Skip to content

v3.2.5

Choose a tag to compare

View all tags
@github-actions github-actions released this 14 Oct 14:12
· 54 commits to main since this release
v3.2.5
This tag was signed with the committer’s verified signature.
robvanoostenrijk Rob van Oostenrijk
SSH Key Fingerprint: DH7FqN3JMiZn/nn/Jf01hiCjJqZL9Cz5XfA4rNDzcnE
Verified
Learn about vigilant mode.
47e18e1
This commit was signed with the committer’s verified signature.
robvanoostenrijk Rob van Oostenrijk
SSH Key Fingerprint: DH7FqN3JMiZn/nn/Jf01hiCjJqZL9Cz5XfA4rNDzcnE
Verified
Learn about vigilant mode.

aws-lc v1.62.0

Versions:

  • haproxy-aws-lc

    Version information 
     HAProxy version 3.2.5-http3-aws-lc 2025/09/23 - https://haproxy.org/
 Status: long-term supported branch - will stop receiving fixes around Q2 2030.
 Known bugs: http://www.haproxy.org/bugs/bugs-3.2.5.html
 Running on: Linux 6.11.0-1018-azure #18~24.04.1-Ubuntu SMP Sat Jun 28 04:46:03 UTC 2025 aarch64
 Build options : 
   TARGET  = linux-musl
   CC      = clang
   CFLAGS  = -O2 -g -fwrapv
   OPTIONS = USE_THREAD=1 USE_LIBCRYPT=1 USE_GETADDRINFO=1 USE_OPENSSL=1 USE_OPENSSL_AWSLC=1 USE_LUA=1 USE_CPU_AFFINITY=1 USE_TFO=1 USE_NS=1 USE_QUIC=1 USE_PCRE2=1 USE_PCRE2_JIT=1
   DEBUG   = 
 
 Feature list : -51DEGREES +ACCEPT4 +BACKTRACE -CLOSEFROM +CPU_AFFINITY +CRYPT_H -DEVICEATLAS +DL -ENGINE +EPOLL -EVPORTS +GETADDRINFO -KQUEUE -LIBATOMIC +LIBCRYPT +LINUX_CAP +LINUX_SPLICE +LINUX_TPROXY +LUA +MATH -MEMORY_PROFILING +NETFILTER +NS -OBSOLETE_LINKER +OPENSSL +OPENSSL_AWSLC -OPENSSL_WOLFSSL -OT -PCRE +PCRE2 +PCRE2_JIT -PCRE_JIT +POLL +PRCTL -PROCCTL -PROMEX -PTHREAD_EMULATION +QUIC -QUIC_OPENSSL_COMPAT +RT +SLZ +SSL -STATIC_PCRE -STATIC_PCRE2 +TFO +THREAD +THREAD_DUMP +TPROXY -WURFL -ZLIB +ACME
 
 Default settings :
   bufsize = 16384, maxrewrite = 1024, maxpollevents = 200
 
 Built with multi-threading support (MAX_TGROUPS=32, MAX_THREADS=1024, default=4).
 Built with SSL library version : OpenSSL 1.1.1 (compatible; AWS-LC 1.62.0)
 Running on SSL library version : AWS-LC 1.62.0
 SSL library supports TLS extensions : yes
 SSL library supports SNI : yes
 SSL library FIPS mode : no
 SSL library supports : TLSv1.0 TLSv1.1 TLSv1.2 TLSv1.3
 QUIC: connection socket-owner mode support : yes
 QUIC: GSO emission support : yes
 Built with Lua version : Lua 5.4.8
 Built with network namespace support.
 Built with libslz for stateless compression.
 Compression algorithms supported : identity("identity"), deflate("deflate"), raw-deflate("deflate"), gzip("gzip")
 Built with transparent proxy support using: IP_TRANSPARENT IPV6_TRANSPARENT IP_FREEBIND
 Built with PCRE2 version : 10.46 2025-08-27
 PCRE2 library supports JIT : yes
 Encrypted password support via crypt(3): yes
 Built with clang compiler version 21.1.2 
 
 Available polling systems :
       epoll : pref=300,  test result OK
        poll : pref=200,  test result OK
      select : pref=150,  test result OK
 Total: 3 (3 usable), will use epoll.
 
