Bug #12692
closedHaproxy backend issue
0%
Description
https://forum.netgate.com/topic/168944/haproxy-backend-issue:
It seems that when not setting HSTS value to something, haproxy will not allow to save backend.
Results in:
The following input errors were detected:
The field 'Strict-Transport-Security' is not empty or a number.
But it`s incorrect as value IS empty.
Using haproxy-devel net 0.62_6
Related issues
Updated by Viktor Gurov about 3 years ago
- Related to Bug #10937: HAProxy frontend and backend entry limit added
Updated by Viktor Gurov about 3 years ago
Updated by Jim Pingle about 3 years ago
- Status changed from New to Pull Request Review
- Assignee set to Viktor Gurov
Updated by Viktor Gurov about 3 years ago
- Status changed from Pull Request Review to Feedback
Updated by Danilo Zrenjanin about 3 years ago
Tested against:
2.6.0-RC (amd64) built on Mon Jan 17 23:21:01 UTC 2022 FreeBSD 12.3-STABLE
HA proxy devel 0.62_7.
I am getting more than just one error after trying to save a backend:
The following input errors were detected: The field 'Check frequency' value is not a number. The field 'Connection timeout' value is not a number. The field 'Server timeout' value is not a number. The field 'Retries' value is not a number. The field 'Strict-Transport-Security' is not empty or a number.
All those fields should be using default values if nothing was defined. Please check.
Updated by Viktor Gurov about 3 years ago
Danilo Zrenjanin wrote in #note-5:
All those fields should be using default values if nothing was defined. Please check.
No such issue on pfSense 2.7.0.a.20220120.0600 with pfSense-pkg-haproxy-devel 0.62_8
Please check again
Updated by → luckman212 about 3 years ago
So just checking... the fix is only in pfSense 2.7 alpha? Not making it into 2.6 / 22.01 ?
Is there way to pull it in early via System Patches?
edit: I needed this now so I ended up just manually grabbing the raw php files and clobbering the existing ones
fetch https://raw.githubusercontent.com/pfsense/FreeBSD-ports/devel/net/pfSense-pkg-haproxy-devel/files/usr/local/www/haproxy/haproxy_listeners_edit.php fetch https://raw.githubusercontent.com/pfsense/FreeBSD-ports/devel/net/pfSense-pkg-haproxy-devel/files/usr/local/www/haproxy/haproxy_pool_edit.php mv -f haproxy* /usr/local/www/haproxy/
Updated by Marcos M about 3 years ago
- Status changed from Feedback to Resolved
After upgrading, I was able to correctly save the backend. Before, I was not able to save without the multiple input validation errors coming up.
Updated by Danilo Zrenjanin about 3 years ago
→ luckman212 wrote in #note-7:
So just checking... the fix is only in pfSense 2.7 alpha? Not making it into 2.6 / 22.01 ?
Is there way to pull it in early via System Patches?
edit: I needed this now so I ended up just manually grabbing the raw php files and clobbering the existing ones
[...]
I tested against:
2.6.0-RC (amd64) built on Mon Jan 24 18:44:12 UTC 2022 FreeBSD 12.3-STABLE
Everything works as expected.