Summary

2025/05/17 : 3.1r1 (1.0.0-347.419) - MINOR: ssl: support strict-sni in ssl-default-bind-options - BUG/MEDIUM: stconn: Disable 0-copy forwarding for filters altering the payload - MEDIUM: hlua: Add function to change the body length of an HTTP Message - BUG/MEDIUM: wdt: always ignore the first watchdog wakeup - MINOR: quic: Add useful error traces about qc_ssl_sess_init() failures - CLEANUP: quic: Useless BIO_METHOD initialization - BUILD: debug: mark ha_crash_now() as attribute(noreturn) - BUG/MINOR: h3: don't insert more than one Host header - DOC: configuration: explicit multi-choice on bind shards option - BUG/MEDIUM: mux-spop: Properly detect truncated frames on demux to report error - BUG/MINOR: quic: ensure cwnd limits are always enforced - MINOR: quic: refactor BBR API - BUG/MINOR: mux-quic: do not decode if conn in error - MINOR: hapee: remove "r1" from HAPROXY_BRANCH env variable 2025/05/15 : 3.1r1 (1.0.0-347.405) - MEDIUM: stick-tables: Limit the number of old entries we remove - DOC: config: recommend disabling libc-based resolution with resolvers - DOC: config: restore default values for resolvers hold directive - DOC: ring: refer to newer RFC5424 - BUG/MEDIUM: peers: also limit the number of incoming updates - BUG/MINOR: sink: detect and warn when using "send-proxy" options with ring servers - DEBUG: mux-spop: Review some trace messages to adjust the message or the level - BUG/MEDIUM: mux-spop; Don't report a read error if there are pending data - BUG/MEDIUM: spop-conn: Report short read for partial frames payload - BUG/MEDIUM: mux-spop: Properly handle CLOSING state - BUG/MEDIUM: mux-spop: Remove frame parsing states from the SPOP connection state - MINOR: mux-spop: Don't set SPOP connection state to FRAME_H after ACK parsing - BUG/MINOR: mux-spop: Don't open new streams for SPOP connection on error - BUG/MINOR: mux-spop: Make the demux stream ID a signed integer - BUG/MINOR: mux-spop: Don't report error for stream if ACK was already received - BUG/MINOR: mux-spop: Use the right bitwise operator in spop_ctl() - BUG/MEDIUM: mux-spop: Wait end of handshake to declare a spop connection ready - BUG/MEDIUM: mux-spop: Respect the negociated max-frame-size value to send frames - BUG/MINOR: spoe: Don't report error on applet release if filter is in DONE state - BUG/MINOR: hlua: Fix Channel:data() and Channel:line() to respect documentation - BUG/MINOR: threads: fix soft-stop without multithreading support - BUG/MINOR: ssl/ckch: always free() the previous entry during parsing - BUG/MEDIUM: quic: free stream_desc on all data acked - BUG/MINOR: cli: fix too many args detection for commands - BUG/MEDIUM: peers: hold the refcnt until updating ts->seen - BUG/MINOR: quic: reject invalid max_udp_payload size - BUG/MINOR: quic: fix TP reject on invalid max-ack-delay - BUG/MINOR: quic: use proper error code on invalid received TP value - BUG/MINOR: quic: reject retry_source_cid TP on server side - BUG/MINOR: quic: use proper error code on invalid server TP - BUG/MINOR: quic: use proper error code on missing CID in TPs - MINOR: quic: extend return value during TP parsing - MINOR: quic: rename min/max fields for congestion window algo - BUG/MINOR: proxy: only use proxy_inc_fe_cum_sess_ver_ctr() with frontends - BUG/MEDIUM: connections: Report connection closing in conn_create_mux() - BUG/MINOR: mux-h1: Fix trace message in h1_detroy() to not relay on connection - BUG/MINOR: mux-h1: Don't pretend connection was released for TCP>H1>H2 upgrade - BUG/MINOR: dns: prevent ds accumulation within dss - BUG/MINOR: dns: add tempo between 2 connection attempts for dns servers - CLEANUP: dns: remove unused dns_stream_server struct member - MINOR: applet: add appctx_schedule() macro - BUG/MAJOR: listeners: transfer connection accounting when switching listeners - BUG/MINOR: cli: Issue an error when too many args are passed for a command 2025/05/07 : 3.1r1 (1.0.0-347.362) - BUG/MINOR: quic: do not crash on CRYPTO ncbuf alloc failure - BUG/MINOR: rhttp: ensure GOAWAY can be emitted after reversal - BUG/MINOR: rhttp: fix reconnect if timeout connect unset - BUG/MINOR: mux-h2: prevent past scheduling with idle connections - MINOR: compiler: rely on builtin detection for __builtin_unreachable() - MINOR: debug: make ha_stuck_warning() print the whole message at once - MINOR: debug: make ha_stuck_warning() only work for the current thread - MEDIUM: wdt: always make the faulty thread report its own warnings - MINOR: pass a valid buffer pointer to ha_thread_dump_one() - MINOR: debug: remove unused case of thr!=tid in ha_thread_dump_one() - MINOR: debug: always reset the dump pointer when done - MINOR: tinfo: keep a copy of the pointer to the thread dump buffer - MINOR: debug: protect ha_dump_backtrace() against risks of re-entrance - MINOR: tools: protect dladdr() against reentrant calls from the debug handler - MINOR: tools: also protect the library name resolution against concurrent accesses - BUG/MINOR: debug: detect and prevent re-entrance in ha_thread_dump_fill() - BUG/MINOR: wdt/debug: avoid signal re-entrance between debugger and watchdog - BUG/MINOR debug: fix !USE_THREAD_DUMP in ha_thread_dump_fill() - BUG/MINOR: threads: set threads_idle and threads_harmless even with no threads - BUILD: makefile: enable backtrace by default on musl - MINOR: compiler: add ASSUME_NONNULL() to tell the compiler a pointer is valid - MINOR: compiler: also enable __builtin_assume() for ASSUME() - MINOR: compiler: add a new "ASSUME" macro to help the compiler - MINOR: compiler: add a __has_builtin() macro to detect features more easily 2025/04/17 : 3.1r1 (1.0.0-347.338) - BUG/MEDIUM: hlua: fix hlua_applet_{http,tcp}_fct() yield regression (lost data) - BUG/MINOR: h3: reject request URI with invalid characters - BUG/MINOR: h3: reject invalid :path in request - BUG/MINOR: h3: filter upgrade connection header - BUG/MEDIUM: h3: trim whitespaces in header value prior to QPACK encoding - BUG/MEDIUM: h3: trim whitespaces when parsing headers value - MINOR: debug: detect call instructions and show the branch target in backtraces - MINOR: debug: in call traces, dump the 8 bytes before the return address, not after - MINOR: tools: let dump_addr_and_bytes() support dumping before the offset - BUILD: quic: fix overflow in global tune - MINOR: quic: define quic_tune - MINOR: quic: transform pacing settings into a global option - MINOR: quic: allow BBR testing without pacing - MINOR: quic: remove references to burst in quic-cc-algo parsing - BUG/MEDIUM: http-ana: Report 502 from req analyzer only during rsp forwarding - BUG/MINOR: http-ana: Properly detect client abort when forwarding the response - DOC: config: add the missing "force-cfg-parser-pause" to the global kw index - DOC: config: add the missing "profiling.memory" to the global kw index - BUG/MINOR: debug: remove the trailing \n from BUG_ON() statements - BUG/MINOR: hlua: fix invalid errmsg use in hlua_init() - BUG/MINOR: backend: do not use the source port when hashing clientip - BUG/MEDIUM: sample: fix risk of overflow when replacing multiple regex back-refs - BUG/MINOR: log: fix CBOR encoding with LOG_VARTEXT_START() + lf_encode_chunk() - CLEANUP: log: adjust _lf_cbor_encode_byte() comment - BUG/MINOR: hlua_fcn: fix potential UAF with Queue:pop_wait() - MINOR: task: add thread safe notification_new and notification_wake variants - TESTS: Fix build for filltab25.c - BUG/MEDIUM: stream: Fix a possible freeze during a forced shut on a stream - DOC: update INSTALL to reflect the minimum compiler version - BUILD: quic_sock: address a strict-aliasing build warning with gcc 5 and 6 - BUG/MEDIUM: backend: fix reuse with set-dst/set-dst-port - BUG/MINOR: backend: do not overwrite srv dst address on reuse - BUG/MINOR: rhttp: fix incorrect dst/dst_port values - BUILD: compiler: undefine the CONCAT() macro if already defined - DOC: config: fix two missing "content" in "tcp-request" examples - BUG/MINOR: config: silence .notice/.warning/.alert in discovery mode - BUG/MINOR: log: fix gcc warn about truncating NUL terminator while init char arrays - BUG/MINOR: mux-quic: remove extra BUG_ON() in _qcc_send_stream() - BUG/MEDIUM: mux-quic: fix crash on RS/SS emission if already close local 2025/04/03 : 3.1r1 (1.0.0-347.299) - BUG/MEDIUM: peers: prevent learning expiration too far in futur from unsync node - BUG/MINOR: peers: fix expire learned from a peer not converted from ms to ticks - MINOR: log: support "raw" logformat node typecast - BUG/MINOR: log: prevent saddr NULL deref in syslog_io_handler() - MINOR: log: handle log-forward "option host" - MINOR: log: add "option host" log-forward option - MINOR: tools: only print address in sa2str() when port == -1 - MINOR: log: provide source address information in syslog_process_message() - MINOR: proxy: add proxy->options3 - CLEANUP: log: add syslog_process_message() helper - MINOR: log: detach prepare from parse message - MINOR: stktable: implement "recv-only" table option 2025/03/20 : 3.1r1 (1.0.0-346.287) - BUILD: tools: avoid a build warning on gcc-4.8 in resolve_sym_name() - MINOR: tools: teach resolve_sym_name() a few more common symbols - MINOR: tools: ease the declaration of known symbols in resolve_sym_name() - MINOR: tools: improve symbol resolution without dl_addr - MINOR: cli: export cli_io_handler() to ease symbol resolution - BUG/MEDIUM: stream: don't use localtime in dumps from a signal handler - MINOR: tinfo: split the signal handler report flags into 3 - IMPORT: plock: use cpu_relax() for a shorter time in EBO - IMPORT: plock: lower the slope of the exponential back-off - IMPORT: plock: give higher precedence to W than S - BUG/MINOR: mux-h2: Reset streams with NO_ERROR code if full response was already sent - BUG/MEDIUM: hlua/cli: fix cli applet UAF in hlua_applet_wakeup() - BUG/MINOR: limits: compute_ideal_maxconn: don't cap remain if fd_hard_limit=0 2025/03/13 : 3.1r1 (1.0.0-346.274) - BUILD: tools: silence a build warning when USE_THREAD=0 - MINOR: tools: use only opportunistic symbols resolution - BUG/MINOR: stats: fix capabilities and hide settings for some generic metrics - DOC: management: rename some last occurences from domain "dns" to "resolvers" - MINOR: compiler: add a new __decl_thread_var() macro to declare local variables - MINOR: compiler: add a simple macro to concatenate resolved strings - BUG/MEDIUM: thread: use pthread_self() not ha_pthread[tid] in set_affinity - MINOR: startup: adjust alert messages, when capabilities are missed - BUG/MINOR: cfgparse-tcp: