Auto sync2gitlab import of haproxy-1.8.27-4.el8.src.rpm
This commit is contained in:
James Antill
parent
ccb8c3af8b
commit
3a10af857e
1
.gitignore
vendored
Normal file
1
.gitignore
vendored
Normal file
@ -0,0 +1 @@
|
||||
/haproxy-1.8.27.tar.gz
|
||||
108
halog.1
Normal file
108
halog.1
Normal file
@ -0,0 +1,108 @@
|
||||
.TH HALOG "1" "July 2013" "halog" "User Commands"
|
||||
.SH NAME
|
||||
halog \- HAProxy log statistics reporter
|
||||
.SH SYNOPSIS
|
||||
.B halog
|
||||
[\fI-h|--help\fR]
|
||||
.br
|
||||
.B halog
|
||||
[\fIoptions\fR] <LOGFILE
|
||||
.SH DESCRIPTION
|
||||
.B halog
|
||||
reads HAProxy log data from stdin and extracts and displays lines matching
|
||||
user-specified criteria.
|
||||
.SH OPTIONS
|
||||
.SS Input filters \fR(several filters may be combined)
|
||||
.TP
|
||||
\fB\-H\fR
|
||||
Only match lines containing HTTP logs (ignore TCP)
|
||||
.TP
|
||||
\fB\-E\fR
|
||||
Only match lines without any error (no 5xx status)
|
||||
.TP
|
||||
\fB\-e\fR
|
||||
Only match lines with errors (status 5xx or negative)
|
||||
.TP
|
||||
\fB\-rt\fR|\fB\-RT\fR <time>
|
||||
Only match response times larger|smaller than <time>
|
||||
.TP
|
||||
\fB\-Q\fR|\fB\-QS\fR
|
||||
Only match queued requests (any queue|server queue)
|
||||
.TP
|
||||
\fB\-tcn\fR|\fB\-TCN\fR <code>
|
||||
Only match requests with/without termination code <code>
|
||||
.TP
|
||||
\fB\-hs\fR|\fB\-HS\fR <[min][:][max]>
|
||||
Only match requests with HTTP status codes within/not within min..max. Any of
|
||||
them may be omitted. Exact code is checked for if no ':' is specified.
|
||||
.SS
|
||||
Modifiers
|
||||
.TP
|
||||
\fB\-v\fR
|
||||
Invert the input filtering condition
|
||||
.TP
|
||||
\fB\-q\fR
|
||||
Don't report errors/warnings
|
||||
.TP
|
||||
\fB\-m\fR <lines>
|
||||
Limit output to the first <lines> lines
|
||||
.SS
|
||||
Output filters \fR\- only one may be used at a time
|
||||
.TP
|
||||
\fB\-c\fR
|
||||
Only report the number of lines that would have been printed
|
||||
.TP
|
||||
\fB\-pct\fR
|
||||
Output connect and response times percentiles
|
||||
.TP
|
||||
\fB\-st\fR
|
||||
Output number of requests per HTTP status code
|
||||
.TP
|
||||
\fB\-cc\fR
|
||||
Output number of requests per cookie code (2 chars)
|
||||
.TP
|
||||
\fB\-tc\fR
|
||||
Output number of requests per termination code (2 chars)
|
||||
.TP
|
||||
\fB\-srv\fR
|
||||
Output statistics per server (time, requests, errors)
|
||||
.TP
|
||||
\fB\-u\fR*
|
||||
Output statistics per URL (time, requests, errors)
|
||||
.br
|
||||
Additional characters indicate the output sorting key:
|
||||
.RS
|
||||
.TP
|
||||
\fB\-u\fR
|
||||
URL
|
||||
.TP
|
||||
\fB\-uc\fR
|
||||
Request count
|
||||
.TP
|
||||
\fB\-ue\fR
|
||||
Error count
|
||||
.TP
|
||||
\fB\-ua\fR
|
||||
Average response time
|
||||
.TP
|
||||
\fB\-ut\fR
|
||||
Average total time
|
||||
.TP
|
||||
\fB\-uao\fR, \fB\-uto\fR
|
||||
Average times computed on valid ('OK') requests
|
||||
.TP
|
||||
\fB\-uba\fR
|
||||
Average bytes returned
|
||||
.TP
|
||||
\fB\-ubt\fR
|
||||
Total bytes returned
|
||||
.RE
|
||||
.SH "SEE ALSO"
|
||||
.BR haproxy (1)
|
||||
.SH AUTHOR
|
||||
.PP
|
||||
\fBhalog\fR was written by Willy Tarreau <w@1wt.eu> and is part of \fBhaproxy\fR(1).
|
||||
.PP
|
||||
This manual page was written by Apollon Oikonomopoulos <apoikos@gmail.com> for the Debian project (but may
|
||||
be used by others).
