From: Amaury Denoyelle <adenoyelle@haproxy.com>
Date: Fri, 19 Feb 2021 14:37:40 +0000 (+0100)
Subject: REGTESTS: workaround for a crash with recent libressl on http-reuse sni
X-Git-Tag: v2.4-dev9~18
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d8ea18805885d886bcf9f77f8dff9902e2043c55;p=thirdparty%2Fhaproxy.git

REGTESTS: workaround for a crash with recent libressl on http-reuse sni

Disable the ssl-reuse for the sni test on http_reuse_conn_hash vtc. This
seems to be the origin of a crash with libressl environment from 3.2.2
up to 3.3.1 included.

For now, it is not determined if the root cause is in haproxy or
libressl.

Please look for the github issue #1115 for all the details.
---

diff --git a/reg-tests/connection/http_reuse_conn_hash.vtc b/reg-tests/connection/http_reuse_conn_hash.vtc
index 991e86f7a8..81d16f9637 100644
--- a/reg-tests/connection/http_reuse_conn_hash.vtc
+++ b/reg-tests/connection/http_reuse_conn_hash.vtc
@@ -9,9 +9,11 @@ haproxy h1 -conf {
 		mode http
 
 	# sni
+	# ssl-reuse is disabled because it seems to be the origin of a crash with
+	# libressl from 3.2.2 on the CI (cf github issue #1115)
 	listen sender-sni
 		bind "fd@${feS_sni}"
-		server srv2 ${h1_feR_ssl_addr}:${h1_feR_ssl_port} ssl sni "req.hdr(x-sni)" verify none pool-low-conn 2
+		server srv2 ${h1_feR_ssl_addr}:${h1_feR_ssl_port} ssl sni "req.hdr(x-sni)" verify none pool-low-conn 2 no-ssl-reuse
 
 	# set-dst
 	# specify dst1_addr for server, which should be identical to dst2_addr