moritzruth/void-packages
1
0
Fork 0
Code Releases Activity Actions 2

haproxy: update to 1.8.19

Browse source
This commit is contained in:
Rich G 2019-04-14 12:43:56 -04:00 • committed by maxice8
parent 9628991b5e
commit 4df8dd59c2
2 changed files with 64 additions and 59 deletions
Download patch file Download diff file Expand all files Collapse all files

117
srcpkgs/haproxy/patches/libressl-2.7.patch
View file

@ -1,8 +1,7 @@
diff --git a/include/proto/openssl-compat.h include/proto/openssl-compat.h diff -ru a/include/proto/openssl-compat.h include/proto/openssl-compat.h
index b6fe1d2..551cae2 100644 --- a/include/proto/openssl-compat.h 2019-02-11 08:16:19.000000000 -0500
--- a/include/proto/openssl-compat.h +++ include/proto/openssl-compat.h 2019-04-14 11:41:09.820848231 -0400
+++ include/proto/openssl-compat.h @@ -89,7 +89,7 @@
@@ -89,7 +89,7 @@ static inline int SSL_SESSION_set1_id_context(SSL_SESSION *s, const unsigned cha
} }
#endif #endif
@ -11,7 +10,7 @@ index b6fe1d2..551cae2 100644
/* /*
* Functions introduced in OpenSSL 1.1.0 and not yet present in LibreSSL / BoringSSL * Functions introduced in OpenSSL 1.1.0 and not yet present in LibreSSL / BoringSSL
*/ */
@@ -121,7 +121,7 @@ static inline const OCSP_CERTID *OCSP_SINGLERESP_get0_id(const OCSP_SINGLERESP * @@ -121,7 +121,7 @@
#endif #endif
@ -20,10 +19,9 @@ index b6fe1d2..551cae2 100644
/* /*
* Functions introduced in OpenSSL 1.1.0 and not yet present in LibreSSL * Functions introduced in OpenSSL 1.1.0 and not yet present in LibreSSL
*/ */
diff --git a/src/ssl_sock.c src/ssl_sock.c diff -ru a/src/ssl_sock.c src/ssl_sock.c
index c2b5bf6..ebde76d 100644 --- a/src/ssl_sock.c 2019-02-11 08:16:19.000000000 -0500
--- a/src/ssl_sock.c +++ src/ssl_sock.c 2019-04-14 11:58:25.820742830 -0400
+++ src/ssl_sock.c
@@ -56,6 +56,14 @@ @@ -56,6 +56,14 @@
#include <openssl/engine.h> #include <openssl/engine.h>
#endif #endif
@ -39,7 +37,7 @@ index c2b5bf6..ebde76d 100644
#if (OPENSSL_VERSION_NUMBER >= 0x1010000fL) && !defined(OPENSSL_NO_ASYNC) #if (OPENSSL_VERSION_NUMBER >= 0x1010000fL) && !defined(OPENSSL_NO_ASYNC)
#include <openssl/async.h> #include <openssl/async.h>
#endif #endif
@@ -2066,7 +2074,7 @@ static void ssl_sock_switchctx_set(SSL *ssl, SSL_CTX *ctx) @@ -2093,7 +2101,7 @@
SSL_set_SSL_CTX(ssl, ctx); SSL_set_SSL_CTX(ssl, ctx);
} }
@ -48,16 +46,25 @@ index c2b5bf6..ebde76d 100644
static int ssl_sock_switchctx_err_cbk(SSL *ssl, int *al, void *priv) static int ssl_sock_switchctx_err_cbk(SSL *ssl, int *al, void *priv)
{ {
@@ -3798,7 +3806,7 @@ ssl_sock_initial_ctx(struct bind_conf *bind_conf) @@ -3830,7 +3838,7 @@
#ifdef OPENSSL_IS_BORINGSSL #ifdef OPENSSL_IS_BORINGSSL
SSL_CTX_set_select_certificate_cb(ctx, ssl_sock_switchctx_cbk); SSL_CTX_set_select_certificate_cb(ctx, ssl_sock_switchctx_cbk);
SSL_CTX_set_tlsext_servername_callback(ctx, ssl_sock_switchctx_err_cbk); SSL_CTX_set_tlsext_servername_callback(ctx, ssl_sock_switchctx_err_cbk);
-#elif (OPENSSL_VERSION_NUMBER >= 0x10101000L) -#elif (OPENSSL_VERSION_NUMBER >= 0x10101000L)
+#elif (OPENSSL_VERSION_NUMBER >= 0x10101000L) && !defined(LIBRESSL_VERSION_NUMBER) +#elif (OPENSSL_VERSION_NUMBER >= 0x10101000L) && !defined(LIBRESSL_VERSION_NUMBER)
SSL_CTX_set_client_hello_cb(ctx, ssl_sock_switchctx_cbk, NULL); if (bind_conf->ssl_conf.early_data) {
SSL_CTX_set_tlsext_servername_callback(ctx, ssl_sock_switchctx_err_cbk); SSL_CTX_set_options(ctx, SSL_OP_NO_ANTI_REPLAY);
#else SSL_CTX_set_max_early_data(ctx, global.tune.bufsize - global.tune.maxrewrite);
