Changes since version 2.2-dev7 : Adis Nezirovic (1): BUG/MEDIUM: lua: Fix dumping of stick table entries for STD_T_DICT Christopher Faulet (20): MINOR: checks: Improve report of unexpected errors for expect rules MEDIUM: checks: Add matching on log-format string for expect rules DOC: Fix req.body and co documentation to be accurate MEDIUM: checks: Remove dedicated sample fetches and use response ones instead CLEANUP: checks: sort and rename tcpcheck_expect_type types MINOR: checks: Use dedicated actions to send log-format strings in send rules MINOR: checks: Simplify matching on HTTP headers in HTTP expect rules MINOR: checks/sample: Remove unnecessary tests on the sample session REGTEST: checks: Adapt SSL error message reported when connection is rejected MINOR: checks: Support log-format string to set the URI for HTTP send rules MINOR: checks: Support log-format string to set the body for HTTP send rules DOC: Be more explicit about configurable check ok/error/timeout status MINOR: checks: Make matching on HTTP headers for expect rules less obscure BUG/MINOR: config: Make use_backend and use-server post-parsing less obscur BUG/MEDIUM: checks: Subscribe to I/O events on an unfinished connect BUG/MINOR: checks: Don't subscribe to I/O events if it is already done BUG/MINOR: checks: Rely on next I/O oriented rule when waiting for a connection MINOR: checks: Don't try to send outgoing data if waiting to be able to send BUG/MEDIUM: checks: Subscribe to I/O events only if a mux was installed BUG/MINOR: sample/ssl: Fix digest converter for openssl < 1.1.0 Dragan Dosen (4): MEDIUM: ssl: allow to register callbacks for SSL/TLS protocol messages MEDIUM: ssl: split ssl_sock_msgcbk() and use a new callback mechanism MINOR: ssl: add a new function ssl_sock_get_ssl_object() MEDIUM: ssl: use ssl_sock_get_ssl_object() in fetchers where appropriate Gilchrist Dadaglo (1): MAJOR: contrib: porting spoa_server to support python3 Ilya Shipitsin (7): CI: travis-ci: enable arm64 builds again CI: travis-ci: skip pcre2 on arm64 build CI: travis-ci: upgrade LibreSSL versions DOC: assorted typo fixes in the documentation CI: extend spellchecker whitelist CLEANUP: assorted typo fixes in the code and comments CLEANUP: acl: remove unused assignment Jerome Magnin (2): BUILD: select: only declare existing local labels to appease clang DOC: retry-on can only be used with mode http Marcin Deranek (3): MINOR: stats: Prepare for more accurate moving averages MINOR: stats: Expose native cum_req metric for a server MEDIUM: stats: Enable more accurate moving average calculation for stats Martin Tzvetanov Grigorov (1): CI: travis-ci: switch arm64 builds to use openssl from distro Olivier Houchard (2): BUG/MEDIUM: streams: Remove SF_ADDR_SET if we're retrying due to L7 retry. BUG/MEDIUM: stream: Only allow L7 retries when using HTTP. Patrick Gansterer (2): MINOR: sample: Move aes_gcm_dec implementation into sample.c MINOR: sample: Add digest and hmac converters Tim Duesterhus (2): BUG/MINOR: cfgparse: Abort parsing the current line if an invalid \x sequence is encountered MINOR: cfgparse: Improve error message for invalid \x sequences William Dauchy (3): BUG/MINOR: pollers: remove uneeded free in global init CLEANUP: select: enhance readability in init BUILD: ssl: include buffer common headers for ssl_sock_ctx William Lallemand (19): MINOR: mworker: replace ha_alert by ha_warning when exiting successfuly REORG: ssl: move macros and structure definitions to ssl_sock.h CLEANUP: ssl: remove the shsess_* macros REORG: move the crt-list structures in their own .h REORG: ssl: move the ckch structures to types/ssl_ckch.h CLEANUP: ssl: add ckch prototypes in proto/ssl_ckch.h REORG: ssl: move crtlist functions to src/ssl_crtlist.c CLEANUP: ssl: avoid circular dependencies in ssl_crtlist.h REORG: ssl: move the ckch_store related functions to src/ssl_ckch.c REORG: ssl: move ckch_inst functions to src/ssl_ckch.c REORG: ssl: move the crt-list CLI functions in src/ssl_crtlist.c REORG: ssl: move the CLI 'cert' functions to src/ssl_ckch.c REORG: ssl: move ssl configuration to cfgparse-ssl.c MINOR: ssl: remove static keyword in some SSL utility functions REORG: ssl: move ssl_sock_ctx and fix cross-dependencies issues REORG: ssl: move sample fetches to src/ssl_sample.c REORG: ssl: move utility functions to src/ssl_utils.c DOC: ssl: update MAINTAINERS file BUILD: ssl: include errno.h in ssl_crtlist.c Willy Tarreau (12): REGTESTS: make the http-check-send test require version 2.2 BUG/MINOR: http-ana: fix NTLM response parsing again BUG/MEDIUM: http_ana: make the detection of NTLM variants safer MEDIUM: ssl: increase default-dh-param to 2048 CI: travis-ci: extend the build time for SSL to 60 minutes CLEANUP: config: drop unused setting CONFIG_HAP_MEM_OPTIM CLEANUP: config: drop unused setting CONFIG_HAP_INLINE_FD_SET CLENAUP: config: move CONFIG_HAP_LOCKLESS_POOLS out of config.h CLEANUP: remove THREAD_LOCAL from config.h BUG/MINOR: pools: use %u not %d to report pool stats in "show pools" BUG/MINOR: soft-stop: always wake up waiting threads on stopping MINOR: soft-stop: let the first stopper only signal other threads