Changes since version 2.7-dev8 : Amaury Denoyelle (19): BUILD: ssl_sock: fix null dereference for QUIC build BUG/MINOR: quic: fix buffer overflow on retry token generation MINOR: quic: add version field on quic_rx_packet MINOR: quic: extend pn_offset field from quic_rx_packet MINOR: quic: define first packet flag MINOR: quic: extract connection retrieval MINOR: quic: split and rename qc_lstnr_pkt_rcv() MINOR: quic: refactor packet drop on reception MINOR: quic: extend Retry token check function BUG/MINOR: mux-quic: complete flow-control for uni streams MINOR: quic: do not crash on unhandled sendto error MINOR: quic: display unknown error sendto counter on stat page MINOR: quic: remove unnecessary quic_session_accept() BUG/MINOR: quic: fix subscribe operation MINOR: quic: add counter for interrupted reception BUG/MINOR: quic: fix race condition on datagram purging CLEANUP: cli: rename dynamic error printing state MINOR: cli: define usermsgs print context MINOR: server: clear prefix on stderr logs after add server Aurelien DARRAGON (5): MINOR: list: fixing typo in MT_LIST_LOCK_ELT DOC/MINOR: list: fixing MT_LIST_LOCK_ELT macro documentation MINOR: list: adding MT_LIST_APPEND_LOCKED macro BUG/MINOR: log: fixing bug in tcp syslog_io_handler Octet-Counting BUG/MEDIUM: wdt/clock: properly handle early task hangs Christopher Faulet (6): BUG/MINOR: log: Preserve message facility when the log target is a ring buffer BUG/MINOR: ring: Properly parse connect timeout BUG/MEDIUM: compression: handle rewrite errors when updating response headers BUG/MINOR: sink: Only use backend capability for the sink proxies BUG/MINOR: sink: Set default connect/server timeout for implicit ring buffers BUG/MAJOR: stick-table: don't process store-response rules for applets Dridi Boukelmoune (1): IMPORT: slz: mention the potential header in slz_finish() Emeric Brun (1): MINOR: peers: handle multiple resync requests using shards Frédéric Lécaille (3): BUILD: quic: QUIC mux build fix for 32-bit build BUILD: quic: Fix build for m68k cross-compilation MINOR: peers: Support for peer shards Ilya Shipitsin (5): BUILD: scripts: disable tests build on QuicTLS build CI: add monthly gcc cross compile jobs CLEANUP: assorted typo fixes in the code and comments CI: switch to the "latest" LibreSSL CI: enable QUIC for LibreSSL builds Miroslav Zagorac (1): BUG/MINOR: httpclient: fixed memory allocation for the SSL ca_file Remi Tricot-Le Breton (5): BUG/MINOR: ssl: Memory leak of DH BIGNUM fields BUG/MINOR: ssl: Memory leak of AUTHORITY_KEYID struct when loading issuer BUG/MINOR: ssl: ocsp structure not freed properly in case of error BUG/MEDIUM: ssl: Verify error codes can exceed 63 BUG/MINOR: ssl: Fix potential overflow Thierry Fournier (1): BUG/MEDIUM: httpclient: segfault when the httpclient parser fails William Lallemand (18): BUG/MEDIUM: httpclient/lua: crash when the lua task timeout before the httpclient BUG/MEDIUM: httpclient: check if the httpclient was released in the IO handler REGTESTS: httpclient/lua: test the lua task timeout with the httpclient CI: github: dump the backtrace of coredumps in the alpine container BUILD: Makefile: add "USE_SHM_OPEN" on the linux-musl target DOC: lua: add a note about compression w/ httpclient CLEANUP: mworker/cli: rename the status function to loadstatus MINOR: mworker/cli: does no try to dump the startup-logs w/o USE_SHM_OPEN MINOR: ssl: add the SSL error string when failing to load a certificate MINOR: ssl: add the SSL error string before the chain MEDIUM: ssl: be stricter about chain error MINOR: ssl: dump the SSL string error when SSL_CTX_use_PrivateKey() failed. CLEANUP: ssl: remove dead code in ssl_sock_load_pem_into_ckch() MEDIUM: ssl: {ca,crt}-ignore-err can now use error constant name MINOR: ssl: x509_v_err_str converter transforms an integer to a X509_V_ERR name BUG/MINOR: ssl: bind_conf is uncorrectly accessed when using QUIC CLEANUP: ssl: remove printf in bind_parse_ignore_err BUG/MINOR: ssl: crt-ignore-err memory leak with 'all' parameter Willy Tarreau (37): BUILD: ssl_utils: fix build on gcc versions before 8 BUILD: debug: remove unnecessary quotes in HA_WEAK() calls CI: emit the compiler's version in the build reports IMPORT: xxhash: update xxHash to version 0.8.1 IMPORT: slz: declare len to fix debug build when optimal match is enabled IMPORT: slz: define and use a __fallthrough statement for switch/case BUILD: compiler: add a macro to detect if another one is set and equals 1 BUILD: compiler: add a default definition for __has_attribute() BUILD: compiler: define a __fallthrough statement for switch/case BUILD: sample: use __fallthrough in smp_is_rw() and smp_dup() BUILD: quic: use __fallthrough in quic_connect_server() BUILD: ssl/crt-list: use __fallthrough in cli_io_handler_add_crtlist() BUILD: ssl: use __fallthrough in cli_io_handler_commit_{cert,cafile_crlfile}() BUILD: ssl: use __fallthrough in cli_io_handler_tlskeys_files() BUILD: hlua: use __fallthrough in hlua_post_init_state() BUILD: stream: use __fallthrough in stats_dump_full_strm_to_buffer() BUILD: tcpcheck: use __fallthrough in check_proxy_tcpcheck() BUILD: stats: use __fallthrough in stats_dump_proxy_to_buffer() BUILD: peers: use __fallthrough in peer_io_handler() BUILD: hash: use __fallthrough in hash_djb2() BUILD: tools: use __fallthrough in url_decode() BUILD: args: use __fallthrough in make_arg_list() BUILD: acl: use __fallthrough in parse_acl_expr() BUILD: spoe: use __fallthrough in spoe_handle_appctx() BUILD: logs: use __fallthrough in build_log_header() BUILD: check: use __fallthrough in __health_adjust() BUILD: http_act: use __fallthrough in parse_http_del_header() BUILD: h1_htx: use __fallthrough in h1_parse_chunk() BUILD: vars: use __fallthrough in var_accounting_{diff,add}() BUILD: map: use __fallthrough in cli_io_handler_*() BUILD: compression: use __fallthrough in comp_http_payload() BUILD: stconn: use __fallthrough in various shutw() functions BUILD: prometheus: use __fallthrough in promex_dump_metrics() and IO handler() CLEANUP: stick-table: remove the unused table->exp_next OPTIM: stick-table: avoid atomic ops in stktable_requeue_exp() when possible BUG/MEDIUM: stick-table: fix a race condition when updating the expiration task MEDIUM: http-ana: remove set-cookie2 support