@@ -5052,7 +5060,7 @@ int ssl_sock_handshake(struct connection *conn, unsigned int flag) @@ -5081,7 +5089,7 @@
/* leave init state and start handshake */
conn->flags |= CO_FL_SSL_WAIT_HS | CO_FL_WAIT_L6_CONN;
-#if OPENSSL_VERSION_NUMBER >= 0x10101000L || defined(OPENSSL_IS_BORINGSSL)
+#if ((OPENSSL_VERSION_NUMBER >= 0x10101000L) || defined(OPENSSL_IS_BORINGSSL)) && !defined(LIBRESSL_VERSION_NUMBER)
conn->flags |= CO_FL_EARLY_SSL_HS;
#endif
@@ -5111,7 +5119,7 @@
if (!conn->xprt_ctx) if (!conn->xprt_ctx)
goto out_error; goto out_error;
@ -66,45 +73,7 @@ index c2b5bf6..ebde76d 100644
/* /*
* Check if we have early data. If we do, we have to read them * Check if we have early data. If we do, we have to read them
* before SSL_do_handshake() is called, And there's no way to * before SSL_do_handshake() is called, And there's no way to
@@ -5252,7 +5260,7 @@ check_error: @@ -5187,7 +5195,7 @@
goto out_error;
}
}
-#if (OPENSSL_VERSION_NUMBER >= 0x10101000L)
+#if HAVE_SSL_READ_EARLY
else {
/*
* If the server refused the early data, we have to send a
@@ -5375,7 +5383,7 @@ static int ssl_sock_to_buf(struct connection *conn, struct buffer *buf, int coun
continue;
}
-#if (OPENSSL_VERSION_NUMBER >= 0x10101000L)
+#if OPENSSL_READ_EARLY
if (conn->flags & CO_FL_EARLY_SSL_HS) {
size_t read_length;
@@ -5512,7 +5520,7 @@ static int ssl_sock_from_buf(struct connection *conn, struct buffer *buf, int fl
* in which case we accept to do it once again.
*/
while (buf->o) {
-#if (OPENSSL_VERSION_NUMBER >= 0x10101000L)
+#if HAVE_SSL_EARLY_DATA
size_t written_data;
#endif
@@ -5531,7 +5539,7 @@ static int ssl_sock_from_buf(struct connection *conn, struct buffer *buf, int fl
conn->xprt_st |= SSL_SOCK_SEND_UNLIMITED;
}
-#if (OPENSSL_VERSION_NUMBER >= 0x10101000L)
+#if HAVE_SSL_EARLY_DATA
if (!SSL_is_init_finished(conn->xprt_ctx)) {
unsigned int max_early;
--- src/ssl_sock.c 2018-10-21 20:57:07.520516300 +0200
+++ - 2018-10-21 21:08:48.989272557 +0200
@@ -5133,7 +5133,7 @@
OSSL_HANDSHAKE_STATE state = SSL_get_state((SSL *)conn->xprt_ctx); OSSL_HANDSHAKE_STATE state = SSL_get_state((SSL *)conn->xprt_ctx);
empty_handshake = state == TLS_ST_BEFORE; empty_handshake = state == TLS_ST_BEFORE;
#else #else
@ -113,7 +82,7 @@ index c2b5bf6..ebde76d 100644
#endif #endif
if (empty_handshake) { if (empty_handshake) {
if (!errno) { if (!errno) {
@@ -5217,7 +5217,7 @@ @@ -5271,7 +5279,7 @@
OSSL_HANDSHAKE_STATE state = SSL_get_state((SSL *)conn->xprt_ctx); OSSL_HANDSHAKE_STATE state = SSL_get_state((SSL *)conn->xprt_ctx);
empty_handshake = state == TLS_ST_BEFORE; empty_handshake = state == TLS_ST_BEFORE;
#else #else
@ -122,3 +91,39 @@ index c2b5bf6..ebde76d 100644
#endif #endif
if (empty_handshake) { if (empty_handshake) {
if (!errno) { if (!errno) {
@@ -5311,7 +5319,7 @@
goto out_error;
}
}
-#if (OPENSSL_VERSION_NUMBER >= 0x10101000L)
+#if HAVE_SSL_READ_EARLY
else {
/*
* If the server refused the early data, we have to send a
@@ -5434,7 +5442,7 @@
continue;
}
-#if (OPENSSL_VERSION_NUMBER >= 0x10101000L)
+#if HAVE_SSL_READ_EARLY
if (conn->flags & CO_FL_EARLY_SSL_HS) {
size_t read_length;
@@ -5571,7 +5579,7 @@
* in which case we accept to do it once again.
*/
while (buf->o) {
-#if (OPENSSL_VERSION_NUMBER >= 0x10101000L)
+#if HAVE_SSL_EARLY_DATA
size_t written_data;
#endif
@@ -5590,7 +5598,7 @@
conn->xprt_st |= SSL_SOCK_SEND_UNLIMITED;
}
-#if (OPENSSL_VERSION_NUMBER >= 0x10101000L)
+#if HAVE_SSL_EARLY_DATA
if (!SSL_is_init_finished(conn->xprt_ctx)) {
unsigned int max_early;

