upstream/haproxy
1
0
Fork 0
mirror of https://github.com/haproxy/haproxy.git synced 2026-02-03 20:39:41 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions 12
haproxy/src
History
William Lallemand 6995fe60c3 MINOR: ssl: allow to disable certificate compression 
This option allows to disable the certificate compression (RFC 8879)
using OpenSSL >= 3.2.0.

This feature is known to permit some denial of services by causing extra
memory allocations of approximately 22MiB and extra CPU work per
connection with OpenSSL versions affected by CVE-2025-66199.
( https://openssl-library.org/news/vulnerabilities/index.html#CVE-2025-66199 )

Setting this to "off" permits to mitigate the problem.

Must be backported to every stable branches.
2026-01-27 16:10:41 +01:00
..
_ceb_addr.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
_ceb_blk.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
_ceb_int.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
_ceb_str.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
acl.c BUG/MINOR: acl: warn if "_sub" derivative used with an explicit match 2025-10-28 11:59:32 +01:00
acme.c BUG/MINOR: acme: fix ha_alert() call 2025-11-25 20:20:25 +01:00
action.c MINOR: support for http-request set-timeout client 2023-09-28 08:49:22 +02:00
activity.c CLEANUP: more conversions and cleanups for alignment 2025-12-09 17:40:58 +01:00
applet.c BUG/MAJOR: applet: Don't call I/O handler if the applet was shut 2026-01-27 16:00:23 +01:00
arg.c MINOR: arg: add an argument type for identifier 2024-10-18 14:30:24 +02:00
auth.c BUG/MINOR: auth: Fix a leak on error path when parsing user's groups 2025-02-06 16:55:37 +01:00
backend.c MEDIUM: counters: mostly revert da813ae4d7 2026-01-14 12:39:14 +01:00
base64.c
buf.c CLEANUP: buffers: simplify b_get_varint() 2024-10-18 18:28:39 +02:00
cache.c MEDIUM: counters: mostly revert da813ae4d7 2026-01-14 12:39:14 +01:00
calltrace.c BUG/MINOR: calltrace: fix 'now' being used in place of 'date' 2023-04-27 18:14:57 +02:00
ceb32_tree.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
ceb64_tree.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
ceba_tree.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
cebb_tree.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
cebib_tree.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
cebis_tree.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
cebl_tree.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
cebs_tree.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
cebtree-dbg.c IMPORT: cebtree: import version 0.5.0 to support duplicates 2025-09-16 09:23:46 +02:00
cebtree-prv.h IMPORT: import cebtree (compact elastic binary trees) 2024-09-15 23:44:59 +02:00
cfgcond.c MINOR: cfgcond: add "awslc_api_atleast" and "awslc_api_before" 2025-11-14 11:01:45 +01:00
cfgdiag.c MINOR: check: clarify check-reuse-pool interaction with reuse policy 2025-11-14 10:44:05 +01:00
cfgparse-global.c MEDIUM: proxy: implement persistent named defaults 2026-01-22 18:06:42 +01:00
cfgparse-listen.c MEDIUM: cfgparse: do not store unnamed defaults in name tree 2026-01-22 17:57:16 +01:00
cfgparse-peers.c REORG: cfgparse: move peers parsing to cfgparse-peers.c 2026-01-20 17:17:37 +01:00