 Available multiplexer protocols :
 (protocols marked as <default> cannot be specified using 'proto' keyword)
        quic : mode=HTTP  side=FE     mux=QUIC  flags=HTX|NO_UPG|FRAMED
          h2 : mode=HTTP  side=FE|BE  mux=H2    flags=HTX|HOL_RISK|NO_UPG
          h1 : mode=HTTP  side=FE|BE  mux=H1    flags=HTX|NO_UPG
   <default> : mode=HTTP  side=FE|BE  mux=H1    flags=HTX
        fcgi : mode=HTTP  side=BE     mux=FCGI  flags=HTX|HOL_RISK|NO_UPG
        spop : mode=SPOP  side=BE     mux=SPOP  flags=HOL_RISK|NO_UPG
   <default> : mode=SPOP  side=BE     mux=SPOP  flags=HOL_RISK|NO_UPG
        none : mode=TCP   side=FE|BE  mux=PASS  flags=NO_UPG
   <default> : mode=TCP   side=FE|BE  mux=PASS  flags=
 
 Available services : none
 
 Available filters :
 	[BWLIM] bwlim-in
 	[BWLIM] bwlim-out
 	[CACHE] cache
 	[COMP] compression
 	[FCGI] fcgi-app
 	[SPOE] spoe
 	[TRACE] trace

  • haproxy-libressl

    Version information 
     HAProxy version 3.2.5-http3-libressl 2025/09/23 - https://haproxy.org/
 Status: long-term supported branch - will stop receiving fixes around Q2 2030.
 Known bugs: http://www.haproxy.org/bugs/bugs-3.2.5.html
 Running on: Linux 6.11.0-1018-azure #18~24.04.1-Ubuntu SMP Sat Jun 28 04:46:03 UTC 2025 aarch64
 Build options : 
   TARGET  = linux-musl
   CC      = clang
   CFLAGS  = -O2 -g -fwrapv
   OPTIONS = USE_THREAD=1 USE_LIBCRYPT=1 USE_GETADDRINFO=1 USE_OPENSSL=1 USE_LUA=1 USE_CPU_AFFINITY=1 USE_TFO=1 USE_NS=1 USE_QUIC=1 USE_PCRE2=1 USE_PCRE2_JIT=1
   DEBUG   = 
 
 Feature list : -51DEGREES +ACCEPT4 +BACKTRACE -CLOSEFROM +CPU_AFFINITY +CRYPT_H -DEVICEATLAS +DL -ENGINE +EPOLL -EVPORTS +GETADDRINFO -KQUEUE -LIBATOMIC +LIBCRYPT +LINUX_CAP +LINUX_SPLICE +LINUX_TPROXY +LUA +MATH -MEMORY_PROFILING +NETFILTER +NS -OBSOLETE_LINKER +OPENSSL -OPENSSL_AWSLC -OPENSSL_WOLFSSL -OT -PCRE +PCRE2 +PCRE2_JIT -PCRE_JIT +POLL +PRCTL -PROCCTL -PROMEX -PTHREAD_EMULATION +QUIC -QUIC_OPENSSL_COMPAT +RT +SLZ +SSL -STATIC_PCRE -STATIC_PCRE2 +TFO +THREAD +THREAD_DUMP +TPROXY -WURFL -ZLIB
 
 Default settings :
   bufsize = 16384, maxrewrite = 1024, maxpollevents = 200
 
 Built with multi-threading support (MAX_TGROUPS=32, MAX_THREADS=1024, default=4).
 Built with SSL library version : LibreSSL 4.1.1
 Running on SSL library version : LibreSSL 4.1.1
 SSL library supports TLS extensions : yes
 SSL library supports SNI : yes
 SSL library FIPS mode : no
 SSL library supports : TLSv1.0 TLSv1.1 TLSv1.2 TLSv1.3
 QUIC: connection socket-owner mode support : yes
 QUIC: GSO emission support : yes
 Built with Lua version : Lua 5.4.8
 Built with network namespace support.
 Built with libslz for stateless compression.
 Compression algorithms supported : identity("identity"), deflate("deflate"), raw-deflate("deflate"), gzip("gzip")
 Built with transparent proxy support using: IP_TRANSPARENT IPV6_TRANSPARENT IP_FREEBIND
 Built with PCRE2 version : 10.46 2025-08-27
 PCRE2 library supports JIT : yes
 Encrypted password support via crypt(3): yes
 Built with clang compiler version 21.1.2 
 
 Available polling systems :
       epoll : pref=300,  test result OK
        poll : pref=200,  test result OK
      select : pref=150,  test result OK
 Total: 3 (3 usable), will use epoll.
 
