Changes since version 3.5-dev8 : Amaury Denoyelle (9): BUG/MINOR: proxy: add PR_CAP_LB for dynamically added backend BUG/MINOR: server: fix "del server" description BUG/MINOR: cli: update wait help usage BUG/MEDIUM: server: remove immediately from GUID tree on delete server DOC: server: explicit refcount interaction in "del server" BUG/MINOR: hq-interop: prevent double EOM on request with standalone FIN BUG/MINOR: ssl: fix trace crash on FE conn release in io cb BUG/MINOR: ssl: fix trace crash on BE conn release in io cb BUG/MAJOR: mux-quic: prevent crash on QCS already set for purging Aurelien DARRAGON (6): BUG/MINOR: log: fix erroneous error message in log-steps parser MINOR: log: add "loggers" section MINOR: log: support 'to' parameter for "log" directive MINOR: log: support explicit list for do_log_ctx() MINOR: log: support 'to' parameter fo do-log action DOC: config: document new "loggers" section and relevant uses Frederic Lecaille (2): BUG/MEDIUM: ssl: crt-list ciphers ignored with AWS-LC BUG/MEDIUM: ssl: crt-list curves ignored with AWS-LC Olivier Houchard (13): CLEANUP: sym: move symbol resolution out of tools.c MINOR: sym: add an in-process symbol table for backtraces MINOR: sym: collect the symbols known to the dynamic linker MINOR: sym: add helpers to collect the symbols of an ELF image IMPORT: xz: import the xz-embedded decoder MEDIUM: sym: store a compressed symbol table in a loadable section MINOR: sym: read local symbols and debug info from ELF files MINOR: sym: also read the compressed symbol tables from the ELF files OPTIM: sym: skip the embedded table when the file provided the symbols MINOR: makefile: add CROSS_TOOLCHAIN to prefix the target's tools BUILD: Hopefully fix build on FreeBSD BUILD: sym: Define HA_HAVE_DL_ITERATE_PHDR on FreeBSD BUG/MEDIUM: listener: Consider maxconn before waking listeners Remi Tricot-Le Breton (8): MINOR: ocsp: Remove free of main structure from ssl_sock_free_ocsp_data MINOR: ocsp: Send OCSP response status back to caller MINOR: ocsp: Raise specific ocsp error code in ocsp parsing/verifying functions MINOR: ocsp: Dup OCSP_CERTID in ssl_ocsp_create_request_details MEDIUM: ocsp: Create new do-ocsp-request action MINOR: ocsl: Add 'inapplicable' return code to client certificate ocsp check DOC: ocsp: Add doc for the new 'do-ocsp-request' action REGTESTS: ocsp: Add 'do-ocsp-request' tests William Lallemand (16): BUILD: ssl: fix build without USE_OPENSSL + clear_ocsp_clt_check_ctx REGTESTS: cli: don't check the HAProxy string MINOR: ssl: support curve fetches with AWS-LC API 30 BUILD: ssl: avoid mixed declarations in the AWS-LC curve fetch CI: github: test AWS-LC 3.x and 4.x LTS branches CI: github: test the latest AWS-LC release on development branches CI: github: cache QuicTLS builds CI: github: move wolfSSL 5.7.0 testing to a nightly workflow BUG/MINOR: ssl: don't uppercase the native group name DOC: ssl: clarify the NID-based curve fetch branch BUG/MINOR: ssl: use standard names for X25519 and X448 groups MINOR: ssl: split curve names into ANSI, IANA and NIST columns MINOR: ssl: skip unavailable NIDs in curves2nid lookup MINOR: ssl: complete registered group names and library NID mappings MINOR: ssl: add curve2name converter MINOR: ssl: accept integer group IDs in curve2name Willy Tarreau (3): DEV: sse-latency: add a latency measuring tool for SSE response streams MINOR: http-ana: automatically enable http-no-delay for streaming events (SSE) DEBUG: support reading set-dumpable from HAPROXY_FORCE_DUMPABLE