]> git.ipfire.org Git - thirdparty/haproxy.git/commitdiff
REGTESTS: revert workaround for a crash with recent libressl on http-reuse sni
authorIlya Shipitsin <chipitsine@gmail.com>
Fri, 19 Mar 2021 17:31:14 +0000 (22:31 +0500)
committerWilly Tarreau <w@1wt.eu>
Sat, 20 Mar 2021 08:32:57 +0000 (09:32 +0100)
LibreSSL-3.2.5 has fixed "use-after-free" in tls session resumption,
let us enable session resumption back

reg-tests/connection/http_reuse_conn_hash.vtc

index 81d16f96371e98124a5ecb00170ebcb24c2ae324..991e86f7a8e411599d9a222ae831fa362a02ff7a 100644 (file)
@@ -9,11 +9,9 @@ haproxy h1 -conf {
                mode http
 
        # sni
-       # ssl-reuse is disabled because it seems to be the origin of a crash with
-       # libressl from 3.2.2 on the CI (cf github issue #1115)
        listen sender-sni
                bind "fd@${feS_sni}"
-               server srv2 ${h1_feR_ssl_addr}:${h1_feR_ssl_port} ssl sni "req.hdr(x-sni)" verify none pool-low-conn 2 no-ssl-reuse
+               server srv2 ${h1_feR_ssl_addr}:${h1_feR_ssl_port} ssl sni "req.hdr(x-sni)" verify none pool-low-conn 2
 
        # set-dst
        # specify dst1_addr for server, which should be identical to dst2_addr