From 1e2cd50fc9759d046ef16d8dd7ada263fe257078 Mon Sep 17 00:00:00 2001
From: neil <gitsrc@neilpang.com>
Date: Sun, 5 Jul 2026 15:44:12 +0800
Subject: [PATCH] deploy/haproxy: use printf instead of "echo -e" for the stats
 socket payload

dash's echo has no -e flag and sends a literal "-e " prefix to the
socket, so haproxy rejects the command and the hot update always fails
on Debian/Ubuntu (/bin/sh = dash). Also accept "Transaction updated",
which haproxy replies when an uncommitted transaction already exists.

fix https://github.com/acmesh-official/acme.sh/issues/6165
---
 deploy/haproxy.sh | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/deploy/haproxy.sh b/deploy/haproxy.sh
index 66a2e83e..9736e6ff 100644
--- a/deploy/haproxy.sh
+++ b/deploy/haproxy.sh
@@ -364,7 +364,9 @@ haproxy_deploy() {
         else
           _info "Update existing certificate '${_pem}' over HAProxy ${_socketname}."
         fi
-        _socat_cert_set_cmd="echo -e '${_cmdpfx}set ssl cert ${_pem} <<\n$(cat "${_pem}")\n' | socat '${_statssock}' - | grep -q 'Transaction created'"
+        # printf %b, not "echo -e": dash's echo has no -e and sends a literal "-e " to the socket.
+        # "Transaction updated" is replied instead of "created" when an uncommitted transaction exists.
+        _socat_cert_set_cmd="printf '%b\n' '${_cmdpfx}set ssl cert ${_pem} <<\n$(cat "${_pem}")\n' | socat '${_statssock}' - | grep -qE 'Transaction (created|updated)'"
         _secure_debug _socat_cert_set_cmd "${_socat_cert_set_cmd}"
         eval "${_socat_cert_set_cmd}"
         _ret=$?