Changes since version 3.5-dev7 : Alex Szakaly (1): MEDIUM: ssl: add ocsp-update.timeout global option Amaury Denoyelle (3): BUG/MAJOR: mux_quic: fix leak on RESET_STREAM reception BUG/MEDIUM: mux_quic: activate timeout on FE init BUG/MAJOR: mux_quic: fix potential crash on RESET_STREAM receive Aurelien DARRAGON (2): BUG/MEDIUM: sink: reconnect attempt not working after session lasted more than ~25 days Revert "CLEANUP: proxy: mention that px->conn_retries isn't relevant in some cases" Christopher Faulet (73): BUG/MEDIUM: http-client: Don't use the httpclient context if it was released MINOR: http-client: Add an option to not stop the reception of the response BUG/MEDIUM: ssl/ocsp: Set HTTPCLIENT_O_RES_ACCUM option on the http-client BUG/MEDIUM: acme: Set HTTPCLIENT_O_RES_ACCUM option on the http-client MINOR: http-client: Add a function to notify some data were consumed BUG/MEDIUM: http-client/cli: Notify the http-client when the response is consumed MINOR: ssl/ocsp: Remove the useless res_payload callback of the http-client BUG/MINOR: ssl/ocsp: Report an error when an empty OCSP response is received BUG/MEDIUM: htx: Fix the position returned by htx_defrag() BUG/MINOR: tools: Don't try to anonymize a NULL string BUG/MAJOR: htx: Check the header/trailer length limits when one is updated MINOR: htx: Add macros for the header/trailer name and value max lengths BUG/MINOR: mux-h2: Reject trailers received on a tunneled stream MEDIUM: htx: Skip UNUSED blocs when getting previous,next and first blocks MEDIUM: htx/tree-wide: Remove tests on HTX_BLK_UNUSED when possible MEDIUM: htx: Insert headers and trailers before corresponding end-of block MINOR: htx: Add support for flags on HTX blocks MAJOR: htx: Use htx_set_eom() instead of setting HTX_FL_EOM by hand MAJOR: htx: Rename HTX_FL_EOM into HTX_FL_HAS_EOM MEDIUM: htx: Add HTX_BLK_FL_EOM flag and set it on last block of the message MINOR: compression: Rely on HTX block flags to detect the end of message MINOR: fcgi-app: Stop on last HTX block when getting the payload size MINOR: mux-h2: Use flags of HTX blocks to detect end of message during sending MINOR: mux-h1: Use flags of HTX blocks to detect end of message during sending MINOR: mux-fcgi: Use flags of HTX blocks to detect end of message during sending MEDIUM: h3: Use flags of HTX blocks to detect end of message during sending MINOR: stats-html: Detect a complete request by testing flags on the tail bloc MINOR: hlua: Use flags of HTX blocks to detect EOM from an HTTP applet MINOR: htx: Add function to know if the tail block carry EOM flag MAJOR: tree-wide: No longer use HTX_FL_HAS_EOM to detect end of message MAJOR: htx: Remove HTX_FL_HAS_EOM flag MEDIUM: mux-h2: Don't mix HTTP and tunneled data in the same buffer MEDIUM: htx: Harden HTX API to avoid invalid uses when EOM was reached MEDIUM: htx: Remove usless htx_is_unique_blk() function DOC: internals: Update the HTX API documentation MINOR: htx: Rename htx_has_eom() into htx_msg_ended() MINOR: htx: Add HTX_BLK_RAW_DATA block type MINOR: htx: Add the block type as argument of the data insertion functions MINOR: htx: Handle RAW_DATA blocks like DATA blocks in the HTX API MEDIUM: htx: Allow tunneled data to be added in a message already ended MINOR: mux-h1: Handle RAW_DATA blocks when sending data MINOR: mux-h2: Handle RAW_DATA blocks when sending data MEDIUM: mux-h1: Use RAW_DATA blocks to store