relax namespace bind check - MINOR: stream/cli: make "show sess" support filtering on front/back/server - MINOR: stream/cli: rework "show sess" to better consider optional arguments - BUG/MINOR: stream: fix age calculation in "show sess" output - MINOR: cfgparse/peers: provide more info when ignoring invalid "peer" or "server" lines - BUG/MINOR: server: dont return immediately from parse_server() when skipping checks - BUG/MINOR: cfgparse/peers: properly handle ignored local peer case - BUG/MINOR: cfgparse/peers: fix inconsistent check for missing peer server - BUG/MEIDUM: startup: return to initial cwd only after check_config_validity() - BUG/MINOR: log: set proper smp size for balance log-hash - CLEANUP: log: removing "log-balance" references - CI: github: fix h2spec.config proxy names - TESTS: ist: fix wrong array size - BUG/MINOR: server: check for either proxy-protocol v1 or v2 to send hedaer - BUG/MEDIUM: mux-fcgi: Try to fully fill demux buffer on receive if not empty - CLEANUP: h3: fix documentation of h3_rcv_buf() - BUG/MINOR: h3: do not report transfer as aborted on preemptive response - BUG/MINOR: server: fix the "server-template" prefix memory leak - BUG/MEDIUM: server: properly initialize PROXY v2 TLVs - BUG/MINOR: h2: always trim leading and trailing LWS in header values - BUG/MEDIUM: stream: use non-blocking freq_ctr calls from the stream dumper - MINOR: freq_ctr: provide non-blocking read functions - BUG/MEDIUM: stream: never allocate connection addresses from signal handler - MINOR: tinfo: add a new thread flag to indicate a call from a sig handler - BUG/MINOR: mux-h1: always make sure h1s->sd exists in h1_dump_h1s_info() - BUG/MINOR: stream: do not call co_data() from __strm_dump_to_buffer() - MINOR: clock: always use atomic ops for global_now_ms - BUG/MINOR: sink: add tempo between 2 connection attempts for sft servers - BUG/MINOR: log: fix outgoing abns address family - BUG/MEDIUM: uxst: fix outgoing abns address family in connect() - BUG/MINOR: cfgparse: fix NULL ptr dereference in cfg_parse_peers - BUG/MEDIUM: spoe/mux-spop: Introduce an NOOP action to deal with empty ACK - BUG/MEDIUM: applet: Don't handle EOI/EOS/ERROR is applet is waiting for room 2025/02/19 : 3.1r1 (1.0.0-345.233) - DOC: option redispatch should mention persist options - BUG/MINOR: stats-json: Define JSON_INT_MAX as a signed integer - BUG/MINOR: flt-trace: Support only one name option - BUG/MINOR: auth: Fix a leak on error path when parsing user's groups - BUG/MINOR: config/userlist: Support one 'users' option for 'group' directive - BUG/MINOR: cli: Fix a possible infinite loop in _getsocks() - BUG/MINOR: cli: Fix memory leak on error for _getsocks command - BUG/MINOR: cli: Don't set SE flags from the cli applet - MINOR: mux-spop: Set SPOP_CF_ERROR flag on connection error only - MINOR: mux-spop: Report EOI on the SE when a ACK is received for a stream - MINOR: flt-spoe: Report end of input immediately after applet init - BUG/MEDIUM: flt-spoe: Properly handle end of stream from the SPOE applet - BUG/MEDIUM: applet: Don't pretend to have more data to handle EOI/EOS/ERROR - BUG/MEDIUM: flt-spoe: Set/test applet flags instead of SE flags from I/O handler - BUG/MINOR: http-check: Don't pretend a C-L heeader is set before adding it - BUG/MINOR: tcp-rules: Don't forward close during tcp-response content rules eval - BUG/MEDIUM: mux-fcgi: Properly handle read0 on partial records - DOC: htx: clarify <mark> parameter for htx_xfer_blks() - BUG/MEDIUM: htx: wrong