Changes since version 2.9-dev4 : Alexander Stephan (6): CLEANUP/MINOR: connection: Improve consistency of PPv2 related constants MEDIUM: connection: Generic, list-based allocation and look-up of PPv2 TLVs MEDIUM: sample: Add fetch for arbitrary TLVs MINOR: sample: Refactor fc_pp_authority by wrapping the generic TLV fetch MINOR: sample: Refactor fc_pp_unique_id by wrapping the generic TLV fetch MINOR: sample: Add common TLV types as constants for fc_pp_tlv Andrew Hopkins (2): BUILD: ssl: Build with new cryptographic library AWS-LC REGTESTS: ssl: skip ssl_dh test with AWS-LC Chris Staite (1): BUG/MEDIUM: h1-htx: Ensure chunked parsing with full output buffer Christopher Faulet (5): DEBUG: applet: Properly report opposite SC expiration dates in traces BUG/MEDIUM: stconn: Update stream expiration date on blocked sends BUG/MINOR: stconn: Don't report blocked sends during connection establishment BUG/MEDIUM: stconn: Wake applets on sending path if there is a pending shutdown BUG/MEDIUM: stconn: Don't block sends if there is a pending shutdown Frédéric Lécaille (8): BUG/MINOR: quic: Possible skipped RTT sampling MINOR: quic: Add a trace to quic_release_frm() BUG/MAJOR: quic: Really ignore malformed ACK frames. BUG/MINOR: quic: Unchecked pointer to packet number space dereferenced BUILD: quic: Compilation issue on 32-bits systems with quic_may_send_bytes() BUG/MINOR: quic: Unchecked pointer to Handshake packet number space BUG/MINOR: quic: Wrong RTT adjusments BUG/MINOR: quic: Wrong RTT computation (srtt and rrt_var) Miroslav Zagorac (1): MINOR: properly mark the end of the CLI command in error messages William Lallemand (6): BUG/MINOR: ssl/cli: can't find ".crt" files when replacing a certificate DOC: configuration: update examples for req.ver MINOR: global: export the display_version() symbol MEDIUM: mworker: display a more accessible message when a worker crash MINOR: httpclient: allow to configure the retries MINOR: httpclient: allow to configure the timeout.connect Willy Tarreau (34): BUG/MEDIUM: mux-h2: fix crash when checking for reverse connection after error BUILD: import: guard plock.h against multiple inclusion BUILD: pools: import plock.h to build even without thread support BUG/MINOR: stream: protect stream_dump() against incomplete streams DOC: config: mention uid dependency on the tune.quic.socket-owner option MEDIUM: capabilities: enable support for Linux capabilities MINOR: ssl_sock: avoid iterating realloc(+1) on stored context DOC: ssl: add some comments about the non-obvious session allocation stuff CLEANUP: ssl: keep a pointer to the server in ssl_sock_init() MEDIUM: ssl_sock: always use the SSL's server name, not the one from the tid MEDIUM: server/ssl: place an rwlock in the per-thread ssl server session MINOR: server/ssl: maintain an index of the last known valid SSL session MINOR: server/ssl: clear the shared good session index on failure MEDIUM: server/ssl: pick another thread's session when we have none yet MINOR: activity: report the current run queue size BUG/MINOR: checks: do not queue/wake a bounced check MINOR: checks: start the checks in sleeping state MINOR: checks: pin the check to its thread upon wakeup MINOR: check: remember when we migrate a check MINOR: check/activity: collect some per-thread check activity stats MINOR: checks: maintain counters of active checks per thread MINOR: check: also consider the random other thread's active checks MEDIUM: checks: search more aggressively for another thread on overload MEDIUM: checks: implement a queue in order to limit concurrent checks MINOR: checks: also consider the thread's queue for rebalancing BUG/MEDIUM: connection: fix pool free regression with recent ppv2 TLV patches BUG/MINOR: stream: further protect stream_dump() against incomplete sessions BUILD: bug: make BUG_ON() void to avoid a rare warning BUILD: checks: shut up yet another stupid gcc warning MINOR: cpuset: add ha_cpuset_isset() to check for the presence of a CPU in a set MINOR: cpuset: add ha_cpuset_or() to bitwise-OR two CPU sets MINOR: cpuset: centralize a reliable bound cpu detection MEDIUM: threads: detect incomplete CPU bindings MEDIUM: threads: detect excessive thread counts vs cpu-map