tunneled data MEDIUM: mux-h2: Use RAW_DATA blocks to store tunneled data Revert "MEDIUM: mux-h2: Don't mix HTTP and tunneled data in the same buffer" MINOR: http-htx: Really test the EOM flag presence in internal.htx.has_eom MINOR: http-htx: Report the payload of RAW_DATA blocks in internal.htx_blk.data MINOR: mux-h1: Only handle RAW_DATA blocks when emitting tunneled data DOC: internals: Update the HTX API documentation for tunneled data REGTESTS: http-messaging: Add a test for the CONNECT tunnels BUG/MINOR: ssl: Fix possible null deref on the SSL context in ssl_sock_to_buf() BUG/MINOR: http-client: Convert server timeout ticks when setting it BUG/MEDIUM: h1-htx: Don't report EOM for H1 interim responses during parsing BUG/MINOR: mux-h2: Don't expect more HTX data on 1xx interim responses REG-TESTS: http-messaging: Add a script to test interim responses for H1/H2 BUG/MEDIUM: log: reserve the trailing 0 in CBOR int and bool encoders BUG/MEDIUM: http-htx: don't build the new authority in a rotating trash chunk BUG/MEDIUM: http-act: ignore "capture len" rules evaluated from a backend BUG/MEDIUM: tcp-rules: ignore "capture len" rules evaluated from a backend BUG/MINOR: http-ana: count response body failures only once in http_fail_cnt BUG/MINOR: http-fetch: http_auth_bearer() must not match a missing header BUG/MINOR: http-fetch: fix the space check of http_auth_bearer() BUG/MINOR: mux-h1: only mark C-L and T-E as sent once the header is emitted BUG/MINOR: tcpcheck: refresh the start-line after updating the authority CLEANUP: mux-h2: replace a non-UTF-8 character in a comment BUG/MINOR: http-ana: restore the transaction status after early hints REG-TESTS: http-messaging: Send one request per h2 client in h2_trailers.vtc BUG/MEDIUM: h3: Set FIN when last DATA block is sent via zero-copy BUG/MINOR: chunk: Allow large chunks uses from large const buffers MINOR: htx: Remove htx_move_blk_before() function BUG/MAJOR: mux-h2: Preserve raw data on aborted frontend tunnels BUG/MEDIUM: mux-h1: Don't subscribe for sends while output is blocked BUG/MINOR: mux-h1: Discard pending raw data after a tunnel rejection Emeric Brun (1): BUILD: haring: fix compile issue due to nop warning. Jérôme Billiras (1): BUG/MINOR: acme: exact domain match in acme_challenge_ready() M9nx (1): BUG/MINOR: hlua: release private Lua rule data on teardown Olivier Houchard (1): BUG/MEDIUM: task: Do not destroy a task that is not ours in task_destroy Turhan ACAR (1): BUG/MINOR: h2: reject :protocol pseudo-header in H2 responses William Lallemand (4): MINOR: ssl: cleanse TLS ticket keys before freeing BUG/MINOR: ssl: copy curves, sigalgs and client_sigalgs in srv_ssl_settings_cpy() BUG/MINOR: ssl: free curves, sigalgs and client_sigalgs in ssl_sock_free_srv_ctx() BUG/MINOR: ssl: free curves, sigalgs and client_sigalgs in srv_parse_*() Willy Tarreau (6): MINOR: init: also set the worker-id in file-less mode MINOR: log: pass the input end to the _lf_encode_bytes() byte encoders MINOR: log: add the +utf8 encoding option to let valid UTF-8 pass MINOR: stick-table: provide a function to estimate on-wire data size MINOR: stick-table: calculate the on-wire size of each key BUG/MEDIUM: stick-table: restrict key sizes to what fits in a buffer Yeonggi Kim (2): BUG/MEDIUM: server: skip log backend addr checks for internal proxies REGTESTS: log: check that a ring's internal server may target a UNIX socket