cfgparse-quic.c BUG/MINOR: quic: fix deprecated warning for window size keyword 2026-01-07 09:54:31 +01:00
cfgparse-ssl.c MINOR: ssl: allow to disable certificate compression 2026-01-27 16:10:41 +01:00
cfgparse-tcp.c MINOR: tcp: add new bind option "tcp-ss" to instruct the kernel to save the SYN 2025-12-24 11:35:09 +01:00
cfgparse-unix.c CLEANUP: tree-wide: remove 25 occurrences of unneeded fcntl.h 2022-04-26 10:59:48 +02:00
cfgparse.c BUG/MINOR: config: check capture pool creations for failures 2026-01-26 11:45:49 +01:00
channel.c MINOR: channel: Remove total field from channels 2025-11-06 15:01:29 +01:00
check.c MEDIUM: counters: mostly revert da813ae4d7 2026-01-14 12:39:14 +01:00
chunk.c BUG/MEDIUM: chunk: make sure to flush the trash pool before resizing 2025-01-29 17:55:18 +01:00
cli.c BUG/MINOR: server: ensure server is detached from proxy list before being freed 2026-01-19 14:24:04 +01:00
clock.c CLEANUP: use the automatic alignment feature 2025-12-09 17:14:58 +01:00
compression.c MEDIUM: tree-wide: replace most DECLARE_POOL with DECLARE_TYPED_POOL 2025-08-11 19:55:30 +02:00
connection.c MINOR: connection/ssl: Store the SNI hash value in the connection itself 2025-12-08 15:22:01 +01:00
counters.c MEDIUM: counters: Dynamically allocate per-thread group counters 2026-01-13 11:12:34 +01:00
cpu_topo.c MEDIUM: cpu-topo: Add an optional directive for per-group affinity 2026-01-06 11:32:45 +01:00
cpuset.c BUG/MINOR: cpu_topo: work around a small bug in musl's CPU_ISSET() 2025-09-06 11:05:52 +02:00
debug.c BUG/MEDIUM: debug: only dump Lua state when panicking 2026-01-22 15:47:42 +01:00
dgram.c MINOR: cfgparse: parse tune.{rcvbuf,sndbuf}.{frontend,backend} as sizes 2024-11-18 18:50:02 +01:00
dict.c
dns.c MEDIUM: dns: bind the nameserver sockets to the initiating thread 2025-09-10 16:48:09 +02:00
dns_ring.c MAJOR: import: update mt_list to support exponential back-off (try #2) 2024-07-09 16:46:38 +02:00
dynbuf.c OPTIM: buffers: align the buffer pool to 64 2025-08-11 19:55:30 +02:00
eb32sctree.c
eb32tree.c IMPORT: ebtree: only use __builtin_prefetch() when supported 2025-09-17 14:30:32 +02:00
eb64tree.c IMPORT: ebtree: only use __builtin_prefetch() when supported 2025-09-17 14:30:32 +02:00
ebimtree.c
ebistree.c
ebmbtree.c
ebsttree.c
ebtree.c
ech.c CLEANUP: assorted typo fixes in the code, commits and doc 2025-12-25 19:45:29 +01:00
errors.c MEDIUM: errors: get rid of shm_open() 2025-01-07 16:42:38 +01:00
ev_epoll.c MEDIUM: pollers: Drop fd events after a takeover to another tgid. 2025-02-26 13:00:18 +01:00
ev_evports.c MEDIUM: pollers: Drop fd events after a takeover to another tgid. 2025-02-26 13:00:18 +01:00
ev_kqueue.c MEDIUM: pollers: Drop fd events after a takeover to another tgid. 2025-02-26 13:00:18 +01:00
ev_poll.c DEBUG: pollers/fd: add thread id suffix to per-thread memory areas name hints 2024-05-24 12:07:18 +02:00
ev_select.c DEBUG: pollers/fd: add thread id suffix to per-thread memory areas name hints 2024-05-24 12:07:18 +02:00
event_hdl.c MEDIUM: tree-wide: replace most DECLARE_POOL with DECLARE_TYPED_POOL 2025-08-11 19:55:30 +02:00
extcheck.c BUG/MEDIUM: checks: make sure to always apply offsets to now_ms in expiration 2024-11-15 15:39:00 +01:00