 Available multiplexer protocols :
 (protocols marked as <default> cannot be specified using 'proto' keyword)
        quic : mode=HTTP  side=FE     mux=QUIC  flags=HTX|NO_UPG|FRAMED
          h2 : mode=HTTP  side=FE|BE  mux=H2    flags=HTX|HOL_RISK|NO_UPG
          h1 : mode=HTTP  side=FE|BE  mux=H1    flags=HTX|NO_UPG
   <default> : mode=HTTP  side=FE|BE  mux=H1    flags=HTX
        fcgi : mode=HTTP  side=BE     mux=FCGI  flags=HTX|HOL_RISK|NO_UPG
        spop : mode=SPOP  side=BE     mux=SPOP  flags=HOL_RISK|NO_UPG
   <default> : mode=SPOP  side=BE     mux=SPOP  flags=HOL_RISK|NO_UPG
        none : mode=TCP   side=FE|BE  mux=PASS  flags=NO_UPG
   <default> : mode=TCP   side=FE|BE  mux=PASS  flags=
 
 Available services : none
 
 Available filters :
 	[BWLIM] bwlim-in
 	[BWLIM] bwlim-out
 	[CACHE] cache
 	[COMP] compression
 	[FCGI] fcgi-app
 	[SPOE] spoe
 	[TRACE] trace

  • haproxy-openssl

    Version information 
     HAProxy version 3.2.5-http3-openssl 2025/09/23 - https://haproxy.org/
 Status: long-term supported branch - will stop receiving fixes around Q2 2030.
 Known bugs: http://www.haproxy.org/bugs/bugs-3.2.5.html
 Running on: Linux 6.11.0-1018-azure #18~24.04.1-Ubuntu SMP Sat Jun 28 04:46:03 UTC 2025 aarch64
 Build options : 
   TARGET  = linux-musl
   CC      = clang
   CFLAGS  = -O2 -g -fwrapv
   OPTIONS = USE_THREAD=1 USE_LIBCRYPT=1 USE_GETADDRINFO=1 USE_OPENSSL=1 USE_LUA=1 USE_CPU_AFFINITY=1 USE_TFO=1 USE_NS=1 USE_QUIC=1 USE_PCRE2=1 USE_PCRE2_JIT=1 USE_QUIC_OPENSSL_COMPAT=1
   DEBUG   = 
 
 Feature list : -51DEGREES +ACCEPT4 +BACKTRACE -CLOSEFROM +CPU_AFFINITY +CRYPT_H -DEVICEATLAS +DL -ENGINE +EPOLL -EVPORTS +GETADDRINFO -KQUEUE -LIBATOMIC +LIBCRYPT +LINUX_CAP +LINUX_SPLICE +LINUX_TPROXY +LUA +MATH -MEMORY_PROFILING +NETFILTER +NS -OBSOLETE_LINKER +OPENSSL -OPENSSL_AWSLC -OPENSSL_WOLFSSL -OT -PCRE +PCRE2 +PCRE2_JIT -PCRE_JIT +POLL +PRCTL -PROCCTL -PROMEX -PTHREAD_EMULATION +QUIC +QUIC_OPENSSL_COMPAT +RT +SLZ +SSL -STATIC_PCRE -STATIC_PCRE2 +TFO +THREAD +THREAD_DUMP +TPROXY -WURFL -ZLIB +ACME
 
