Changes since version 3.3-dev13 : Amaury Denoyelle (11): MINOR: quic: do not use quic_newcid_from_hash64 on BE side MINOR: quic: support multiple random CID generation for BE side MINOR: quic: try to clarify quic_conn CIDs fields direction MINOR: quic: refactor qc_new_conn() prototype MINOR: quic: remove arg from qc_new_conn() BUG/MINOR: mux-quic: implement max-reuse server parameter MINOR: quic: fix trace on quic_conn_closed release BUG/MINOR: quic: do not decrement jobs for backend conns BUG/MINOR: quic: fix FD usage for quic_conn_closed on backend side MINOR: quic: store source address for backend conns BUG/MINOR: quic: flag conn with CO_FL_FDLESS on backend side Christopher Faulet (5): MINOR: stick-tables: Rename stksess shards to use buckets MINOR: muxes: Support an optional ALPN string when defining mux protocols MINOR: config: Do proto detection for listeners before checks about ALPN BUG/MEDIUM: config: Use the mux protocol ALPN by default for listeners if forced DOC: config: Add a note about conflict with ALPN/NPN settings and proto keyword Frederic Lecaille (4): BUG/MEDIUM: quic-be: prevent use of MUX for 0-RTT sessions without secrets MINOR: quic/flags: add missing QUIC flags for flags dev tool. MINOR: quic: uneeded xprt context variable passed as parameter BUG/MEDIUM: quic-be/ssl_sock: TLS callback called without connection Lukas Tribus (1): DOC: http: document 413 response code Olivier Houchard (1): BUG/MEDIUM: queues: Don't forget to unlock the queue before exiting William Lallemand (15): MEDIUM: mworker: set the mworker-max-reloads to 50 CLEANUP: startup: move confusing msg variable BUG/MEDIUM: mworker: signals inconsistencies during startup and reload BUG/MINOR: mworker: wrong signals during startup BUG/MINOR: acme: P-256 doesn't work with openssl >= 3.0 BUILD: Makefile: make install with admin tools CI: github: make install-bin instead of make install BUG/MINOR: ssl: remove dead code in ssl_sock_from_buf() BUILD: Makefile: remove halog from install-admin BUG/MINOR: acme: alert when the map doesn't exist at startup DOC: acme: add details about the DNS-01 support DOC: acme: explain how to dump the certificates DOC: acme: configuring acme needs a crt file DOC: acme: add details about key pair generation in ACME section ADMIN: dump-certs: let dry-run compare certificates Willy Tarreau (7): REGTESTS: ssl: split the SSL reuse test into TLS 1.2/1.3 REGTESTS: ssl: add basic 0rtt tests for TLSv1.2, TLSv1.3 and QUIC REGTESTS: ssl: also verify that 0-rtt properly advertises early-data:1 MINOR: limits: keep a copy of the rough estimate of needed FDs in global struct MINOR: limits: explain a bit better what to do when fd limits are exceeded BUG/MEDIUM: connection/ssl: also fix the ssl_sock_io_cb() regarding idle list MINOR: limits: display the computed maxconn using ha_notice()