fcgi-app.c MEDIUM: stats: consider that shared stats pointers may be NULL 2025-09-18 16:49:51 +02:00
fcgi.c BUG/MAJOR: fcgi: Fix uninitialized reserved bytes 2022-12-09 12:23:14 +01:00
fd.c CLEANUP: fd: make use of ha_aligned_alloc() for the fdtab 2025-08-11 19:55:30 +02:00
filters.c MEDIUM: htx: Remove the HTX extra field 2025-10-08 11:10:42 +02:00
fix.c
flt_bwlim.c BUG/MINOR: freq_ctr: Prevent possible signed overflow in freq_ctr_overshoot_period 2025-11-24 14:10:13 +01:00
flt_http_comp.c MINOR: compression: Use the <kip> value to check body size 2025-10-08 11:10:42 +02:00
flt_spoe.c BUG/MEDIUM: spoe: Improve error detection in SPOE applet on client abort 2025-08-26 16:12:18 +02:00
flt_trace.c BUG/MINOR: flt-trace: Support only one name option 2025-02-06 17:01:15 +01:00
freq_ctr.c BUG/MINOR: freq_ctr: Prevent possible signed overflow in freq_ctr_overshoot_period 2025-11-24 14:10:13 +01:00
frontend.c MEDIUM: stats: avoid 1 indirection by storing the shared stats directly in counters struct 2025-07-25 16:46:10 +02:00
guid.c MEDIUM: guid: switch guid to more compact cebuis_tree 2025-09-16 09:23:46 +02:00
h1.c BUG/MEDIUM: h1/h2/h3: reject forbidden chars in the Host header field 2025-05-16 15:13:17 +02:00
h1_htx.c CLEANUP: assorted typo fixes in the code, commits and doc 2025-12-25 19:45:29 +01:00
h2.c BUG/MINOR: h2: forbid 'Z' as well in header field names checks 2025-10-02 15:29:58 +02:00
h3.c BUG/MEDIUM: h3: fix access to QCS <sd> definitely 2025-12-10 12:04:37 +01:00
h3_stats.c MINOR: h3/qpack: adjust naming for errors 2024-05-16 10:31:17 +02:00
haproxy.c MEDIUM: proxy: implement persistent named defaults 2026-01-22 18:06:42 +01:00
hash.c BUILD: hash: use __fallthrough in hash_djb2() 2022-11-14 11:14:02 +01:00
hlua.c BUG/MINOR: hlua: consume error object if ignored after a failing lua_pcall() 2026-01-23 11:23:37 +01:00
hlua_fcn.c BUG/MINOR: hlua_fcn: ensure Patref:add_bulk() is given a table object before using it 2026-01-12 17:30:54 +01:00
hpack-dec.c BUG/CRITICAL: http: properly reject empty http header field names 2023-02-14 08:48:54 +01:00
hpack-enc.c
hpack-huff.c BUG/MEDIUM: hpack: fix incorrect huffman decoding of some control chars 2023-01-26 11:36:39 +01:00
hpack-tbl.c BUILD/DEBUG: hpack-tbl: fix format string in standalone debug code 2022-04-12 08:30:08 +02:00
hq_interop.c MINOR: channel: Remove total field from channels 2025-11-06 15:01:29 +01:00
http.c MINOR: http: fix 405,431,501 default errorfile 2025-10-29 08:47:19 +01:00
http_acl.c
http_act.c BUG/MINOR: config: check capture pool creations for failures 2026-01-26 11:45:49 +01:00
http_ana.c BUG/MEDIUM: http-ana: Properly detect client abort when forwarding response (v2) 2025-12-12 08:41:08 +01:00
http_client.c MEDIUM: counters: Dynamically allocate per-thread group counters 2026-01-13 11:12:34 +01:00
http_conv.c MINOR: http-conv: Remove unreachable goto statement in sample_conv_q_preferred 2024-11-06 10:06:52 +01:00
http_ext.c CLEANUP: assorted typo fixes in the code and comments 2025-04-02 11:12:20 +02:00
http_fetch.c MINOR: hlua/http-fetch: Use <kip> instead of HTX extra field to get body size 2025-10-08 11:10:25 +02:00
http_htx.c MINOR: config: Alert about extra arguments for errorfile and errorloc 2025-01-03 10:10:09 +01:00
