Changes since version 3.0.8 : Amaury Denoyelle (9): BUG/MEDIUM: mux-quic: do not attach on already closed stream MINOR: mux-quic: change return value of qcs_attach_sc() BUG/MINOR: mux-quic: handle closure of uni-stream BUG/MINOR: quic: reserve length field for long header encoding BUG/MINOR: quic: fix CRYPTO payload size calcul for encoding BUG/MINOR: quic: prevent crash on conn access after MUX init failure BUG/MINOR: mux-quic: prevent crash after MUX init failure BUG/MINOR: h3: do not report transfer as aborted on preemptive response CLEANUP: h3: fix documentation of h3_rcv_buf() Aurelien DARRAGON (10): DOC: management: rename some last occurences from domain "dns" to "resolvers" BUG/MINOR: sink: add tempo between 2 connection attempts for sft servers MINOR: clock: always use atomic ops for global_now_ms CLEANUP: log: removing "log-balance" references BUG/MINOR: log: set proper smp size for balance log-hash BUG/MINOR: cfgparse/peers: fix inconsistent check for missing peer server BUG/MINOR: cfgparse/peers: properly handle ignored local peer case BUG/MINOR: server: dont return immediately from parse_server() when skipping checks MINOR: cfgparse/peers: provide more info when ignoring invalid "peer" or "server" lines BUG/MINOR: stats: fix capabilities and hide settings for some generic metrics Christopher Faulet (16): BUG/MINOR: spoe: Check the shared waiting queue to shut applets during stopping BUG/MINOR: spoe: Allow applet creation when closing the last one during stopping BUG/MEDIUM: spoe: Don't wakeup idle applets in loop during stopping REGTESTS: Fix truncated.vtc to send 0-CRLF BUG/MINOR: cli: Wait for the last ACK when FDs are xferred from the old worker BUG/MEDIUM: filters: Handle filters registered on data with no payload callback BUG/MINOR: fcgi: Don't set the status to 302 if it is already set BUG/MINOR: mux-h2: Properly handle full or truncated HTX messages on shut BUG/MINOR: tcp-rules: Don't forward close during tcp-response content rules eval BUG/MINOR: cli: Don't set SE flags from the cli applet BUG/MINOR: cli: Fix memory leak on error for _getsocks command BUG/MINOR: cli: Fix a possible infinite loop in _getsocks() BUG/MINOR: config/userlist: Support one 'users' option for 'group' directive BUG/MINOR: auth: Fix a leak on error path when parsing user's groups BUG/MINOR: flt-trace: Support only one name option BUG/MINOR: stats-json: Define JSON_INT_MAX as a signed integer Damien Claisse (1): BUG/MINOR: cfgparse-tcp: relax namespace bind check Dragan Dosen (2): BUG/MEDIUM: server: properly initialize PROXY v2 TLVs BUG/MINOR: server: fix the "server-template" prefix memory leak Lukas Tribus (1): DOC: option redispatch should mention persist options Valentine Krasnobaeva (3): MINOR: startup: adjust alert messages, when capabilities are missed BUG/MINOR: cfgparse: fix NULL ptr dereference in cfg_parse_peers BUG/MEIDUM: startup: return to initial cwd only after check_config_validity() William Lallemand (9): BUG/MEDIUM: ssl: chosing correct certificate using RSA-PSS with TLSv1.3 BUG/MEDIUM: htx: wrong count computation in htx_xfer_blks() DOC: htx: clarify parameter for htx_xfer_blks() TESTS: ist: fix wrong array size CI: github: fix h2spec.config proxy names BUILD: ssl: allow to build without the renegotiation API of WolfSSL BUILD: ssl: more cleaner approach to WolfSSL without renegotiation BUG/MINOR: ssl/cli: "show ssl crt-list" lacks client-sigals BUG/MINOR: ssl/cli: "show ssl crt-list" lacks sigals Willy Tarreau (11): BUG/MEDIUM: fd: mark FD transferred to another process as FD_CLONED BUG/MINOR: stream: fix age calculation in "show sess" output BUG/MEDIUM: thread: use pthread_self() not ha_pthread[tid] in set_affinity BUG/MEDIUM: debug: close a possible race between thread dump and panic() BUG/MINOR: mux-h1: always make sure h1s->sd exists in h1_dump_h1s_info() MINOR: tinfo: add a new thread flag to indicate a call from a sig handler BUG/MEDIUM: stream: never allocate connection addresses from signal handler MINOR: freq_ctr: provide non-blocking read functions BUG/MEDIUM: stream: use non-blocking freq_ctr calls from the stream dumper BUG/MINOR: h2: always trim leading and trailing LWS in header values BUG/MINOR: server: check for either proxy-protocol v1 or v2 to send hedaer