00
lb_fwrr.c
…
lb_map.c
…
lb_ss.c
…
limits.c
MINOR: limits: display the computed maxconn using ha_notice()
2025-11-20 18:38:09 +01:00
linuxcap.c
MEDIUM: init: always warn when running as root without being asked to
2025-09-05 08:51:07 +02:00
listener.c
MEDIUM: thread: Turn the group mask in thread set into a group counter
2026-01-15 05:24:53 +01:00
log.c
BUG/MEDIUM: log: parsing log-forward options may result in segfault
2026-01-19 16:53:00 +01:00
lru.c
…
mailers.c
MINOR: mailers: warn if mailers are configured but not actually used
2025-06-27 16:41:18 +02:00
map.c
CLEANUP: patterns: remove dead code
2025-12-23 21:17:39 +01:00
mjson.c
CLEANUP: mjson: remove unused defines from mjson.h
2025-10-06 09:30:07 +02:00
mqtt.c
…
mux_fcgi.c
BUG/MEDIUM: connection: do not reinsert a purgeable conn in idle list
2025-11-14 16:06:34 +01:00
mux_h1.c
BUG/MEDIUM: mux-h1: Skip UNUSED htx block when formating the start line
2026-01-23 11:40:54 +01:00
mux_h2.c
CLEANUP: assorted typo fixes in the code, commits and doc
2025-12-25 19:45:29 +01:00
mux_pt.c
MEDIUM: mux_h1/mux_pt: Use XPRT_CAN_SPLICE to decide if we should splice
2025-08-20 18:33:10 +02:00
mux_quic.c
BUG/MEDIUM: mux-quic: prevent BUG_ON() on aborted uni stream close
2026-01-21 14:01:12 +01:00
mux_spop.c
BUG/MEDIUM: connection: do not reinsert a purgeable conn in idle list
2025-11-14 16:06:34 +01:00
mworker.c
BUG/MEDIUM: mworker: can't use signals after a failed reload
2026-01-06 14:27:53 +01:00
namespace.c
…
ncbmbuf.c
MINOR: ncbmbuf: add tests as standalone mode
2025-10-22 15:04:24 +02:00
ncbuf.c
…
net_helper.c
MINOR: net_helper: extend the ip.fp output with an option presence mask
2026-02-09 09:18:04 +01:00
pattern.c
BUG/MAJOR: set the correct generation ID in pat_ref_append().
2025-12-31 00:29:47 +01:00
payload.c
MINOR: ssl: Introduce new smp_client_hello_parse() function
2025-07-01 11:55:36 +02:00
peers.c
BUG/MEDIUM: peers: Properly handle shutdown when trying to get a line
2026-01-05 13:46:57 +01:00
pipe.c
MEDIUM: tree-wide: replace most DECLARE_POOL with DECLARE_TYPED_POOL
2025-08-11 19:55:30 +02:00
pool.c
MEDIUM: activity: apply and use new finegrained task profiling settings
2026-02-10 17:52:59 +01:00
proto_quic.c
MINOR: quic: store source address for backend conns
2025-11-20 16:44:03 +01:00
proto_rhttp.c
OPTIM: proto_rhttp: Don't set SNI for non-ssl connections
2025-09-05 15:56:42 +02:00
proto_sockpair.c
BUILD: sockpair: fix build issue on macOS related to variable-length arrays
2026-01-08 09:26:22 +01:00
proto_tcp.c
BUG/MINOR: proto_tcp: Properly report support for HAVE_TCP_MD5SIG feature
2026-01-23 11:40:54 +01:00
proto_udp.c
BUG/MEDIUM: mworker/listener: ambiguous use of RX_F_INHERITED with shards
2025-12-11 18:09:47 +01:00
proto_uxdg.c
…
proto_uxst.c
MINOR: sock: Add protocol and socket types parameters to sock_create_server_socket()
2025-06-11 18:37:34 +02:00
protocol.c
MINOR: quic: rename "no-quic" to "tune.quic.listen"
2025-10-23 16:47:58 +02:00
proxy.c
BUG/MINOR: proxy: fix default ALPN bind settings
2026-02-09 13:52:25 +01:00
qmux_http.c
MEDIUM: htx: Remove the HTX extra field
2025-10-08 11:10:42 +02:00
qmux_trace.c
MINOR: mux-quic: define flag for backend side
2025-06-12 11:28:54 +02:00
qpack-dec.c
…
qpack-enc.c
BUG/MINOR: h3: ensure that invalid status code are not encoded (FE side)
2025-07-15 18:39:23 +02:00
qpack-tbl.c
…
queue.c