 Default settings :
   bufsize = 16384, maxrewrite = 1024, maxpollevents = 200
 
 Built with multi-threading support (MAX_TGROUPS=32, MAX_THREADS=1024, default=4).
 Built with SSL library version : OpenSSL 3.6.0 1 Oct 2025
 Running on SSL library version : OpenSSL 3.6.0 1 Oct 2025
 SSL library supports TLS extensions : yes
 SSL library supports SNI : yes
 SSL library supports : TLSv1.0 TLSv1.1 TLSv1.2 TLSv1.3
 OpenSSL providers loaded : default
 QUIC: connection socket-owner mode support : yes
 QUIC: GSO emission support : yes
 Built with Lua version : Lua 5.4.8
 Built with network namespace support.
 Built with libslz for stateless compression.
 Compression algorithms supported : identity("identity"), deflate("deflate"), raw-deflate("deflate"), gzip("gzip")
 Built with transparent proxy support using: IP_TRANSPARENT IPV6_TRANSPARENT IP_FREEBIND
 Built with PCRE2 version : 10.46 2025-08-27
 PCRE2 library supports JIT : yes
 Encrypted password support via crypt(3): yes
 Built with clang compiler version 21.1.2 
 
 Available polling systems :
       epoll : pref=300,  test result OK
        poll : pref=200,  test result OK
      select : pref=150,  test result OK
 Total: 3 (3 usable), will use epoll.
 
 Available multiplexer protocols :
 (protocols marked as <default> cannot be specified using 'proto' keyword)
        quic : mode=HTTP  side=FE     mux=QUIC  flags=HTX|NO_UPG|FRAMED
          h2 : mode=HTTP  side=FE|BE  mux=H2    flags=HTX|HOL_RISK|NO_UPG
          h1 : mode=HTTP  side=FE|BE  mux=H1    flags=HTX|NO_UPG
   <default> : mode=HTTP  side=FE|BE  mux=H1    flags=HTX
        fcgi : mode=HTTP  side=BE     mux=FCGI  flags=HTX|HOL_RISK|NO_UPG
        spop : mode=SPOP  side=BE     mux=SPOP  flags=HOL_RISK|NO_UPG
   <default> : mode=SPOP  side=BE     mux=SPOP  flags=HOL_RISK|NO_UPG
        none : mode=TCP   side=FE|BE  mux=PASS  flags=NO_UPG
   <default> : mode=TCP   side=FE|BE  mux=PASS  flags=
 
 Available services : none
 
 Available filters :
 	[BWLIM] bwlim-in
 	[BWLIM] bwlim-out
 	[CACHE] cache
 	[COMP] compression
 	[FCGI] fcgi-app
 	[SPOE] spoe
 	[TRACE] trace

  • haproxy-wolfssl

    Version information 
     HAProxy version 3.2.5-http3-wolfssl 2025/09/23 - https://haproxy.org/
 Status: long-term supported branch - will stop receiving fixes around Q2 2030.
 Known bugs: http://www.haproxy.org/bugs/bugs-3.2.5.html
 Running on: Linux 6.11.0-1018-azure #18~24.04.1-Ubuntu SMP Sat Jun 28 04:46:03 UTC 2025 aarch64
 Build options : 
   TARGET  = linux-musl
   CC      = clang
   CFLAGS  = -O2 -g -fwrapv
   OPTIONS = USE_THREAD=1 USE_LIBCRYPT=1 USE_GETADDRINFO=1 USE_OPENSSL=1 USE_OPENSSL_WOLFSSL=1 USE_LUA=1 USE_CPU_AFFINITY=1 USE_TFO=1 USE_NS=1 USE_QUIC=1 USE_PCRE2=1 USE_PCRE2_JIT=1
   DEBUG   = 
 
 Feature list : -51DEGREES +ACCEPT4 +BACKTRACE -CLOSEFROM +CPU_AFFINITY +CRYPT_H -DEVICEATLAS +DL -ENGINE +EPOLL -EVPORTS +GETADDRINFO -KQUEUE -LIBATOMIC +LIBCRYPT +LINUX_CAP +LINUX_SPLICE +LINUX_TPROXY +LUA +MATH -MEMORY_PROFILING +NETFILTER +NS -OBSOLETE_LINKER +OPENSSL -OPENSSL_AWSLC +OPENSSL_WOLFSSL -OT -PCRE +PCRE2 +PCRE2_JIT -PCRE_JIT +POLL +PRCTL -PROCCTL -PROMEX -PTHREAD_EMULATION +QUIC -QUIC_OPENSSL_COMPAT +RT +SLZ +SSL -STATIC_PCRE -STATIC_PCRE2 +TFO +THREAD +THREAD_DUMP +TPROXY -WURFL -ZLIB
 