4
srcpkgs/haproxy/template
View file

@ -1,6 +1,6 @@
# Template file for 'haproxy' # Template file for 'haproxy'
pkgname=haproxy pkgname=haproxy
version=1.8.17 version=1.8.19
revision=1 revision=1
build_style=gnu-makefile build_style=gnu-makefile
make_build_args="TARGET=linux2628 USE_PCRE=1 USE_PCRE_JIT=1 USE_ZLIB=1 make_build_args="TARGET=linux2628 USE_PCRE=1 USE_PCRE_JIT=1 USE_ZLIB=1
@ -12,7 +12,7 @@ maintainer="Eivind Uggedal <eivind@uggedal.com>"
license="GPL-2.0-or-later, LGPL-2.1-or-later" license="GPL-2.0-or-later, LGPL-2.1-or-later"
homepage="https://www.haproxy.org" homepage="https://www.haproxy.org"
distfiles="${homepage}/download/${version%.*}/src/${pkgname}-${version}.tar.gz" distfiles="${homepage}/download/${version%.*}/src/${pkgname}-${version}.tar.gz"
checksum=7b789b177875afdd5ddeff058e7efde73aa895dc2dcf728b464358635ae3948e checksum=64f5fbfd4e09ffeaf26cb6667398ba780704a14e96e60000caa8bf69962ba734
make_dirs="$haproxy_homedir 0750 ${pkgname} ${pkgname}" make_dirs="$haproxy_homedir 0750 ${pkgname} ${pkgname}"
conf_files="/etc/${pkgname}/${pkgname}.cfg" conf_files="/etc/${pkgname}/${pkgname}.cfg"