|
||||
|
||||
90
haproxy.cfg
Normal file
90
haproxy.cfg
Normal file
@ -0,0 +1,90 @@
|
||||
#---------------------------------------------------------------------
|
||||
# Example configuration for a possible web application. See the
|
||||
# full configuration options online.
|
||||
#
|
||||
# https://www.haproxy.org/download/1.8/doc/configuration.txt
|
||||
#
|
||||
#---------------------------------------------------------------------
|
||||
|
||||
#---------------------------------------------------------------------
|
||||
# Global settings
|
||||
#---------------------------------------------------------------------
|
||||
global
|
||||
# to have these messages end up in /var/log/haproxy.log you will
|
||||
# need to:
|
||||
#
|
||||
# 1) configure syslog to accept network log events. This is done
|
||||
# by adding the '-r' option to the SYSLOGD_OPTIONS in
|
||||
# /etc/sysconfig/syslog
|
||||
#
|
||||
# 2) configure local2 events to go to the /var/log/haproxy.log
|
||||
# file. A line like the following can be added to
|
||||
# /etc/sysconfig/syslog
|
||||
#
|
||||
# local2.* /var/log/haproxy.log
|
||||
#
|
||||
log 127.0.0.1 local2
|
||||
|
||||
chroot /var/lib/haproxy
|
||||
pidfile /var/run/haproxy.pid
|
||||
maxconn 4000
|
||||
user haproxy
|
||||
group haproxy
|
||||
daemon
|
||||
|
||||
# turn on stats unix socket
|
||||
stats socket /var/lib/haproxy/stats
|
||||
|
||||
# utilize system-wide crypto-policies
|
||||
ssl-default-bind-ciphers PROFILE=SYSTEM
|
||||
ssl-default-server-ciphers PROFILE=SYSTEM
|
||||
|
||||
#---------------------------------------------------------------------
|
||||
# common defaults that all the 'listen' and 'backend' sections will
|
||||
# use if not designated in their block
|
||||
#---------------------------------------------------------------------
|
||||
defaults
|
||||
mode http
|
||||
log global
|
||||
option httplog
|
||||
option dontlognull
|
||||
option http-server-close
|
||||
option forwardfor except 127.0.0.0/8
|
||||
option redispatch
|
||||
retries 3
|
||||
timeout http-request 10s
|
||||
timeout queue 1m
|
||||
timeout connect 10s
|
||||
timeout client 1m
|
||||
timeout server 1m
|
||||
timeout http-keep-alive 10s
|
||||
timeout check 10s
|
||||
maxconn 3000
|
||||
|
||||
#---------------------------------------------------------------------
|
||||
# main frontend which proxys to the backends
|
||||
#---------------------------------------------------------------------
|
||||
frontend main
|
||||
bind *:5000
|
||||
acl url_static path_beg -i /static /images /javascript /stylesheets
|
||||
acl url_static path_end -i .jpg .gif .png .css .js
|
||||
|
||||
use_backend static if url_static
|
||||
default_backend app
|
||||
|
||||
#---------------------------------------------------------------------
|
||||
# static backend for serving up images, stylesheets and such
|
||||
#---------------------------------------------------------------------
|
||||
backend static
|
||||
balance roundrobin
|
||||
server static 127.0.0.1:4331 check
|
||||
|
||||
#---------------------------------------------------------------------
|
||||
# round robin balancing between the various backends
|
||||
#---------------------------------------------------------------------
|
||||
backend app
|
||||
balance roundrobin
|
||||
server app1 127.0.0.1:5001 check
|
||||
server app2 127.0.0.1:5002 check
|
||||
server app3 127.0.0.1:5003 check
|
||||
server app4 127.0.0.1:5004 check
|
||||
12
haproxy.logrotate
Normal file
12
haproxy.logrotate
Normal file
@ -0,0 +1,12 @@
|
||||
/var/log/haproxy.log {
|
||||
daily
|
||||
rotate 10
|
||||
missingok
|
||||
notifempty
|
||||
compress
|
||||
sharedscripts
|
||||
postrotate
|
||||
/bin/kill -HUP `cat /var/run/syslogd.pid 2> /dev/null` 2> /dev/null || true
|
||||
/bin/kill -HUP `cat /var/run/rsyslogd.pid 2> /dev/null` 2> /dev/null || true
|
||||
endscript
|
||||
}
|
||||
18
haproxy.service
Normal file
18
haproxy.service
Normal file
@ -0,0 +1,18 @@
|
||||
[Unit]
|
||||
Description=HAProxy Load Balancer
|
||||
After=network-online.target
|
||||
Wants=network-online.target
|
||||
|
||||
[Service]
|
||||
Environment="CONFIG=/etc/haproxy/haproxy.cfg" "PIDFILE=/run/haproxy.pid"
|
||||
EnvironmentFile=/etc/sysconfig/haproxy
|
||||
ExecStartPre=/usr/sbin/haproxy -f $CONFIG -c -q $OPTIONS
|
||||
ExecStart=/usr/sbin/haproxy -Ws -f $CONFIG -p $PIDFILE $OPTIONS
|
||||
ExecReload=/usr/sbin/haproxy -f $CONFIG -c -q $OPTIONS