count computation in htx_xfer_blks() - MEDIUM: epoll: skip reports of stale file descriptors - DEBUG: epoll: store and compare the FD's generation count with reported event - MINOR: fd: add a generation number to file descriptors - DEBUG: fd: add a counter of takeovers of an FD since it was last opened - BUG/MEDIUM: chunk: make sure to flush the trash pool before resizing - MINOR: quic: adapt credit based pacing to BBR - MINOR: quic: remove unused pacing burst in bind_conf/quic_cc_path - MEDIUM: quic: use dynamic credit for pacing - MEDIUM: mux-quic: reduce pacing CPU usage with passive wait - MEDIUM: quic: implement credit based pacing - MINOR: mux-quic: increment pacing retry counter on expired - MINOR: quic: rename pacing_rate cb to pacing_inter - BUG/MINOR: stktable: invalid use of stkctr_set_entry() with mixed table types - BUG/MINOR: mux-h2: Properly handle full or truncated HTX messages on shut - REGTESTS: Fix truncated.vtc to send 0-CRLF - BUG/MINOR: mux-quic: prevent crash after MUX init failure - BUG/MINOR: quic: prevent crash on conn access after MUX init failure - BUG/MINOR: fcgi: Don't set the status to 302 if it is already set - BUG/MEDIUM: filters: Handle filters registered on data with no payload callback - BUG/MINOR: cli: Wait for the last ACK when FDs are xferred from the old worker - BUG/MEDIUM: cli: Be sure to drop all input data in END state - BUG/MINOR: ssl/cli: "show ssl crt-list" lacks sigals - BUG/MINOR: ssl/cli: "show ssl crt-list" lacks client-sigals - BUG/MEDIUM: fd: mark FD transferred to another process as FD_CLONED - BUG/MINOR: mworker: post_section_parser for the last section in discovery - BUG/MINOR: mworker: section ignored in discovery after a post_section_parser - BUG/MINOR: quic: fix CRYPTO payload size calcul for encoding - BUG/MINOR: quic: reserve length field for long header encoding - BUG/MEDIUM: debug: close a possible race between thread dump and panic() - BUG/MEDIUM: ssl: chosing correct certificate using RSA-PSS with TLSv1.3 - BUILD: ssl: more cleaner approach to WolfSSL without renegotiation - BUILD: ssl: allow to build without the renegotiation API of WolfSSL - HAPEE: ssl: enable USE_ENGINE automatically when OpenSSL < 3.0 - BUG/MINOR: startup: hap_register_feature() fix for partial feature name - MINOR: startup: allow hap_register_feature() to enable a feature in the list - MINOR: hapee/WURFL: transfer error status from the _wurfl_reload() function - MINOR: hapee/WURFL: added live update database function - MINOR: hapee/WURFL: added custom API log function - MINOR: hapee/WURFL: added function to check correct module initialization - BUG/MINOR: hapee/WURFL: corrected version check of used wurfl library - MINOR: hapee/da: alert in case of incorrect data version - BUG/MINOR: hapee/da: enabling use of precompiled json database in 'deviceatlas-json-file' - BUG/MINOR: hapee/da: fixed bug when using binary version of database - BUG/BUILD: hapee/da: added preprocessed source code generation for *.cpp files - BUILD: hapee/da: repaired build in case of using old DeviceAtlas library - MINOR: hapee/da: add function that allow data reload - MINOR: hapee/da: add spin locking - MINOR: hapee/da: add support for loading a precompiled json data - MEDIUM: hapee/da: Revert "MEDIUM: da: update module to handle schedule mode." - MEDIUM: hapee/51d: support data reload for 51Degrees V4 engine - MINOR: hapee/51d: add function that returns path to 51Degrees data file - MINOR: hapee/51d: add function that allow data reload - BUG/MINOR: hapee/51d: add spin locking - BUILD: hapee/51d: fix error when building with 51Degrees enabled - BUG/MEDIUM: hapee/51d: fix a segfault on exit when 51d configuration is not loaded - MEDIUM: hapee/51d: use fiftyoneDegreesProvider to access the pool and dataset - MINOR: hapee: Update backports list - MINOR: epoll: permit to mask certain specific events - CLEANUP: quic: remove unused prototype - BUG/MINOR: stream: Properly handle "on-marked-up shutdown-backup-sessions" - BUG/MINOR: ssl: put ssl_sock_load_ca under SSL_NO_GENERATE_CERTIFICATES - BUG/MINOR: quic: do not increase congestion window if app limited - BUG/MEDIUM: mux-h1: Properly close H1C if an error is reported before sending data - BUILD: quic: Move an ASSUME_NONNULL() for variable which is not null - MINOR: quic: Add a BUG_ON() on quic_tx_packet refcount - BUG/MINOR: quic: ensure a detached coalesced packet can't access its neighbours - BUG/MINOR: init: set HAPROXY_STARTUP_VERSION from the variable, not the macro - BUG/MAJOR: log/sink: possible sink collision in sink_new_from_srv() - BUG/MAJOR: quic: reject too large CRYPTO frames - BUG/MEDIUM: promex: Use right context pointers to dump backends extra-counters - BUG/MEDIUM: stktable: fix missing lock on some table converters - BUG/MINOR: quic: reject NEW_TOKEN frames from clients - BUG/MINOR: stktable: fix big-endian compatiblity in smp_to_stkey() - BUG/MEDIUM: hapee/modules: fix invalid pool_free() in stream_new() - BUILD: hapee: ERR=1 broken with cfgcond.c - MINOR: hapee: add a .hapee directory to list backporting notes - BUG/MEDIUM: h1-htx: Properly handle bodyless messages - BUG/MEDIUM: promex/resolvers: Don't dump metrics if no nameserver is defined - BUG/MINOR: mux-quic: handle closure of uni-stream - MINOR: mux-quic: change return value of qcs_attach_sc() - MINOR: mux-quic: add traces on sd attach - BUG/MINOR: mux-quic: fix wakeup on qcc_set_error() - MINOR: config: Alert about extra arguments for errorfile and errorloc - BUG/MINOR: log: Allow to use if/unless conditionnals for do-log action - BUG/MEDIUM: mux-quic: do not attach on already closed stream - BUG/MAJOR: mux-quic: properly fix BUG_ON on empty STREAM emission - Revert "BUG/MAJOR: mux-quic: fix BUG_ON on empty STREAM emission" - BUG/MEDIUM: mux-h2: Count copied data when looping on RX bufs in h2_rcv_buf() - BUG/MAJOR: mux-quic: fix BUG_ON on empty STREAM emission - DOC: config: add missing "track-sc0" in action keywords matrix - BUG/MINOR: stats: fix segfault caused by uninitialized value in "show schema json" - BUG/MEDIUM: queue: Make process_srv_queue return the number of streams - MINOR: hlua: rename "tune.lua.preserve-smp-bool" to "tune.lua.bool-sample-conversion" - BUG/MINOR: h2/rhttp: fix HTTP2 conn counters on reverse - CLEANUP: mux-quic: remove dead err label in qcc_build_frms() - BUG/MEDIUM: mux-quic: prevent BUG_ON() by refreshing frms on MAX_DATA - REGTESTS: fix lua-based regtests using tune.lua.smp-preserve-bool - MINOR: hlua: add option to preserve bool type from smp to lua - DOC: config: add "tune.lua.burst-timeout" to the list of global parameters - DOC: config: reorder "tune.lua.*" keywords by alphabetical order - DOC: config: add example for server "track" keyword - MINOR: mux-quic: hide traces when woken up on pacing only - MINOR: trace: implement tracing disabling API - MEDIUM: mux-quic: remove pacing specific code on qcc_io_cb - MEDIUM/OPTIM: mux-quic: do not rebuild frms list on every send - MINOR: mux-quic: split STREAM and RS/SS emission - MINOR: mux-quic: extract code to build STREAM frames list - MEDIUM/OPTIM: mux-quic: implement purg_list - MEDIUM/OPTIM: mux-quic: define a recv_list for demux resumption - MINOR: mux-quic: refactor wait-for-handshake support - MINOR: quic: add traces - CLEANUP: mux-quic: remove unused qcc member send_retry_list - BUG/MEDIUM: mux-quic: do not mix qcc_io_send() return codes with pacing - BUILD: debug: only dump/reset glitch counters when really defined - BUG/MEDIUM: queues: Do not use pendconn_grab_from_px(). - BUG/MEDIUM: queues: Make sure we call process_srv_queue() when leaving - BUG/MEDIUM: stconn: Only consider I/O timers to update stream's expiration date - CLEANUP: quic: Rename some BBR functions in relation with bw probing - BUG/MINOR: quic: missing Startup accelerating probing bw states - REGTESTS: ssl: add a PEM with mix of LF and CRLF line endings - BUG/MINOR: cli: cli_snd_buf: preserve \r\n for payload lines - BUG/MINOR: quic: too permissive exit condition for high loss detection in Startup (BBR) - BUG/MINOR: quic: fix the wrong tracked recovery start time value - CLEANUP: quic: remove a wrong comment about ->app_limited (drs) - MINOR: quic: reduce the private data size of QUIC cc algos - BUG/MINOR: quic: reduce packet losses at least during ProbeBW_CRUISE (BBR) - BUG/MINOR: quic: underflow issue for bbr_inflight_hi_from_lost_packet() - BUG/MINOR: quic: remove max_bw filter from delivery rate sampling - BUG/MINOR: quic: wrong bbr_target_inflight() implementation - BUG/MINOR: quic: fix BBB max bandwidth oscillation issue. - BUG/MINOR: quic: wrong logical statement in in_recovery_period() (BBR) - MINOR: window_filter: rely on the time to update the filter samples (QUIC/BBR) - MINOR: hapee: add the module() predicate - MINOR: ssl/cli: add -A to the 'show ssl sni' command description - MINOR: ssl/cli: allow to filter expired certificates with 'show ssl sni' - MINOR: ssl: add utils functions to extract X509 notAfter date - MINOR: ssl/cli: add negative filters to "show ssl sni" - CLEANUP: ssl: fix comment in 'show ssl sni' - DOC: management: fix typos and paragraph ordering in 'show ssl sni' - MEDIUM: ssl/cli: "show ssl sni" list the loaded SNI in frontends - MINOR: ssl: add notBefore and notAfter utility functions - BUG/MINOR: hlua_fcn: restore server pairs iterator pointer consistency - BUG/MINOR: server-state: Fix expiration date of srvrq_check tasks - BUG/MINOR: http-fetch: Ignore empty argument string for query() - BUG/MEDIUM: stats/server: use watcher to track server during stats dump - MINOR: list: define a watcher type - BUG/MINOR: stats: decrement srv refcount on stats-file release - BUG/MINOR: resolvers: handle a possible strdup() failure - BUG/MINOR: ssl_crtlist: handle a possible strdup() failure - BUG/MINOR: namespace: handle a possible strdup() failure - BUG/MEDIUM: mworker: report status, if daemonized master fails - BUG/MEDIUM: startup: report status if daemonized process fails - BUG/MEDIUM: startup: don't daemonize if started with -c - BUG/MINOR: startup: fix error path for master, if can't open pidfile - BUG/MINOR: mworker: fix -D -W -sf/-st modes - BUG/MINOR: mworker: don't save program PIDs in oldpids - BUG/MINOR: mux-h2: fix expression when detecting excess of CONTINUATION frames - MINOR: mux-h2/glitches: add a description to the H2 glitches - CLEANUP: mux-h2/traces: reword certain ambiguous traces - MINOR: mux-h2/traces: add a missing trace on negative initial window size - BUILD: debug: fix build issues in COUNT_IF() with -Wunused-value - BUG/MINOR: debug: COUNT_IF() should return true/false - DOC: config: fix confusing init-state examples - BUG/MINOR: config: Fix parsing of accept-invalid-http-{request,response} - BUG/MEDIUM: mux-h2: make sure not to touch dummy streams when sending WU - BUG/MINOR: quic: remove startup alert if GSO unsupported - BUG/MINOR: quic: remove startup alert if conn socket-owner unsupported - BUG/MEDIUM: mux-quic: remove pacing status when everything is sent - BUG/MINOR: init: do not call fork_poller() for non-forked processes - BUG/MEDIUM: init: make sure only daemonized processes change their session - BUG/MINOR: quic: fix bbr_inflight() calls with wrong gain value - BUG/MINOR: startup: fix pidfile creation - BUG/MINOR: startup: close pidfd and free global.pidfile in handle_pidfile() - BUG/MINOR: signal: register default handler for SIGINT in signal_init() - BUILD: quic: fix a build error about an non initialized timestamp - BUG/MINOR: h1-htx: Use default reason if not set when formatting the response - BUG/MEDIUM: http-ana: Reset request flag about data sent to perform a L7 retry - BUG/MEDIUM: quic: prevent stream freeze on pacing - BUG/MEDIUM: event_hdl: fix uninitialized value in async mode when no data is provided - BUG/MINOR: improve BBR throughput on very fast links - BUG/MINOR: log: fix lf_text() behavior with empty string - MINOR: proxy: Add support of 421-Misdirected-Request in retry-on status - BUG/MEDIUM: sock: Remove FD_POLL_HUP during connect() if FD_POLL_ERR is not set - MINOR: hapee/modules: report the per-stream allocated size for each module - BUG/MEDIUM: hapee: prevent the module file name being overwritten - MEDIUM: hapee: HAPEE_MODULE_DECLARE() allows to declare an HAPEE module - BUG/MINOR: hapee: Makefile: bad substitution for MODVERSION variable - BUG/MINOR: hapee: relax __vers symbol check - BUG/MINOR: hapee/modules: can't load modules with USE_OBSOLETE_LINKER - BUG/MINOR: hapee: remove leading \n on __vers error - MEDIUM: hapee: warn on unsupported initcalls - BUG/MINOR: hapee: forbid to load a module twice - HAPEE: udp: update structs and functions required for the UDP module - HAPEE: makefile: automatically build objects in addons/hapee_* - HAPEE: makefile: update the cleanup rule to also remove *.i from addons - HAPEE: addons: quic CID in -vv - HAPEE: addons: adds quic CID generator to interop with packetshield - MEDIUM: hapee: does not pass OPTION_LDFLAGS to modules - MINOR: hapee/modules: check if we generate the API hash correctly - BUG/MINOR: hapee/modules: adjust include match() in gen-modules-config-h.awk - BUG/MINOR: hapee/modules: initialize the module head list - BUILD: hapee/modules: select either md5 or md5sum - MEDIUM: hapee/modules: load the STG_REGISTER initcalls - BUG/MINOR: hapee/modules: display detailed error message on mod_init() failure - MINOR: hapee/modules: add a new label MODULES_LOCK to the lock_label enum - MINOR: hapee/modules: add the ability to register variable and functions. - MEDIUM: hapee/modules: 'modules list' on the cli shows currently loaded modules - MINOR: hapee/modules: terminate properly loaded modules if possible - MEDIUM: hapee/modules: add memory reservation support for the modules - MINOR: hapee: change URLs for 3.1r1 - BUILD: hapee/modules: update HAPEE version macro to 3.1r1 - BUILD: hapee/modules: add macros to compute numerical value of a HAPEE version - BUILD: hapee/modules: add version of the module in the defines - MEDIUM: hapee/modules: add modules support