http_rules.c MINOR: http-ana: Add support for "set-cookie-fmt" option to redirect rules 2024-11-19 15:20:02 +01:00
httpclient_cli.c MINOR: httpclient-cli: Reset httpclient HTX buffer instead of removing blocks 2025-07-24 12:13:42 +02:00
htx.c MEDIUM: htx: prevent <mark> to copy incomplete headers in htx_xfer_blks() 2025-01-31 15:51:51 +01:00
init.c MINOR: init: add REGISTER_POST_DEINIT_MASTER() hook 2025-08-07 22:27:14 +02:00
jwe.c MINOR: jwe: Some algorithms not supported by AWS-LC 2026-01-15 10:56:28 +01:00
jws.c BUG/MEDIUM: jws: return size_t in JWS functions 2025-09-11 14:31:32 +02:00
jwt.c MINOR: jwt: Add specific error code for known but unavailable certificate 2025-10-13 10:38:52 +02:00
lb_chash.c BUG/MAJOR: lb-chash: fix key calculation when using default hash-key id 2025-10-16 10:43:09 +02:00
lb_fas.c MINOR: proxies/servers: Calculate queueslength and use it. 2025-01-28 12:49:41 +01:00
lb_fwlc.c BUG/MEDIUM: fwlc: Handle memory allocation failures. 2025-10-01 18:13:33 +02:00
lb_fwrr.c MEDIUM: lb_fwrr: Don't start all thread groups on the same server. 2025-04-17 17:38:23 +02:00
lb_map.c MINOR: proxies/servers: Calculate queueslength and use it. 2025-01-28 12:49:41 +01:00
lb_ss.c MINOR: lbprm: implement true "sticky" balance algo 2024-03-29 17:08:37 +01:00
limits.c MINOR: limits: display the computed maxconn using ha_notice() 2025-11-20 18:38:09 +01:00
linuxcap.c MEDIUM: init: always warn when running as root without being asked to 2025-09-05 08:51:07 +02:00
listener.c MEDIUM: thread: Turn the group mask in thread set into a group counter 2026-01-15 05:24:53 +01:00
log.c BUG/MEDIUM: log: parsing log-forward options may result in segfault 2026-01-19 16:53:00 +01:00
lru.c BUG/MINOR: lru: fix the standalone test case for invalid revision 2024-04-13 08:43:12 +02:00
mailers.c MINOR: mailers: warn if mailers are configured but not actually used 2025-06-27 16:41:18 +02:00
map.c CLEANUP: patterns: remove dead code 2025-12-23 21:17:39 +01:00
mjson.c CLEANUP: mjson: remove unused defines from mjson.h 2025-10-06 09:30:07 +02:00
mqtt.c CLEANUP: mqtt: fix typo in MQTT_REMAINING_LENGHT_MAX_SIZE 2024-08-30 14:58:59 +02:00
mux_fcgi.c BUG/MEDIUM: connection: do not reinsert a purgeable conn in idle list 2025-11-14 16:06:34 +01:00
mux_h1.c BUG/MEDIUM: mux-h1: Skip UNUSED htx block when formating the start line 2026-01-23 11:40:54 +01:00
mux_h2.c CLEANUP: assorted typo fixes in the code, commits and doc 2025-12-25 19:45:29 +01:00
mux_pt.c MEDIUM: mux_h1/mux_pt: Use XPRT_CAN_SPLICE to decide if we should splice 2025-08-20 18:33:10 +02:00
mux_quic.c BUG/MEDIUM: mux-quic: prevent BUG_ON() on aborted uni stream close 2026-01-21 14:01:12 +01:00
mux_spop.c BUG/MEDIUM: connection: do not reinsert a purgeable conn in idle list 2025-11-14 16:06:34 +01:00
mworker.c BUG/MEDIUM: mworker: can't use signals after a failed reload 2026-01-06 14:27:53 +01:00
namespace.c BUG/MINOR: namespace: handle a possible strdup() failure 2024-12-10 08:05:34 +01:00
ncbmbuf.c MINOR: ncbmbuf: add tests as standalone mode 2025-10-22 15:04:24 +02:00
ncbuf.c MINOR: ncbuf: missing malloc checks in standalone code 2023-05-12 09:45:30 +02:00
net_helper.c BUG/MINOR: net_helper: fix IPv6 header length processing 2026-01-13 08:42:36 +01:00
