Changes since version 3.1.12 : Alexander Stephan (1): BUG/MINOR: mworker/cli: fix show proc pagination using reload counter Amaury Denoyelle (5): MINOR: cfgparse: remove duplicate "force-persist" in common kw list BUG/MEDIUM: quic: fix ACK ECN frame parsing BUG/MINOR: proxy: free persist_rules BUG/MEDIUM: mux-quic: prevent BUG_ON() on aborted uni stream close BUG/MINOR: proxy: fix deinit crash on defaults with duplicate name Aurelien DARRAGON (4): BUG/MINOR: http_act: fix deinit performed on uninitialized lf_expr in release_http_map() BUG/MEDIUM: promex: server iteration may rely on stale server BUG/MEDIUM: hlua: fix invalid lua_pcall() usage in hlua_traceback() BUG/MINOR: hlua: consume error object if ignored after a failing lua_pcall() Christian Ruppert (1): REGTESTS: ssl: Fix reg-tests curve check Christopher Faulet (11): BUG/MEDIUM: http-ana: Properly detect client abort when forwarding response (v2) BUG/MEDIUM: stconn: Don't report abort from SC if read0 was already received MINOR: ssl: Add a function to hash SNIs MINOR: ssl: Store hash of the SNI for cached TLS sessions MINOR: ssl: Compare hashes instead of SNIs when a session is cached MINOR: connection/ssl: Store the SNI hash value in the connection itself MEDIUM: tcpcheck/backend: Get the connection SNI before initializing SSL ctx BUG/MEDIUM: ssl: Don't reuse TLS session if the connection's SNI differs MEDIUM: ssl/server: No longer store the SNI of cached TLS sessions BUG/MINOR: promex: Detach promex from the server on error dump its metrics dump BUG/MEDIUM: mux-h1: Skip UNUSED htx block when formating the start line Egor Shestakov (1): BUG/MINOR: cfgparse: fix "default" prefix parsing Olivier Houchard (3): MEDIUM: h1: Immediately try to read data for frontend MINOR: connections: Add a new CO_FL_SSL_NO_CACHED_INFO flag BUG/MEDIUM: ssl: Don't resume session for check connections William Lallemand (12): BUG/MEDIUM: mworker: can't use signals after a failed reload BUILD: ssl: strchr definition changed in C23 BUILD: tools: memchr definition changed in C23 BUG/MINOR: cfgparse: wrong section name upon error BUG/MINOR: cli/stick-tables: argument to "show table" is optional BUG/MEDIUM: ssl: fix error path on generate-certificates BUG/MEDIUM: ssl: fix generate-certificates option when SNI greater than 64bytes REGTESTS: ssl: fix generate-certificates w/ LibreSSL MINOR: ssl: allow to disable certificate compression BUG/MINOR: ssl: fix error message of tune.ssl.certificate-compression CLEANUP: mworker/cli: remove useless variable BUG/MINOR: mworker/cli: 'show proc' is limited by buffer size Willy Tarreau (7): MEDIUM: mux-h2: do not needlessly refrain from sending data early MINOR: mux-h2: extract the code to send preface+settings into its own function BUG/MINOR: mux-h2: send the preface along with the first request if needed BUG/MINOR: sock-inet: ignore conntrack for transparent sockets on Linux BUG/MINOR: backend: fix the conn_retries check for TFO BUG/MINOR: backend: inspect request not response buffer to check for TFO BUILD: sockpair: fix build issue on macOS related to variable-length arrays