Wednesday, September 25, 2024

Re: UPDATE net/haproxy 3.0.5

On Wed, Sep 25, 2024 at 10:25:24PM GMT, Theo Buehler wrote:
> The patch was only needed while we had LibreSSL version number < 4.0.0.
> You can drop it now.

Completely missed the LibreSSL major bump.


diff refs/heads/master 0fb72d19a2cde4c8bb077b8ed252efb0fa2c1ff4
commit - f827ea88bac5095f5080effb6dd76d9793b28f1f
commit + 0fb72d19a2cde4c8bb077b8ed252efb0fa2c1ff4
blob - f8bba57c3e06bf6ddc6571815b7ec870cf358984
blob + 22c9f838ed5ac57344c3e0e78cc399311a97cfb3
--- net/haproxy/Makefile
+++ net/haproxy/Makefile
@@ -1,6 +1,6 @@
COMMENT = reliable, high performance TCP/HTTP load balancer

-DISTNAME = haproxy-3.0.4
+DISTNAME = haproxy-3.0.5
CATEGORIES = net www
HOMEPAGE = https://www.haproxy.org/
MAINTAINER = Lucas Gabriel Vuotto <lucas@sexy.is>
blob - af21fd7be05d0040d192e7eff202403963a826cf
blob + d0475928ad847d94980fab6a142dc907f25efcc0
--- net/haproxy/distinfo
+++ net/haproxy/distinfo
@@ -1,2 +1,2 @@
-SHA256 (haproxy-3.0.4.tar.gz) = qr/ZitpyG7+2j3gFWGztA3P7TI1z4Y+qlAVaFsIJaTY=
-SIZE (haproxy-3.0.4.tar.gz) = 4689835
+SHA256 (haproxy-3.0.5.tar.gz) = rjgiHoWuugOKcl7771v+XnZnG6eVnl63TDn9B55dAC4=
+SIZE (haproxy-3.0.5.tar.gz) = 4698022
blob - 3a3bb18aa12dd0433f376a4af1419356e5bf8a8c (mode 644)
blob + /dev/null
--- net/haproxy/patches/patch-include_haproxy_quic_tls_h
+++ /dev/null
@@ -1,15 +0,0 @@
-Enable ChaCha20-Poly1305. In-place decryption was fixed.
-https://github.com/haproxy/haproxy/issues/2569
-
-Index: include/haproxy/quic_tls.h
---- include/haproxy/quic_tls.h.orig
-+++ include/haproxy/quic_tls.h
-@@ -140,7 +140,7 @@ static inline const EVP_CIPHER *tls_aead(const SSL_CIP
- return EVP_aes_128_gcm();
- case TLS1_3_CK_AES_256_GCM_SHA384:
- return EVP_aes_256_gcm();
--#if !defined(OPENSSL_IS_AWSLC) && (!defined(LIBRESSL_VERSION_NUMBER) || LIBRESSL_VERSION_NUMBER >= 0x4000000fL)
-+#if !defined(OPENSSL_IS_AWSLC)
- /* WT: LibreSSL has an issue with CHACHA20 running in-place till 3.9.2
- * included, but the fix is already identified and will be merged
- * into next major version. Given that on machines without AES-NI

No comments:

Post a Comment