 Default settings :
   bufsize = 16384, maxrewrite = 1024, maxpollevents = 200
 
 Built with multi-threading support (MAX_TGROUPS=32, MAX_THREADS=1024, default=4).
 Built with SSL library version : wolfSSL 5.8.2
 Running on SSL library version : wolfSSL 5.8.2
 SSL library supports TLS extensions : yes
 SSL library supports SNI : yes
 SSL library FIPS mode : no
 SSL library supports : SSLv3 TLSv1.0 TLSv1.1 TLSv1.2 TLSv1.3
 QUIC: connection socket-owner mode support : yes
 QUIC: GSO emission support : yes
 Built with Lua version : Lua 5.4.8
 Built with network namespace support.
 Built with libslz for stateless compression.
 Compression algorithms supported : identity("identity"), deflate("deflate"), raw-deflate("deflate"), gzip("gzip")
 Built with transparent proxy support using: IP_TRANSPARENT IPV6_TRANSPARENT IP_FREEBIND
 Built with PCRE2 version : 10.46 2025-08-27
 PCRE2 library supports JIT : yes
 Encrypted password support via crypt(3): yes
 Built with clang compiler version 21.1.2 
 
 Available polling systems :
       epoll : pref=300,  test result OK
        poll : pref=200,  test result OK
      select : pref=150,  test result OK
 Total: 3 (3 usable), will use epoll.
 
 Available multiplexer protocols :
 (protocols marked as <default> cannot be specified using 'proto' keyword)
        quic : mode=HTTP  side=FE     mux=QUIC  flags=HTX|NO_UPG|FRAMED
          h2 : mode=HTTP  side=FE|BE  mux=H2    flags=HTX|HOL_RISK|NO_UPG
          h1 : mode=HTTP  side=FE|BE  mux=H1    flags=HTX|NO_UPG
   <default> : mode=HTTP  side=FE|BE  mux=H1    flags=HTX
        fcgi : mode=HTTP  side=BE     mux=FCGI  flags=HTX|HOL_RISK|NO_UPG
        spop : mode=SPOP  side=BE     mux=SPOP  flags=HOL_RISK|NO_UPG
   <default> : mode=SPOP  side=BE     mux=SPOP  flags=HOL_RISK|NO_UPG
        none : mode=TCP   side=FE|BE  mux=PASS  flags=NO_UPG
   <default> : mode=TCP   side=FE|BE  mux=PASS  flags=
 
 Available services : none
 
 Available filters :
 	[BWLIM] bwlim-in
 	[BWLIM] bwlim-out
 	[CACHE] cache
 	[COMP] compression
 	[FCGI] fcgi-app
 	[SPOE] spoe
 	[TRACE] trace

SHA256 Checksums:

haproxy-aws-lc-linux-amd64.tar.xz: a3d98c589ef5430aeb19cbcf73a123f21f7cd0c4608ab77238d641d3507d13d3
haproxy-aws-lc-linux-arm64.tar.xz: ad6d55506289faeb4994e474a75314aa25d3d8239ee1eadb227d46296978443c

haproxy-libressl-linux-amd64.tar.xz: 0975654b6ef12f1a0ee8e3ebabb4f69d17a0e760daad09bd961821a3603fe0e1
haproxy-libressl-linux-arm64.tar.xz: 799e3f5231b78c277f98b604c509d875a3aab43ba42f579eb6cc72e18a656465

haproxy-openssl-linux-amd64.tar.xz: 18b1c9815534b5a167be60c34be7306f2abd60c902c266f7b564cdc97817d57e
haproxy-openssl-linux-arm64.tar.xz: 6c4df5f0a3d51faf628a0267855cf976d27c5ddcd4e2e9a02a903526e35fb086

haproxy-wolfssl-linux-amd64.tar.xz: ad192d482c9dc98c1590918164165f90bd14595dba202eefa75c804386a047ea
haproxy-wolfssl-linux-arm64.tar.xz: cd8f83224d8241e4bc502a36b90c17f4439691ee28cfb652c3ebae61d1ae09c6
Assets 10
Loading