pattern.c BUG/MAJOR: set the correct generation ID in pat_ref_append(). 2025-12-31 00:29:47 +01:00
payload.c MINOR: ssl: Introduce new smp_client_hello_parse() function 2025-07-01 11:55:36 +02:00
peers.c BUG/MEDIUM: peers: Properly handle shutdown when trying to get a line 2026-01-05 13:46:57 +01:00
pipe.c MEDIUM: tree-wide: replace most DECLARE_POOL with DECLARE_TYPED_POOL 2025-08-11 19:55:30 +02:00
pool.c MEDIUM: pools: better check for size rounding overflow on registration 2026-01-26 11:54:14 +01:00
proto_quic.c MINOR: quic: store source address for backend conns 2025-11-20 16:44:03 +01:00
proto_rhttp.c OPTIM: proto_rhttp: Don't set SNI for non-ssl connections 2025-09-05 15:56:42 +02:00
proto_sockpair.c BUILD: sockpair: fix build issue on macOS related to variable-length arrays 2026-01-08 09:26:22 +01:00
proto_tcp.c BUG/MINOR: proto_tcp: Properly report support for HAVE_TCP_MD5SIG feature 2026-01-23 11:40:54 +01:00
proto_udp.c BUG/MEDIUM: mworker/listener: ambiguous use of RX_F_INHERITED with shards 2025-12-11 18:09:47 +01:00
proto_uxdg.c MINOR: protocol: create abnsz socket address family 2024-10-29 12:14:50 +01:00
proto_uxst.c MINOR: sock: Add protocol and socket types parameters to sock_create_server_socket() 2025-06-11 18:37:34 +02:00
protocol.c MINOR: quic: rename "no-quic" to "tune.quic.listen" 2025-10-23 16:47:58 +02:00
proxy.c BUG/MINOR: config: check capture pool creations for failures 2026-01-26 11:45:49 +01:00
qmux_http.c MEDIUM: htx: Remove the HTX extra field 2025-10-08 11:10:42 +02:00
qmux_trace.c MINOR: mux-quic: define flag for backend side 2025-06-12 11:28:54 +02:00
qpack-dec.c MINOR: h3/qpack: adjust naming for errors 2024-05-16 10:31:17 +02:00
qpack-enc.c BUG/MINOR: h3: ensure that invalid status code are not encoded (FE side) 2025-07-15 18:39:23 +02:00
qpack-tbl.c CLEANUP: qpack: properly use the QPACK macros not HPACK ones in debug code 2022-11-24 15:38:26 +01:00
queue.c BUG/MEDIUM: queues: Fix arithmetic when feeling non_empty_tgids 2026-01-15 04:28:04 +01:00
quic_ack.c MEDIUM: tree-wide: replace most DECLARE_POOL with DECLARE_TYPED_POOL 2025-08-11 19:55:30 +02:00
quic_cc.c MINOR: quic: define quic_cc_algo as const 2025-12-01 15:05:41 +01:00
quic_cc_bbr.c MINOR: quic: define quic_cc_algo as const 2025-12-01 15:05:41 +01:00
quic_cc_cubic.c MINOR: quic: define quic_cc_algo as const 2025-12-01 15:05:41 +01:00
quic_cc_drs.c BUG/MINOR: quic: remove max_bw filter from delivery rate sampling 2024-12-13 14:42:43 +01:00
quic_cc_newreno.c MINOR: quic: define quic_cc_algo as const 2025-12-01 15:05:41 +01:00
quic_cc_nocc.c MINOR: quic: define quic_cc_algo as const 2025-12-01 15:05:41 +01:00
quic_cid.c CLEANUP: assorted typo fixes in the code, commits and doc 2025-12-25 19:45:29 +01:00
quic_cli.c BUG/MINOR: quic: fix uninit list on show quic handler 2025-11-25 14:50:19 +01:00
quic_conn.c MEDIUM: quic: Add connection as argument when qc_new_conn() is called 2025-12-08 15:22:00 +01:00
quic_enc.c TESTS: quic: useless param for b_quic_dec_int() 2025-10-15 09:58:03 +02:00
quic_fctl.c MINOR: mux-quic: define a flow control related type 2024-01-31 16:28:54 +01:00
quic_frame.c BUG/MEDIUM: quic: fix ACK ECN frame parsing 2026-01-13 15:08:02 +01:00
