• Icon: Bug Bug
    • Resolution: Can't Do
    • Icon: Undefined Undefined
    • None
    • rhel-8.9.0.z
    • haproxy
    • No
    • Important
    • rhel-sst-high-availability
    • 3
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • Unspecified
    • Unspecified
    • Unspecified
    • x86_64
    • None

      What were you trying to do that didn't work?

       

      From the customer:

      We installed haproxy-1.8.27-5.el8.x86_64 RPM with default build options which were missing "USE_HTTP" and "USE_SSL" because of which we are not able to send responses from HAProxy monitor-uri with HTTP/1.1 as haproxy is always responding back with HTTP/1.0 which some of our monitoring tools like Thousand Eyes are not honoring and rejecting the response with SSL READ error.

      What is the impact of this issue to you?

      Thousand Eyes test fails security checks.

      Please provide the package NVR for

      haproxy-1.8.27-5.el8.x86_64

      Expected results

       

      Have haproxy frontend respond with http/1.1.

      Actual results

       

      haproxy responds with http/1.0 and securit scanner test fails.

       

      We tried:
       
      bind 192.1.1.30:80 alpn h2,http/1.1 <------- Added here but no change in http/1.0 response
       
       

              rhn-engineering-oalbrigt Oyvind Albrigtsen
              rhn-support-jmaxwell Jonathan Maxwell
              Oyvind Albrigtsen Oyvind Albrigtsen
              Juraj Hrdlica Juraj Hrdlica
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: