[Pkg-haproxy-maintainers] Certificate Transparency support: Backport to 1.5?

Apollon Oikonomopoulos apoikos at debian.org
Thu Aug 13 14:42:35 UTC 2015


Hi Georg,

On 16:24 Thu 13 Aug     , georg at riseup.net wrote:
> Hi all,
> 
> Posting to this mailinglist instead of opening a bug because wanted to
> first check out, if you would be willing and able to do this:
> 
> Certificate Transparency support was added to haproxy in March 2015; see
> the thread [1], the commit [2] and the release [3] for this.
> 
> Would it be possible to backport this to 1.5, to make it available via the
> repositories?

Thanks for reporting this. Unfortunately there are two issues at hand:

 - This is a new feature, which means that it will not meet the criteria 
   for inclusion into Jessie via a stable upload.

 - It requires OpenSSL 1.0.2 which is only available in 
   testing/unstable.

Thus said, if we do backport this, it will be done only for 
testing/unstable. OTOH, we are planning to upload 1.6 to experimental 
soon, which would allow full access to the latest features. Would you be 
willing to use 1.6 from experimental once uploaded or would you prefer a 
patched 1.5?

Regards,
Apollon



More information about the Pkg-haproxy-maintainers mailing list