Changes since version 2.3.9 : Christopher Faulet (12): DOC: Explicitly state only IPv4 are supported by forwardfor/originalto options MINOR: No longer rely on deprecated sample fetches for predefined ACLs BUG/MEDIUM: threads: Ignore current thread to end its harmless period BUG/MINOR: checks: Set missing id to the dummy checks frontend MINOR: logs: Add support of checks as session origin to format lf strings BUG/MINOR: connection: Fix fc_http_major and bc_http_major for TCP connections MINOR: connection: Make bc_http_major compatible with tcp-checks BUG/MINOR: ssl-samples: Fix ssl_bc_* samples when called from a health-check BUG/MINOR: http-fetch: Make method smp safe if headers were already forwarded BUG/MINOR: http_htx: Remove BUG_ON() from http_get_stline() function BUG/MINOR: logs: Report the true number of retries if there was no connection BUG/MINOR: mux-h1: Release idle server H1 connection if data are received Julien Pivotto (1): DOC: clarify that compression works for HTTP/2 Remi Tricot-Le Breton (4): BUG/MINOR: ssl: Fix update of default certificate BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one BUG/MINOR: ssl: Add missing free on SSL_CTX in ckch_inst_free DOC: ssl: Certificate hot update only works on fronted certificates Thayne McCombs (2): BUG/MINOR: tools: fix parsing "us" unit for timers BUG/MEDIUM: sample: Fix adjusting size in field converter William Lallemand (2): REGTESTS: ssl: "set ssl cert" and multi-certificates bundle REGTESTS: ssl: mark set_ssl_cert_bundle.vtc as broken Willy Tarreau (5): BUILD: backend: fix build breakage in idle conn locking fix BUG/MINOR: tcp: fix silent-drop workaround for IPv6 BUILD: tcp: use IPPROTO_IPV6 instead of SOL_IPV6 on FreeBSD/MacOS BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields CONTRIB: halog: fix issue with array of type char