|
||||
ExecReload=/bin/kill -USR2 $MAINPID
|
||||
SuccessExitStatus=143
|
||||
KillMode=mixed
|
||||
Type=notify
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
558
haproxy.spec
Normal file
558
haproxy.spec
Normal file
@ -0,0 +1,558 @@
|
||||
%define haproxy_user haproxy
|
||||
%define haproxy_group %{haproxy_user}
|
||||
%define haproxy_homedir %{_localstatedir}/lib/haproxy
|
||||
%define haproxy_confdir %{_sysconfdir}/haproxy
|
||||
%define haproxy_datadir %{_datadir}/haproxy
|
||||
|
||||
%global _hardened_build 1
|
||||
|
||||
Name: haproxy
|
||||
Version: 1.8.27
|
||||
Release: 4%{?dist}
|
||||
Summary: HAProxy reverse proxy for high availability environments
|
||||
|
||||
Group: System Environment/Daemons
|
||||
License: GPLv2+
|
||||
|
||||
URL: http://www.haproxy.org/
|
||||
Source0: http://www.haproxy.org/download/1.8/src/haproxy-%{version}.tar.gz
|
||||
Source1: %{name}.service
|
||||
Source2: %{name}.cfg
|
||||
Source3: %{name}.logrotate
|
||||
Source4: %{name}.sysconfig
|
||||
Source5: halog.1
|
||||
|
||||
Patch0: rhbz1838319-mworker-fix-again-copy_argv.patch
|
||||
Patch1: rhbz1941446-fix-short-http-responses.patch
|
||||
|
||||
BuildRequires: lua-devel
|
||||
BuildRequires: pcre-devel
|
||||
BuildRequires: zlib-devel
|
||||
BuildRequires: openssl-devel
|
||||
BuildRequires: systemd-devel
|
||||
BuildRequires: systemd-units
|
||||
|
||||
Requires(pre): shadow-utils
|
||||
Requires(post): systemd
|
||||
Requires(preun): systemd
|
||||
Requires(postun): systemd
|
||||
|
||||
%description
|
||||
HAProxy is a TCP/HTTP reverse proxy which is particularly suited for high
|
||||
availability environments. Indeed, it can:
|
||||
- route HTTP requests depending on statically assigned cookies
|
||||
- spread load among several servers while assuring server persistence
|
||||
through the use of HTTP cookies
|
||||
- switch to backup servers in the event a main one fails
|
||||
- accept connections to special ports dedicated to service monitoring
|
||||
- stop accepting connections without breaking existing ones
|
||||
- add, modify, and delete HTTP headers in both directions
|
||||
- block requests matching particular patterns
|
||||
- report detailed status to authenticated users from a URI
|
||||
intercepted from the application
|
||||
|
||||
%prep
|
||||
%setup -q
|
||||
%patch0 -p1
|
||||
%patch1 -p1
|
||||
|
||||
%build
|
||||
regparm_opts=
|
||||
%ifarch %ix86 x86_64
|
||||
regparm_opts="USE_REGPARM=1"
|
||||
%endif
|
||||
|
||||
%{__make} %{?_smp_mflags} CPU="generic" TARGET="linux2628" USE_OPENSSL=1 USE_PCRE=1 USE_ZLIB=1 USE_LUA=1 USE_CRYPT_H=1 USE_SYSTEMD=1 USE_LINUX_TPROXY=1 USE_GETADDRINFO=1 ${regparm_opts} ADDINC="%{optflags}" ADDLIB="%{__global_ldflags}"
|
||||
|
||||
pushd contrib/halog
|
||||
%{__make} ${halog} OPTIMIZE="%{optflags} %{build_ldflags}" LDFLAGS=
|
||||
popd
|
||||
|
||||
pushd contrib/iprange
|
||||
%{__make} ${iprange} OPTIMIZE="%{optflags} %{build_ldflags}" LDFLAGS=
|
||||
popd
|
||||
|
||||
%install
|
||||
%{__make} install-bin DESTDIR=%{buildroot} PREFIX=%{_prefix} TARGET="linux2628"
|
||||
%{__make} install-man DESTDIR=%{buildroot} PREFIX=%{_prefix}
|
||||
|
||||
%{__install} -p -D -m 0644 %{SOURCE1} %{buildroot}%{_unitdir}/%{name}.service
|
||||
%{__install} -p -D -m 0644 %{SOURCE2} %{buildroot}%{haproxy_confdir}/%{name}.cfg
|
||||
%{__install} -p -D -m 0644 %{SOURCE3} %{buildroot}%{_sysconfdir}/logrotate.d/%{name}
|
||||
%{__install} -p -D -m 0644 %{SOURCE4} %{buildroot}%{_sysconfdir}/sysconfig/%{name}
|
||||
%{__install} -p -D -m 0644 %{SOURCE5} %{buildroot}%{_mandir}/man1/halog.1
|
||||
%{__install} -d -m 0755 %{buildroot}%{haproxy_homedir}
|
||||
%{__install} -d -m 0755 %{buildroot}%{haproxy_datadir}
|
||||
%{__install} -d -m 0755 %{buildroot}%{_bindir}
|
||||
%{__install} -p -m 0755 ./contrib/halog/halog %{buildroot}%{_bindir}/halog
|
||||
%{__install} -p -m 0755 ./contrib/iprange/iprange %{buildroot}%{_bindir}/iprange
|
||||
%{__install} -p -m 0644 ./examples/errorfiles/* %{buildroot}%{haproxy_datadir}
|
||||
|
||||
for httpfile in $(find ./examples/errorfiles/ -type f)
|
||||
do
|
||||
%{__install} -p -m 0644 $httpfile %{buildroot}%{haproxy_datadir}
|
||||
done
|
||||
|
||||
%{__rm} -rf ./examples/errorfiles/
|
||||
|
||||
find ./examples/* -type f ! -name "*.cfg" -exec %{__rm} -f "{}" \;
|
||||
|
||||
for textfile in $(find ./ -type f -name '*.txt')
|
||||
do
|
||||
%{__mv} $textfile $textfile.old
|
||||