quic_loss.c MINOR: quic: split congestion controler options for FE/BE usage 2025-10-23 16:49:20 +02:00
quic_openssl_compat.c MINOR: quic: prefer qc_is_back() usage over qc->target 2025-08-07 16:59:59 +02:00
quic_pacing.c MINOR: quic: adapt credit based pacing to BBR 2025-01-23 17:41:07 +01:00
quic_retransmit.c MINOR: quic: prefer qc_is_back() usage over qc->target 2025-08-07 16:59:59 +02:00
quic_retry.c CLEANUP: assorted typo fixes in the code, commits and doc 2025-12-25 19:45:29 +01:00
quic_rules.c CLEANUP: tree-wide: define and use acl_match_cond() helper 2025-01-27 11:11:43 +01:00
quic_rx.c MEDIUM: quic: Add connection as argument when qc_new_conn() is called 2025-12-08 15:22:00 +01:00
quic_sock.c MINOR: quic: store source address for backend conns 2025-11-20 16:44:03 +01:00
quic_ssl.c BUG/MINOR: ech/quic: enable ech configuration also for quic listeners 2026-01-08 17:34:28 +01:00
quic_stats.c MINOR: stats: introduce a more expressive stat definition method 2024-04-26 10:20:57 +02:00
quic_stream.c MEDIUM: tree-wide: replace most DECLARE_POOL with DECLARE_TYPED_POOL 2025-08-11 19:55:30 +02:00
quic_tls.c BUG/MAJOR: quic: use ncbmbuf for CRYPTO handling 2025-10-22 15:04:41 +02:00
quic_token.c MINOR: quic: Token for future connections implementation. 2024-08-30 17:04:09 +02:00
quic_tp.c MINOR: quic-be: validate the 0-RTT transport parameters 2025-11-13 14:04:31 +01:00
quic_trace.c MINOR: quic: Add useful debugging traces in qc_idle_timer_do_rearm() 2025-12-08 10:40:59 +01:00
quic_tx.c CLEANUP: assorted typo fixes in the code, commits and doc 2025-12-25 19:45:29 +01:00
raw_sock.c MINOR: rawsock: introduce CO_RFL_TRY_HARDER to detect closures on complete reads 2025-10-01 10:23:01 +02:00
regex.c MINOR: regex: use a thread-local match pointer for pcre2 2025-10-13 16:56:43 +02:00
resolvers.c BUG/MINOR: resolvers: ensure fair round robin iteration 2025-11-02 17:28:32 +01:00
ring.c OPTIM: ring: avoid reloading the tail_ofs value before the CAS in ring_write() 2025-09-18 15:27:32 +02:00
sample.c MINOR: vars: store variable names for runtime access 2026-01-21 10:44:19 +01:00
server.c MINOR: proxy: remove proxy_preset_defaults() 2026-01-22 16:20:25 +01:00
server_state.c MEDIUM: counters: Dynamically allocate per-thread group counters 2026-01-13 11:12:34 +01:00
session.c MEDIUM: counters: Dynamically allocate per-thread group counters 2026-01-13 11:12:34 +01:00
sha1.c
shctx.c DEBUG: shctx: name shared memory using vma_set_name() 2024-05-21 17:55:03 +02:00
signal.c MEDIUM: tree-wide: replace most DECLARE_POOL with DECLARE_TYPED_POOL 2025-08-11 19:55:30 +02:00
sink.c BUG/MINOR: sink: retry attempt for sft server may never occur 2025-10-03 14:31:05 +02:00
slz.c IMPORT: slz: silence a build warning on non-x86 non-arm 2025-05-16 16:43:53 +02:00
sock.c MINOR: protocol: support a generic way to call getsockopt() on a connection 2025-12-24 18:38:51 +01:00
sock_inet.c BUG/MEDIUM: mworker/listener: ambiguous use of RX_F_INHERITED with shards 2025-12-11 18:09:47 +01:00
sock_unix.c BUG/MEDIUM: mworker/listener: ambiguous use of RX_F_INHERITED with shards 2025-12-11 18:09:47 +01:00
ssl_ckch.c MINOR: ssl: display libssl errors on private key loading 2026-01-26 14:19:19 +01:00