BUG/MEDIUM: queues: Fix arithmetic when feeling non_empty_tgids
2026-01-15 04:28:04 +01:00
quic_ack.c
MEDIUM: tree-wide: replace most DECLARE_POOL with DECLARE_TYPED_POOL
2025-08-11 19:55:30 +02:00
quic_cc_bbr.c
MINOR: quic: define quic_cc_algo as const
2025-12-01 15:05:41 +01:00
quic_cc_cubic.c
MINOR: quic: define quic_cc_algo as const
2025-12-01 15:05:41 +01:00
quic_cc_drs.c
…
quic_cc_newreno.c
MINOR: quic: define quic_cc_algo as const
2025-12-01 15:05:41 +01:00
quic_cc_nocc.c
MINOR: quic: define quic_cc_algo as const
2025-12-01 15:05:41 +01:00
quic_cc.c
MINOR: quic: define quic_cc_algo as const
2025-12-01 15:05:41 +01:00
quic_cid.c
CLEANUP: assorted typo fixes in the code, commits and doc
2025-12-25 19:45:29 +01:00
quic_cli.c
BUG/MINOR: quic: fix uninit list on show quic handler
2025-11-25 14:50:19 +01:00
quic_conn.c
MEDIUM: quic: Add connection as argument when qc_new_conn() is called
2025-12-08 15:22:00 +01:00
quic_enc.c
TESTS: quic: useless param for b_quic_dec_int()
2025-10-15 09:58:03 +02:00
quic_fctl.c
…
quic_frame.c
BUG/MEDIUM: quic: fix ACK ECN frame parsing
2026-01-13 15:08:02 +01:00
quic_loss.c
MINOR: quic: split congestion controler options for FE/BE usage
2025-10-23 16:49:20 +02:00
quic_openssl_compat.c
MINOR: quic: Fix build with USE_QUIC_OPENSSL_COMPAT
2026-02-03 04:05:34 +01:00
quic_pacing.c
…
quic_retransmit.c
MINOR: quic: prefer qc_is_back() usage over qc->target
2025-08-07 16:59:59 +02:00
quic_retry.c
CLEANUP: assorted typo fixes in the code, commits and doc
2025-12-25 19:45:29 +01:00
quic_rules.c
…
quic_rx.c
MEDIUM: quic: Add connection as argument when qc_new_conn() is called
2025-12-08 15:22:00 +01:00
quic_sock.c
MINOR: quic: store source address for backend conns
2025-11-20 16:44:03 +01:00
quic_ssl.c
BUG/MINOR: ech/quic: enable ech configuration also for quic listeners
2026-01-08 17:34:28 +01:00
quic_stats.c
…
quic_stream.c
MEDIUM: tree-wide: replace most DECLARE_POOL with DECLARE_TYPED_POOL
2025-08-11 19:55:30 +02:00
quic_tls.c
BUG/MAJOR: quic: use ncbmbuf for CRYPTO handling
2025-10-22 15:04:41 +02:00
quic_token.c
…
quic_tp.c
MINOR: quic-be: validate the 0-RTT transport parameters
2025-11-13 14:04:31 +01:00
quic_trace.c
MINOR: quic: Add useful debugging traces in qc_idle_timer_do_rearm()
2025-12-08 10:40:59 +01:00
quic_tx.c
CLEANUP: assorted typo fixes in the code, commits and doc
2025-12-25 19:45:29 +01:00
raw_sock.c
MINOR: rawsock: introduce CO_RFL_TRY_HARDER to detect closures on complete reads
2025-10-01 10:23:01 +02:00
regex.c
MINOR: regex: use a thread-local match pointer for pcre2
2025-10-13 16:56:43 +02:00
resolvers.c
BUG/MINOR: resolvers: ensure fair round robin iteration
2025-11-02 17:28:32 +01:00
ring.c
OPTIM: ring: avoid reloading the tail_ofs value before the CAS in ring_write()
2025-09-18 15:27:32 +02:00
sample.c
MINOR: vars: store variable names for runtime access
2026-01-21 10:44:19 +01:00
server_state.c
MEDIUM: counters: Dynamically allocate per-thread group counters
2026-01-13 11:12:34 +01:00
server.c
BUG/MEDIUM: lb-chash: always properly initialize lb_nodes with dynamic servers
2026-02-10 07:22:54 +01:00
session.c
MEDIUM: counters: Dynamically allocate per-thread group counters
2026-01-13 11:12:34 +01:00
sha1.c
…
shctx.c
…
signal.c
MEDIUM: tree-wide: replace most DECLARE_POOL with DECLARE_TYPED_POOL
2025-08-11 19:55:30 +02:00
sink.c
BUG/MINOR: sink: retry attempt for sft server may never occur
