tree dad0f5f0dd388d7fdab9b7ef443eb7fd92b809b1
parent 3c8cc275dd58df991bbe48a24ab403327588da56
author Willy Tarreau <w@1wt.eu> 1681893715 +0200
committer Christopher Faulet <cfaulet@haproxy.com> 1682090482 +0200

BUG/MINOR: cfgparse: make sure to include openssl-compat

Commit 5003ac7fe ("MEDIUM: config: set useful ALPN defaults for HTTPS
and QUIC") revealed a build dependency bug: if QUIC is not enabled,
cfgparse doesn't have any dependency on the SSL stack, so the various
ifdefs that try to check special conditions such as rejecting an H2
config with too small a bufsize, are silently ignored. This was
detected because the default ALPN string was not set and caused the
alpn regtest to fail without QUIC support. Adding openssl-compat to
the list of includes seems to be sufficient to have what we need.

It's unclear when this dependency was broken, it seems that even 2.2
didn't have an explicit dependency on anything SSL-related, though it
could have been inherited through other files (as happens with QUIC
here). It would be safe to backport it to all stable branches. The
impact is very low anyway.

(cherry picked from commit be336620b7cee3ebf06186352748e1ebac5830ae)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>
(cherry picked from commit 475c937035cb0389fddfb71aa3d13084f1823905)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>
(cherry picked from commit 58575b61909bb15b0ee6c8e073864a16ee5689ea)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>
(cherry picked from commit 71185bd003a1cccdfe5d189653404eeed9c9dd0f)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>