iconv --from-code ISO8859-1 --to-code UTF-8 --output $textfile $textfile.old
|
||||
%{__rm} -f $textfile.old
|
||||
done
|
||||
|
||||
%pre
|
||||
getent group %{haproxy_group} >/dev/null || \
|
||||
groupadd -r %{haproxy_group}
|
||||
getent passwd %{haproxy_user} >/dev/null || \
|
||||
useradd -r -g %{haproxy_user} -d %{haproxy_homedir} \
|
||||
-s /sbin/nologin -c "haproxy" %{haproxy_user}
|
||||
exit 0
|
||||
|
||||
%post
|
||||
%systemd_post %{name}.service
|
||||
|
||||
%preun
|
||||
%systemd_preun %{name}.service
|
||||
|
||||
%postun
|
||||
%systemd_postun_with_restart %{name}.service
|
||||
|
||||
%files
|
||||
%defattr(-,root,root,-)
|
||||
%doc doc/* examples/*
|
||||
%doc CHANGELOG README ROADMAP VERSION
|
||||
%license LICENSE
|
||||
%dir %{haproxy_homedir}
|
||||
%dir %{haproxy_confdir}
|
||||
%dir %{haproxy_datadir}
|
||||
%{haproxy_datadir}/*
|
||||
%config(noreplace) %{haproxy_confdir}/%{name}.cfg
|
||||
%config(noreplace) %{_sysconfdir}/logrotate.d/%{name}
|
||||
%config(noreplace) %{_sysconfdir}/sysconfig/%{name}
|
||||
%{_unitdir}/%{name}.service
|
||||
%{_sbindir}/%{name}
|
||||
%{_bindir}/halog
|
||||
%{_bindir}/iprange
|
||||
%{_mandir}/man1/*
|
||||
|
||||
%changelog
|
||||
* Tue Jan 18 2022 Ryan O'Hara <rohara@redhat.com> - 1.8.27-3
|
||||
- Apply patch (#1941446)
|
||||
|
||||
* Fri Oct 15 2021 Ryan O'Hara <rohara@redhat.com> - 1.8.27-3
|
||||
- Fix short HTTP responses (#1941446)
|
||||
|
||||
* Thu Dec 17 2020 Ryan O'Hara <rohara@redhat.com> - 1.8.27-2
|
||||
- Fix copy_argv for arguments that begin with hypen (#1838319)
|
||||
|
||||
* Thu Dec 10 2020 Ryan O'Hara <rohara@redhat.com> - 1.8.27-1
|
||||
- Update to 1.8.27 (#1905663, #1838319)
|
||||
|
||||
* Thu Jun 18 2020 Ryan O'Hara <rohara@redhat.com> - 1.8.23-5
|
||||
- Use OPTIONS from systemd EnvironmentFile (#1845611)
|
||||
|
||||
* Wed Jun 17 2020 Ryan O'Hara <rohara@redhat.com> - 1.8.23-4
|
||||
- Wait for network to be online before starting (#1756714)
|
||||
|
||||
* Wed Apr 01 2020 Ryan O'Hara <rohara@redhat.com> - 1.8.23-3
|
||||
- Fix hapack zero byte input causing overwrite (CVE-2020-11100, #1819519)
|
||||
|
||||
* Fri Dec 13 2019 Ryan O'Hara <rohara@redhat.com> - 1.8.23-2
|
||||
- Consider exist status 143 as success (#1778844)
|
||||
|
||||
* Mon Dec 02 2019 Ryan O'Hara <rohara@redhat.com> - 1.8.23-1
|
||||
- Update to 1.8.23 (#1774745)
|
||||
|
||||
* Fri Jul 19 2019 Ryan O'Hara <rohara@redhat.com> - 1.8.15-6
|
||||
- Add gating tests (#1682106)
|
||||
|
||||
* Wed Jan 09 2019 Ryan O'Hara <rohara@redhat.com> - 1.8.15-5
|
||||
- Resolve CVE-2018-20615 (#1664533)
|
||||
|
||||
* Sun Dec 16 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.15-4
|
||||
- Use empty LDFLAGS to prevent stripping, maintain hardened build
|
||||
|
||||
* Sat Dec 15 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.15-3
|
||||
- Use LDFLAGS when building contib tools to prevent binary stripping
|
||||
|
||||
* Fri Dec 14 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.15-2
|
||||
- Bump release
|
||||
|
||||
* Thu Dec 13 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.15-1
|
||||
- Update to 1.8.15 (#1631815)
|
||||
- Resolve CVE-2018-20102 (#1659017)
|
||||
- Resolve CVE-2018-20103 (#1659019)
|
||||
|
||||
* Tue Oct 02 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.14-1
|
||||
- Update to 1.8.14 (#1631815)
|
||||
- Resolve CVE-2018-14645 (#1631539)
|
||||
|
||||
* Wed Jul 25 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.12-2
|
||||
- Fix ownership of /var/lib/haproxy/ to avoid selinux DAC override errors
|
||||
|
||||
* Mon Jul 02 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.12-1
|
||||
- Update to 1.8.12
|
||||
- Resolve CVE-2018-10184 (#1569643)
|
||||
- Resolve CVE-2018-11469 (#1584787)
|
||||
|
||||
* Thu Apr 19 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.8-1
|
||||
- Update to 1.8.8 (#1560121)
|
||||
|
||||
* Mon Apr 09 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.7-1
|
||||
- Update to 1.8.7 (#1560121)
|
||||
|
||||
* Fri Apr 06 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.6-1
|
||||
- Update to 1.8.6 (#1560121)
|
||||
|
||||
* Mon Mar 26 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.5-1
|
||||
- Update to 1.8.5 (#1560121)
|
||||
|
||||
* Mon Feb 26 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.4-2
|
||||
- Define USE_SYSTEMD at build time (#1549027)
|
||||
|
||||
* Mon Feb 26 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.4-1
|
||||
- Update to 1.8.4 (#1543668)
|
||||
|
||||
* Thu Feb 08 2018 Florian Weimer <fweimer@redhat.com> - 1.8.3-5
|
||||
- Build halog and iprange with linker flags from redhat-rpm-config
|
||||
- Tell build to include <crypt.h>
|
||||
|
||||
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.8.3-4
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
|
||||
|
||||
* Sat Jan 20 2018 Björn Esser <besser82@fedoraproject.org> - 1.8.3-3
|
||||
- Rebuilt for switch to libxcrypt
|
||||
|
||||
* Fri Jan 05 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.3-2
|
||||
- Remove haproxy-systemd-wrapper
|
||||
|
||||
* Fri Jan 05 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.3-1
|
||||
- Update to 1.8.3 (#1528829)
|
||||
|
||||
* Wed Dec 27 2017 Ryan O'Hara <rohara@redhat.com> - 1.8.2-1
|
||||
- Update to 1.8.2
|
||||
|
||||
* Fri Dec 15 2017 Ryan O'Hara <rohara@redhat.com> - 1.8.1-1
|
||||
- Update to 1.8.1
|
||||
|
||||
* Fri Dec 15 2017 Ryan O'Hara <rohara@redhat.com> - 1.8.0-1
|
||||
- Update to 1.8.0
|
||||
|
||||
* Mon Sep 11 2017 Ryan O'Hara <rohara@redhat.com> - 1.7.9-1
|
||||
- Update to 1.7.9 (#1485084)
|
||||
|
||||
* Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.7.8-3
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
|
||||
|
||||
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.7.8-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
|
||||
|
||||
* Mon Jul 10 2017 Ryan O'Hara <rohara@redhat.com> - 1.7.8-1
|
||||
- Update to 1.7.8 (#1436669)
|
||||
|
||||
* Mon May 01 2017 Ryan O'Hara <rohara@redhat.com> - 1.7.3-2
|
||||
- Use KillMode=mixed in systemd service file (#1447085)
|
||||
|
||||
* Sun Mar 26 2017 Ryan O'Hara <rohara@redhat.com> - 1.7.3-1
|
||||
- Update to 1.7.3 (#1413276)
|
||||
|
||||
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.7.2-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
|
||||
|
||||
* Wed Jan 18 2017 Ryan O'Hara <rohara@redhat.com> - 1.7.2-1
|
||||
- Update to 1.7.2 (#1413276)
|
||||
|
||||
* Thu Dec 29 2016 Ryan O'Hara <rohara@redhat.com> - 1.7.1-1
|
||||
- Update to 1.7.1
|
||||
|
||||
* Mon Nov 28 2016 Ryan O'Hara <rohara@redhat.com> - 1.7.0-1
|
||||
- Update to 1.7.0
|
||||
|
||||
* Mon Nov 21 2016 Ryan O'Hara <rohara@redhat.com> - 1.6.10-1
|
||||
- Update to 1.6.10 (#1397013)
|
||||
|
||||
* Wed Aug 31 2016 Ryan O'Hara <rohara@redhat.com> - 1.6.9-1
|
||||
- Update to 1.6.9 (#1370709)
|
||||
|
||||
* Thu Jul 14 2016 Ryan O'Hara <rohara@redhat.com> - 1.6.7-2
|
||||
- Fix main frontend in default config file (#1348674)
|
||||
|
||||
* Thu Jul 14 2016 Ryan O'Hara <rohara@redhat.com> - 1.6.7-1
|
||||
- Update to 1.6.7 (#1356578)
|
||||
|
||||
* Tue Jun 28 2016 Ryan O'Hara <rohara@redhat.com> - 1.6.6-2
|
||||
- Remove patch for CVE-2016-5360
|
||||
|
||||
* Tue Jun 28 2016 Ryan O'Hara <rohara@redhat.com> - 1.6.6-1
|
||||
- Update to 1.6.6 (#1350426)
|
||||
|
||||
* Wed Jun 15 2016 Ryan O'Hara <rohara@redhat.com> - 1.6.5-3
|
||||
- Fix reqdeny causing random crashes (CVE-2016-5360, #1346672)
|
||||
|
||||
* Fri Jun 03 2016 Ryan O'Hara <rohara@redhat.com> - 1.6.5-2
|
||||
- Utilize system-wide crypto-policies (#1256253)
|
||||
|
||||
* Mon May 23 2016 Ryan O'Hara <rohara@redhat.com> - 1.6.5-1
|
||||
- Update to 1.6.5 (#1317313)
|
||||
|
||||
* Wed Feb 03 2016 Fedora Release Engineering <releng@fedoraproject.org> - 1.6.3-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
|
||||
|
||||
* Wed Jan 20 2016 Ryan O'Hara <rohara@redhat.com> - 1.6.3-1
|
||||
- Update to 1.6.3 (#1276288)
|
||||
|
||||
* Wed Nov 18 2015 Ryan O'Hara <rohara@redhat.com> - 1.6.2-3
|
||||
- Enable Lua support
|
||||
|
||||
* Tue Nov 03 2015 Ryan O'Hara <rohara@redhat.com> - 1.6.2-2
|
||||
- Update to 1.6.2 (#1276288)
|
||||
|
||||
* Fri Oct 30 2015 Ryan O'Hara <rohara@redhat.com> - 1.6.1-1
|
||||
- Update to 1.6.1 (#1276288)
|
||||
|
||||
* Mon Jul 06 2015 Ryan O'Hara <rohara@redhat.com> - 1.5.14-1
|
||||
- Update to 1.5.14 (CVE-2015-3281, #1239181)
|
||||
|
||||
* Fri Jun 26 2015 Ryan O'Hara <rohara@redhat.com> - 1.5.13-1
|
||||
- Update to 1.5.13 (#1236056)
|
||||
|
||||
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.5.12-3
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
|
||||
|
||||
* Tue May 05 2015 Ryan O'Hara <rohara@redhat.com> - 1.5.12-2
|
||||
- Remove unused patches
|
||||
|
||||
* Tue May 05 2015 Ryan O'Hara <rohara@redhat.com> - 1.5.12-1
|
||||
- Update to 1.5.12 (#1217922)
|
||||
|
||||
