William Lallemand b5f23c7f3f MEDIUM: ssl: set FIPS-approved curve defaults for AWS-LC FIPS builds ... When AWS-LC is built in FIPS mode, unconditionally override the compile-time curve defaults with the FIPS-approved NIST P-curves before config parsing. Explicit ssl-default-{bind,server}-curves keywords in the global section still take precedence over these defaults. The approved set is defined as macros in include/haproxy/defaults.h alongside the existing CONNECT/LISTEN_DEFAULT_FIPS_CIPHERS family: CONNECT/LISTEN_DEFAULT_FIPS_CURVES - P-256, P-384, P-521 This ensures that internal servers (httpclient, Lua SSL sockets) that inherit global defaults also operate with FIPS-compliant curve lists without requiring explicit configuration.		2026-06-30 13:57:11 +00:00
..
haproxy	MEDIUM: ssl: set FIPS-approved curve defaults for AWS-LC FIPS builds	2026-06-30 13:57:11 +00:00
import	MINOR: mjson: reintroduce mjson_next()	2026-04-14 10:57:21 +02:00
make	BUILD: makefile: add a qinfo macro to pass info in quiet mode	2025-01-08 11:26:05 +01:00