ssl_clienthello.c BUG/MINOR: quic/ssl: crash in ClientHello callback ssl traces 2025-12-08 10:40:59 +01:00
ssl_crtlist.c MEDIUM: ssl/cli: relax crt insertion in crt-list of type directory 2025-08-11 17:42:16 +02:00
ssl_gencert.c BUG/MEDIUM: ssl: fix generate-certificates option when SNI greater than 64bytes 2026-01-21 10:45:22 +01:00
ssl_ocsp.c MEDIUM: ssl/ckch: use ckch_store instead of ckch_data for ckch_conf_kws 2025-11-06 11:56:27 +01:00
ssl_sample.c MINOR: jwe: Add new jwt_decrypt_secret converter 2026-01-15 10:56:27 +01:00
ssl_sock.c MINOR: ssl: allow to disable certificate compression 2026-01-27 16:10:41 +01:00
ssl_trace.c BUG/MINOR: ssl: Fix potential NULL deref in trace callback 2025-09-11 14:31:32 +02:00
ssl_utils.c BUG/MINOR: acme: P-256 doesn't work with openssl >= 3.0 2025-11-18 11:34:28 +01:00
stats-file.c MEDIUM: counters: Dynamically allocate per-thread group counters 2026-01-13 11:12:34 +01:00
stats-html.c MINOR: stats: report BE unpublished status 2026-01-15 09:08:18 +01:00
stats-json.c BUG/MINOR: stats-json: Define JSON_INT_MAX as a signed integer 2025-02-06 17:19:49 +01:00
stats-proxy.c MINOR: stats: report BE unpublished status 2026-01-15 09:08:18 +01:00
stats.c MINOR: pattern: add a counter of added/freed patterns 2025-07-05 00:12:45 +02:00
stconn.c BUG/MEDIUM: stconn: Move data from <kip> to <kop> during zero-copy forwarding 2026-01-06 15:41:50 +01:00
stick_table.c BUG/MINOR: stick-tables: abort startup on stk_ctr pool creation failure 2026-01-26 11:45:49 +01:00
stream.c MEDIUM: proxy: force traffic on unpublished/disabled backends 2026-01-15 09:08:19 +01:00
systemd.c BUILD: systemd: fix usage of reserved name "sun" in the address field 2024-11-25 08:09:09 +01:00
task.c CLEANUP: more conversions and cleanups for alignment 2025-12-09 17:40:58 +01:00
tcp_act.c MEDIUM: stats: consider that shared stats pointers may be NULL 2025-09-18 16:49:51 +02:00
tcp_rules.c BUG/MINOR: config: check capture pool creations for failures 2026-01-26 11:45:49 +01:00
tcp_sample.c MINOR: tcp-sample: permit retrieving tcp_info from the connection/session stage 2026-01-11 15:48:20 +01:00
tcpcheck.c CLEANUP: assorted typo fixes in the code, commits and doc 2025-12-25 19:45:29 +01:00
thread.c MEDIUM: thread: Turn the group mask in thread set into a group counter 2026-01-15 05:24:53 +01:00
time.c
tools.c MINOR: tools: add chunk_escape_string() helper function 2026-01-21 10:44:19 +01:00
trace.c MINOR: trace: don't call strlen() on the function's name 2025-09-18 08:31:57 +02:00
uri_auth.c MEDIUM: uri_auth: implement clean uri_auth cleaning 2024-11-14 15:03:38 +01:00
uri_normalizer.c BUILD: tree-wide: cast arguments to tolower/toupper to unsigned char (2) 2024-07-18 13:29:52 +02:00
vars.c MINOR: vars: implement dump_all_vars() sample fetch 2026-01-21 10:44:19 +01:00
version.c REORG: version: move the remaining BUILD_* stuff from haproxy.c to version.c 2025-01-20 17:53:55 +01:00
wdt.c BUG/MEDIUM: wdt: improve stuck task detection accuracy 2025-10-01 10:18:53 +02:00
xprt_handshake.c MINOR: xprt: Add recvmsg() and sendmsg() parameters to rcv_buf() and snd_buf(). 2025-08-20 17:28:03 +02:00
xprt_quic.c MEDIUM: quic: Add connection as argument when qc_new_conn() is called 2025-12-08 15:22:00 +01:00