2025-10-03 14:31:05 +02:00
slz.c
IMPORT: slz: silence a build warning on non-x86 non-arm
2025-05-16 16:43:53 +02:00
sock_inet.c
BUG/MEDIUM: mworker/listener: ambiguous use of RX_F_INHERITED with shards
2025-12-11 18:09:47 +01:00
sock_unix.c
BUG/MEDIUM: mworker/listener: ambiguous use of RX_F_INHERITED with shards
2025-12-11 18:09:47 +01:00
sock.c
MINOR: protocol: support a generic way to call getsockopt() on a connection
2025-12-24 18:38:51 +01:00
ssl_ckch.c
BUG/MINOR: ssl: SSL_CERT_DIR environment variable doesn't affect haproxy
2026-02-10 21:34:45 +01:00
ssl_clienthello.c
BUG/MINOR: quic/ssl: crash in ClientHello callback ssl traces
2025-12-08 10:40:59 +01:00
ssl_crtlist.c
MEDIUM: ssl/cli: relax crt insertion in crt-list of type directory
2025-08-11 17:42:16 +02:00
ssl_gencert.c
BUG/MEDIUM: ssl: fix generate-certificates option when SNI greater than 64bytes
2026-01-21 10:45:22 +01:00
ssl_ocsp.c
MEDIUM: ssl/ckch: use ckch_store instead of ckch_data for ckch_conf_kws
2025-11-06 11:56:27 +01:00
ssl_sample.c
MINOR: jwe: Add new jwt_decrypt_secret converter
2026-01-15 10:56:27 +01:00
ssl_sock.c
BUG/MINOR: ssl: SSL_CERT_DIR environment variable doesn't affect haproxy
2026-02-10 21:34:45 +01:00
ssl_trace.c
BUG/MINOR: ssl: Fix potential NULL deref in trace callback
2025-09-11 14:31:32 +02:00
ssl_utils.c
BUG/MINOR: acme: P-256 doesn't work with openssl >= 3.0
2025-11-18 11:34:28 +01:00
stats-file.c
MEDIUM: counters: Dynamically allocate per-thread group counters
2026-01-13 11:12:34 +01:00
stats-html.c
MINOR: stats: report BE unpublished status
2026-01-15 09:08:18 +01:00
stats-json.c
…
stats-proxy.c
MINOR: stats: report BE unpublished status
2026-01-15 09:08:18 +01:00
stats.c
MINOR: pattern: add a counter of added/freed patterns
2025-07-05 00:12:45 +02:00
stconn.c
BUG/MEDIUM: stconn: Move data from <kip> to <kop> during zero-copy forwarding
2026-01-06 15:41:50 +01:00
stick_table.c
BUG/MINOR: stick-tables: abort startup on stk_ctr pool creation failure
2026-01-26 11:45:49 +01:00
stream.c
MEDIUM: proxy: force traffic on unpublished/disabled backends
2026-01-15 09:08:19 +01:00
systemd.c
…
task.c
CLEANUP: more conversions and cleanups for alignment
2025-12-09 17:40:58 +01:00
tcp_act.c
MEDIUM: stats: consider that shared stats pointers may be NULL
2025-09-18 16:49:51 +02:00
tcp_rules.c
BUG/MINOR: config: check capture pool creations for failures
2026-01-26 11:45:49 +01:00
tcp_sample.c
MINOR: tcp-sample: permit retrieving tcp_info from the connection/session stage
2026-01-11 15:48:20 +01:00
tcpcheck.c
MEDIUM: tcpcheck: add post-80 option for mysql-check to support MySQL 8.x
2026-02-03 07:36:53 +01:00
thread.c
BUG/MEDIUM: threads: Differ checking the max threads per group number
2026-02-06 03:01:50 +01:00
time.c
…
tools.c
BUG/MINOR: config: Fix setting of alt_proto
2026-02-04 14:54:20 +01:00
trace.c
MINOR: trace: don't call strlen() on the function's name
2025-09-18 08:31:57 +02:00
uri_auth.c
…
uri_normalizer.c
…
vars.c
MINOR: vars: implement dump_all_vars() sample fetch
2026-01-21 10:44:19 +01:00
version.c
…
wdt.c
BUG/MEDIUM: wdt: improve stuck task detection accuracy
2025-10-01 10:18:53 +02:00
xprt_handshake.c
MINOR: xprt: Add recvmsg() and sendmsg() parameters to rcv_buf() and snd_buf().
2025-08-20 17:28:03 +02:00
xprt_quic.c
MEDIUM: quic: Add connection as argument when qc_new_conn() is called
2025-12-08 15:22:00 +01:00