Lua task: [state-id 0] runtime error couldn’t start the httpclient from

Help!
1

Hi, I sometimes get this error, and I’m not sure if it’s a bug or if it’s been fixed. At my work, we have haproxy 2.6 running on Docker and a lua script to monitor server health. If the server goes down, an alert is sent. The problem is this:

[ALERT] (60) : httpclient: SSL was disabled (wrong verify/ca-file)!
[ALERT] (60) : httpclient: Failed to initialize appctx httpclient_start:560.
Lua task: [state-id 0] runtime error: /usr/local/etc/haproxy/srv-monitor.lua:2: couldn’t start the httpclient from [C]: in method ‘get’, /usr/local/etc/haproxy/srv-monitor.lua:2: in upvalue ‘send_request’, /usr/local/etc/haproxy/srv-monitor.lua:25: in function line 15.

This is my function:

local function send_request(url)
local res, err = core.httpclient():get(
{
url=url,
headers = { [“Content-Type”] = “text/html” }
}
)
if res.status ~= 200 then
local errorMsg = err or “Unkhown error”
core.Alert("Error sending alert: " .. errorMsg)
else
core.Alert(“Alert sent successfully”)
end
end

I have searched the issues and nothing, so far, I have searched in known bugs and I am not sure if this bug is the same one I am facing, so I am asking here to confirm if my bug is the same as the bug on the known bugs page https://git.haproxy.org/?p=haproxy-2.6.git;a=commitdiff;h=b1351c1

I need to know if is the same because i cant just change the image to another one, this is on production environment, so i need to change this with extremely cautious

2

The bug you mentioned seems to be related to what you are experiencing.

If you are on a release that old that makes you suspect that this a fix, you are probably running haproxy 2.6.6 or older.

From a haproxy perspective running 2.6.6 today means you are affected by 758 bugs (1 critical, 27 major, 231 medium as well as 499 minor bugs).

The critical bug is a vulnerability as per CVE-2023-25725.

The container dating this far back probably has a couple of critical CVE’s as well in kernel and libraries.

Running code that old is probably everything but cautious.