Activity
From 2026-02-07 to 2026-02-13
Today
- GS 13:18 Lighttpd Bug #3299: Segfault with massive parallel HEAD request using curl and HTTP/2
- To get better debug info, have you tried installing the relevant @*dbgsym*@ packages from https://download.opensuse.org/repositories/home:/stbuehler:/lighttpd-1.4.x/Debian_13/amd64/
Have you been able to reproduce the issue when narro... - FL 09:21 Lighttpd Bug #3299 (New): Segfault with massive parallel HEAD request using curl and HTTP/2
- I'm getting sometimes segfaults testing data-URLs using HEAD with curl:
@curl -w "%{url}: %{http_code}\n" -X HEAD -s --parallel [more than 2000 urls]@
The URLs result in files on the harddisk, mapped by a lua-script using @mod_mag...
2026-02-11
- OT 12:58 Lighttpd Bug #3298: PROXY protocol v2: extforward.hap-PROXY-ssl-client-verify option has no effect
- I've created the issue at https://github.com/haproxy/haproxy/issues/3262.
Your suggestion - GS 11:14 Lighttpd Bug #3298: PROXY protocol v2: extforward.hap-PROXY-ssl-client-verify option has no effect
- I agree that @uint8_t verify[4]@ is more portable for standard C, though must be used in conjuction with lighttpd code which uses @memcmp()@ with the struct member @tlv_ssl->verify@.
I'll consider it, even though it differs from the HAP... - OT 10:52 Lighttpd Bug #3298: PROXY protocol v2: extforward.hap-PROXY-ssl-client-verify option has no effect
- I confirm that the @__attribute__((packed))@ or @__attribute__((__packed__))@ fixes the bug as well, at least on my setup (Debian Trixie on x86_64):
2026-02-09
- GS 04:13 Lighttpd Bug #3298: PROXY protocol v2: extforward.hap-PROXY-ssl-client-verify option has no effect
- The HAProxy source code contains in @include/haproxy/connection-t.h:@
2026-02-07
- GS 18:11 Lighttpd Bug #3298: PROXY protocol v2: extforward.hap-PROXY-ssl-client-verify option has no effect
- Thank you for digging into this.
I have not had the chance to look further this second, but did verify that lighttpd is following the HAProxy PROXY protocol as documented in https://www.haproxy.org/download/1.8/doc/proxy-protocol.txt ... - OT 15:15 Lighttpd Bug #3298 (New): PROXY protocol v2: extforward.hap-PROXY-ssl-client-verify option has no effect
- Reverse proxies, e.g. HAProxy, may send the PP2_TYPE_SSL structure with the result of verifying the TLS certificate of the remote peer.
This structure is declared in @mod_extforward.c@ as follows: