Haproxy OCSP stapling PfSense 2.5

sparklyballs · Feb 20, 2021, 9:11 PM

I recently upgraded to 2.5 from 2.4.5 via the update screen in the webui and I've been hit by this bug in haproxy that the following commit fixes.

https://github.com/pfsense/FreeBSD-ports/pull/1006

It says the PR is merged, should it be part of haproxy already, and because i've upgraded from 2.4.5 i've somehow not picked up the fix ?

Or will it be part of any version of haproxy (stable or dev) i can install from the package manager in Pfsense, and if not can i manually apply patch to temporarily fix in lieu of future version ?

PiBa · Feb 20, 2021, 9:11 PM

@sparklyballs
Which haproxy pfSense package do you have installed? the haproxy or haproxy-devel one.? I guess the first.. It looks like only the second got that patch sofar.
Not sure if you can 'apply' that patch as-is, but manually editing the file adding the 'missing' = sign should be easy enough as well..

sparklyballs · Feb 21, 2021, 1:30 AM

@piba

So after reading your comment, I installed the devel package and after working out the differences I needed to make that were version related, my OCSP stapling is now working again.

Thanks for the help.