* Wed Mar 04 2015 Ryan O'Hara <rohara@redhat.com> - 1.5.11-4
|
||||
- Rework systemd service and sysconfig file
|
||||
|
||||
* Wed Feb 11 2015 Ryan O'Hara <rohara@redhat.com> - 1.5.11-3
|
||||
- Add sysconfig file
|
||||
|
||||
* Tue Feb 10 2015 Ryan O'Hara <rohara@redhat.com> - 1.5.11-2
|
||||
- Add tcp-ut bind option to set TCP_USER_TIMEOUT (#1190783)
|
||||
|
||||
* Sun Feb 01 2015 Ryan O'Hara <rohara@redhat.com> - 1.5.11-1
|
||||
- Update to 1.5.11 (#1188029)
|
||||
|
||||
* Mon Jan 05 2015 Ryan O'Hara <rohara@redhat.com> - 1.5.10-1
|
||||
- Update to 1.5.10
|
||||
|
||||
* Mon Dec 01 2014 Ryan O'Hara <rohara@redhat.com> - 1.5.9-1
|
||||
- Update to 1.5.9
|
||||
|
||||
* Sat Nov 01 2014 Ryan O'Hara <rohara@redhat.com> - 1.5.8-1
|
||||
- Update to 1.5.8
|
||||
|
||||
* Thu Oct 30 2014 Ryan O'Hara <rohara@redhat.com> - 1.5.7-1
|
||||
- Update to 1.5.7
|
||||
|
||||
* Mon Oct 20 2014 Ryan O'Hara <rohara@redhat.com> - 1.5.6-1
|
||||
- Update to 1.5.6
|
||||
|
||||
* Wed Oct 08 2014 Ryan O'Hara <rohara@redhat.com> - 1.5.5-1
|
||||
- Update to 1.5.5
|
||||
|
||||
* Tue Sep 02 2014 Ryan O'Hara <rohara@redhat.com> - 1.5.4-1
|
||||
- Update to 1.5.4
|
||||
|
||||
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.5.3-3
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
|
||||
|
||||
* Wed Aug 06 2014 Ryan O'Hara <rohara@redhat.com> - 1.5.3-2
|
||||
- Use haproxy-systemd-wrapper in service file (#1126955)
|
||||
|
||||
* Fri Jul 25 2014 Ryan O'Hara <rohara@redhat.com> - 1.5.3-1
|
||||
- Update to 1.5.3
|
||||
|
||||
* Tue Jul 15 2014 Ryan O'Hara <rohara@redhat.com> - 1.5.2-1
|
||||
- Update to 1.5.2
|
||||
|
||||
* Tue Jun 24 2014 Ryan O'Hara <rohara@redhat.com> - 1.5.1-1
|
||||
- Update to 1.5.1
|
||||
|
||||
* Thu Jun 19 2014 Ryan O'Hara <rohara@redhat.com> - 1.5.0-2
|
||||
- Build with zlib and openssl support
|
||||
|
||||
* Thu Jun 19 2014 Ryan O'Hara <rohara@redhat.com> - 1.5.0-1
|
||||
- Update to 1.5.0
|
||||
|
||||
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.25-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
|
||||
|
||||
* Thu Mar 27 2014 Ryan O'Hara <rohara@redhat.com> - 1.4.25-1
|
||||
- Update to 1.4.25
|
||||
|
||||
* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.24-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
|
||||
|
||||
* Mon Jun 17 2013 Ryan O'Hara <rohara@redhat.com> - 1.4.24-1
|
||||
- Update to 1.4.24 (CVE-2013-2174, #975160)
|
||||
|
||||
* Tue Apr 30 2013 Ryan O'Hara <rohara@redhat.com> - 1.4.23-3
|
||||
- Build with PIE flags (#955182)
|
||||
|
||||
* Mon Apr 22 2013 Ryan O'Hara <rohara@redhat.com> - 1.4.23-2
|
||||
- Build with PIE flags (#955182)
|
||||
|
||||
* Tue Apr 02 2013 Ryan O'Hara <rohara@redhat.com> - 1.4.23-1
|
||||
- Update to 1.4.23 (CVE-2013-1912, #947697)
|
||||
- Drop supplementary groups after setuid/setgid (#894626)
|
||||
|
||||
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.22-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
|
||||
|
||||
* Fri Oct 12 2012 Robin Lee <cheeselee@fedoraproject.org> - 1.4.22-1
|
||||
- Update to 1.4.22 (CVE-2012-2942, #824544)
|
||||
- Use linux2628 build target
|
||||
- No separate x86_64 build target for halog
|
||||
- halog build honors rpmbuild optflags
|
||||
- Specfile cleanup
|
||||
|
||||
* Mon Sep 17 2012 Václav Pavlín <vpavlin@redhat.com> - 1.4.20-3
|
||||
- Scriptlets replaced with new systemd macros (#850143)
|
||||
|
||||
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.20-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
|
||||
|
||||
* Tue Apr 03 2012 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.4.20-1
|
||||
- Update to 1.4.20
|
||||
|
||||
* Sun Feb 19 2012 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.4.19-4
|
||||
- fix haproxy.services file
|
||||
|
||||
* Sun Feb 19 2012 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.4.19-3
|
||||
- Update to use systemd fixing bug #770305
|
||||
|
||||
* Fri Feb 10 2012 Petr Pisar <ppisar@redhat.com> - 1.4.19-2
|
||||
- Rebuild against PCRE 8.30
|
||||
|
||||
* Sun Jan 29 2012 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.4.19-1
|
||||
- Update to 1.4.19
|
||||
|
||||
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.18-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
|
||||
|
||||
* Thu Sep 22 2011 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.4.18-1
|
||||
- Update to 1.4.18
|
||||
|
||||
* Tue Apr 26 2011 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.4.15-1
|
||||
- Update to 1.4.15
|
||||
|
||||
* Sun Feb 27 2011 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.4.11-1
|
||||
- update to 1.4.11
|
||||
|
||||
* Wed Feb 09 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.8-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
|
||||
|
||||
* Sun Dec 12 2010 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.4.9-1
|
||||
- update to 1.4.9
|
||||
|
||||
* Sun Jun 20 2010 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.4.8-1
|
||||
- update to 1.4.8
|
||||
|
||||
* Sun May 30 2010 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.4.6-1
|
||||
- update to 1.4.6
|
||||
|
||||
* Thu Feb 18 2010 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.23-1
|
||||
- update to 1.3.23
|
||||
|
||||
* Sat Oct 17 2009 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.22-1
|
||||
- update to 1.3.22
|
||||
- added logrotate configuration
|
||||
|
||||
* Mon Oct 12 2009 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.21-1
|
||||
- update to 1.3.21
|
||||
|
||||
* Sun Oct 11 2009 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.20-1
|
||||
- update to 1.3.20
|
||||
|
||||
* Sun Aug 02 2009 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.19-1
|
||||
- update to 1.3.19
|
||||
|
||||
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.18-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
|
||||
|
||||
* Sun May 17 2009 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.18-1
|
||||
- update to 1.3.18
|
||||
|
||||
* Sat Apr 11 2009 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.17-1
|
||||
- Update to 1.3.17
|
||||
|
||||
* Tue Feb 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.15.7-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
|
||||
|
||||
* Tue Dec 30 2008 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.15.7-1
|
||||
- update to 1.3.15.7
|
||||
- remove upstream patches, they are now part of source distribution
|
||||
|
||||
* Sat Nov 22 2008 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.15.6-2
|
||||
- apply upstream patches
|
||||
|
||||
* Sat Nov 15 2008 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.15.6-1
|
||||
- update to 1.3.15.6
|
||||
- use new build targets from upstream
|
||||
- add in recommended build options for x86 from upstream
|
||||
|
||||
* Sat Jun 28 2008 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.14.6-1
|
||||
- update to 1.3.14.6
|
||||
- remove gcc 4.3 patch, it has been applied upstream
|
||||
- remove MIT license as that code has been removed from upstream
|
||||
|
||||
* Mon Apr 14 2008 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.14.4-1
|
||||
- update to 1.3.14.4
|
||||
|
||||
* Sun Mar 16 2008 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.14.3-1
|
||||
- update to 1.3.14.3
|
||||
|
||||
* Sat Mar 01 2008 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.14.2-4
|
||||
- apply the gcc 4.3 patch to the build process
|
||||
|
||||
* Sat Mar 01 2008 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.14.2-3
|
||||
- fix gcc 4.3 bug [#434144]
|
||||
- update init script to properly reload configuration
|
||||
|
||||
* Tue Feb 19 2008 Fedora Release Engineering <rel-eng@fedoraproject.org> - 1.3.14.2-2
|
||||
- Autorebuild for GCC 4.3
|
||||
|
||||
* Sun Jan 20 2008 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.14.2-1
|
||||
- update to 1.3.14.2
|
||||
- update make flags that changed with this upstream release
|
||||
- added man page installation
|
||||
|
||||
* Sun Dec 16 2007 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.14-1
|
||||
- update to 1.3.14
|
||||
|
||||
* Mon Nov 05 2007 Jeremy Hinegardner <jeremy@hinegardner.org> - 1.3.12.4-1
|
||||
- update to 1.3.12.4
|
||||
|
||||
* Thu Nov 01 2007 Jeremy Hinegardner <jeremy@hinegardner.org> - 1.3.12.3-1
|
||||
- update to 1.3.12.3
|
||||
|
||||
* Fri Sep 21 2007 Jeremy Hinegardner <jeremy@hinegardner.org> - 1.3.12.2-3
|
||||
- fix init script 'reload' task
|
||||
|
||||
* Thu Sep 20 2007 Jeremy Hinegardner <jeremy@hinegardner.org> - 1.3.12.2-2
|
||||
- update License field
|
||||
|
||||
* Thu Sep 20 2007 Jeremy Hinegardner <jeremy@hinegardner.org> - 1.3.12.2-1
|
||||
- update to 1.3.12.2
|
||||
- remove the upstream patch
|
||||
|
||||
* Tue Sep 18 2007 Jeremy Hinegardner <jeremy@hinegardner.org> - 1.3.12.1-1
|
||||
- switch to 1.3.12.1 branch
|
||||
- add patch from upstream with O'Reilly licensing updates.
|
||||
- convert ISO-8859-1 doc files to UTF-8
|
||||
|
||||
* Sat Mar 24 2007 Jeremy Hinegardner <jeremy@hinegardner.org> - 1.2.17-2
|
||||
- addition of haproxy user
|
||||
- add license information
|
||||
|
||||
* Fri Mar 23 2007 Jeremy Hinegardner <jeremy@hinegardner.org> - 1.2.17-1
|
||||
- initial packaging
|
||||
4
haproxy.sysconfig
Normal file
4
haproxy.sysconfig
Normal file
@ -0,0 +1,4 @@
|
||||
# Add extra options to the haproxy daemon here. This can be useful for
|
||||
# specifying multiple configuration files with multiple -f options.
|
||||
# See haproxy(1) for a complete list of options.
|
||||
OPTIONS=""
|
||||
45
rhbz1838319-mworker-fix-again-copy_argv.patch
Normal file
45
rhbz1838319-mworker-fix-again-copy_argv.patch
Normal file
@ -0,0 +1,45 @@
|
||||
From 58b3d8676bbef52bc76dd79ecfcf74582c34ec97 Mon Sep 17 00:00:00 2001
|
||||
From: William Lallemand <wlallemand@haproxy.org>
|
||||
Date: Thu, 17 Dec 2020 18:48:06 +0100
|
||||
Subject: [PATCH] BUG/MEDIUM: mworker: fix again copy_argv()
|
||||
|
||||
When backporting patch df6c5a8 ("BUG/MEDIUM: mworker: fix the copy of
|
||||
options in copy_argv()") part of the patch was removed by mistake.
|
||||
Letting the bug #644 unfixed.
|
||||
|
||||
This patch fixes the problem by reintroducing the missing part.
|
||||
|
||||
1.8 only, no backport needed.
|
||||
---
|
||||
src/haproxy.c | 15 +++++++++++++++
|
||||
1 file changed, 15 insertions(+)
|
||||
|
||||
diff --git a/src/haproxy.c b/src/haproxy.c
|
||||
index 5ddf4d05..3947505b 100644
|
||||
--- a/src/haproxy.c
|
||||
+++ b/src/haproxy.c
|
||||
@@ -1328,6 +1328,21 @@ static char **copy_argv(int argc, char **argv)
|
||||
}
|
||||
break;
|
||||
|
||||
+ case 'C':
|
||||
+ case 'n':
|
||||
+ case 'm':
|
||||
+ case 'N':
|
||||
+ case 'L':
|
||||
+ case 'f':
|
||||
+ case 'p':
|
||||
+ /* these options have only 1 parameter which must be copied and can start with a '-' */
|
||||
+ *newargv++ = *argv++;
|
||||
+ argc--;
|
||||
+ if (argc == 0)
|
||||
+ goto error;
|
||||
+ *newargv++ = *argv++;
|
||||
+ argc--;
|
||||
+ break;
|
||||
default:
|
||||
/* for other options just copy them without parameters, this is also done
|
||||
* for options like "--foo", but this will fail in the argument parser.
|
||||
--
|
||||
2.26.2
|
||||
|
||||
25
rhbz1941446-fix-short-http-responses.patch
Normal file
25
rhbz1941446-fix-short-http-responses.patch
Normal file
@ -0,0 +1,25 @@
|
||||
From eaf1d768085a924a5322cfc77439ba5a4945bbae Mon Sep 17 00:00:00 2001
|
||||
From: Ryan O'Hara <rohara@redhat.com>
|
||||
Date: Thu, 14 Oct 2021 14:08:39 -0500
|
||||
Subject: [PATCH] Fix short HTTP responses to client
|
||||
|
||||
---
|
||||
src/raw_sock.c | 2 +-
|
||||
1 file changed, 1 insertion(+), 1 deletion(-)
|
||||
|
||||
diff --git a/src/raw_sock.c b/src/raw_sock.c
|
||||
index ad0210105..fbf20ae35 100644
|
||||
--- a/src/raw_sock.c
|
||||
+++ b/src/raw_sock.c
|
||||
@@ -302,7 +302,7 @@ static int raw_sock_to_buf(struct connection *conn, struct buffer *buf, int coun
|
||||
if (ret > 0) {
|
||||
buf->i += ret;
|
||||
done += ret;
|
||||
- if (ret < try) {
|
||||
+ if (0 && ret < try) {
|
||||
/* unfortunately, on level-triggered events, POLL_HUP
|
||||
* is generally delivered AFTER the system buffer is
|
||||
* empty, unless the poller supports POLL_RDHUP. If
|
||||
--
|
||||
2.31.1
|
||||
|
||||
Loading…
Reference in New Issue
Block a user