#2025/04/11 : 2.9r1 (1.0.0-332.716)

• BUG/MEDIUMsamplefix risk of overflow when replacing multiple regex back-refs

#2025/02/19 : 2.9r1 (1.0.0-331.715)

• BUG/MEDIUMspoeDon't wakeup idle applets in loop during stopping
• BUG/MINORspoeAllow applet creation when closing the last one during stopping
• BUG/MINORspoeCheck the shared waiting queue to shut applets during stopping
• BUG/MEDIUMsslchosing correct certificate using RSA-PSS with TLSv1.3

#2025/02/17 : 2.9r1 (1.0.0-330.711)

• HAPEEsslenable USE_ENGINE automatically when OpenSSL < 3.0
• BUG/MINORstartuphap_register_feature() fix for partial feature name
• MINORstartupallow hap_register_feature() to enable a feature in the list

#2025/01/28 : 2.9r1 (1.0.0-330.708)

• MINORhapeeUpdate backports list
• MINORepollpermit to mask certain specific events
• BUG/MINORstreamProperly handle on-marked-up shutdown-backup-sessions
• BUG/MINORsslput ssl_sock_load_ca under SSL_NO_GENERATE_CERTIFICATES
• BUG/MINORquicdo not increase congestion window if app limited

#2025/01/23 : 2.9r1 (1.0.0-330.703)

• BUG/MEDIUMpromexUse right context pointers to dump backends extra-counters
• BUG/MEDIUMmux-h1Properly close H1C if an error is reported before sending data
• BUILDquicMove an ASSUME_NONNULL() for variable which is not null
• MINORquicAdd a BUG_ON() on quic_tx_packet refcount
• BUG/MINORquicensure a detached coalesced packet can't access its neighbours
• BUG/MINORinitset HAPROXY_STARTUP_VERSION from the variable, not the macro
• BUG/MAJORlog/sinkpossible sink collision in sink_new_from_srv()
• BUG/MAJORquicreject too large CRYPTO frames
• BUG/MEDIUMstktablefix missing lock on some table converters
• BUG/MINORquicreject NEW_TOKEN frames from clients
• BUG/MINORstktablefix big-endian compatiblity in smp_to_stkey()

#2025/01/09 : 2.9r1 (1.0.0-330.692)

• BUG/MEDIUMpromex/resolversDon't dump metrics if no nameserver is defined
• BUG/MEDIUMh1-htxProperly handle bodyless messages
• MINORconfigAlert about extra arguments for errorfile and errorloc
• DOCconfigadd missing track-sc0 in action keywords matrix
• BUG/MEDIUMqueueMake process_srv_queue return the number of streams
• BUG/MINORh2/rhttpfix HTTP2 conn counters on reverse
• DOCconfigadd tune.lua.burst-timeout to the list of global parameters
• DOCconfigreorder tune.lua.* keywords by alphabetical order
• DOCconfigadd example for server track keyword
• BUG/MEDIUMqueuesDo not use pendconn_grab_from_px().
• BUG/MEDIUMqueuesMake sure we call process_srv_queue() when leaving
• BUG/MEDIUMstconnOnly consider I/O timers to update stream's expiration date
• BUG/MEDIUMclockmake sure now_ms cannot be TICK_ETERNITY
• BUG/MEDIUMstconnDon't forward shut for SC in connecting state
• BUG/MEDIUMquicprevent crash due to CRYPTO parsing error
• BUG/MINORquicrepeat packet parsing to deal with fragmented CRYPTO
• MINORquicextend return value of CRYPTO parsing
• MINORquicuse dynamically allocated frame on parsing
• MINORquicsimplify qc_parse_pkt_frms() return path
• BUG/MEDIUMquicsupport wait-for-handshake
• BUG/MINORstreamunblock stream on wait-for-handshake completion
• MINORquicnotify connection layer on handshake completion
• BUG/MEDIUMpatternprevent uninitialized reads in pat_match_{str,beg}

#2024/12/17 : 2.9r1 (1.0.0-330.669)

• MINORssl/cliadd -A to the 'show ssl sni' command description
• MINORssl/cliallow to filter expired certificates with 'show ssl sni'
• MINORssladd utils functions to extract X509 notAfter date
• MINORssl/cliadd negative filters to show ssl sni
• CLEANUPsslfix comment in 'show ssl sni'
• DOCmanagementfix typos and paragraph ordering in 'show ssl sni'
• MEDIUMssl/clishow ssl sni list the loaded SNI in frontends
• MINORssladd notBefore and notAfter utility functions

#2024/12/16 : 2.9r1 (1.0.0-330.661)

• BUG/MINORserver-stateFix expiration date of srvrq_check tasks
• BUG/MINORquicremove startup alert if conn socket-owner unsupported
• BUG/MINORsignalregister default handler for SIGINT in signal_init()
• BUG/MINORh1-htxUse default reason if not set when formatting the response
• BUG/MEDIUMhttp-anaReset request flag about data sent to perform a L7 retry
• BUG/MEDIUMevent_hdlfix uninitialized value in async mode when no data is provided

#2024/12/02 : 2.9r1 (1.0.0-330.655)

#2024/11/27 : 2.9r1 (1.0.0-329.655)

• BUG/MEDIUMsockRemove FD_POLL_HUP during connect() if FD_POLL_ERR is not set
• BUG/MEDIUMhttp-anaDon't release too early the L7 buffer
• DEVlags/show-sess-to-flagsProperly handle fd state on server side
• BUG/MAJORquicfix wrong packet building due to already acked frames

#2024/11/22 : 2.9r1 (1.0.0-329.651)

• BUG/MAJORmux-h1Properly handle wrapping on obuf when dumping the first-line
• BUG/MEDIUMpools/memprofilealways clean stale pool info on pool_destroy()
• MINORactivity/memprofileoffer a function to unregister stale info
• BUG/MINORactivity/memprofilereinitialize the free calls on DSO summary
• BUG/MEDIUMwdtfix the stuck detection for warnings
• BUG/MEDIUMdebugdon't set the STUCK flag from debug_handler()
• DOCconfigImprove documentation of tune.http.maxhdr directive
• BUG/MEDIUMh3Increase max number of headers when sending headers
• BUG/MEDIUMh3Properly limit the number of headers received
• BUG/MEDIUMmux-h2Check the number of headers in HEADERS frame after decoding
• BUG/MEDIUMmux-h2Increase max number of headers when encoding HEADERS frames
• BUG/MINORhttp-anaAdjust the server status before the L7 retries
• DOCconfigurationwrap long line for strstr() conditional expression
• DOCconfigurationexplain quotes and spaces in conditional blocks
• DOCluafix yield-dependent methods expected contexts
• DOCconfigMove wait_end in section about internal samples
• DOCconfigSlightly improve the %Tr documentation
• BUG/MINORhttp_anaReport -1 for %Tr for invalid response only
• DOCconfigFix a typo in 1.3.1. The Request line
• BUG/MINORpeersmake sure to always apply offsets to now_ms in expiration
• BUG/MINORmux_quicmake sure to always apply offsets to now_ms in expiration
• BUG/MEDIUMmailersmake sure to always apply offsets to now_ms in expiration
• BUG/MEDIUMchecksmake sure to always apply offsets to now_ms in expiration
• BUG/MINORDon't report early srv aborts on request forwarding in DONE state
• BUG/MEDIUMmux-h2Don't send RST_STREAM frame for streams with no ID

#2024/11/13 : 2.9r1 (1.0.0-329.626)

• BUG/MEDIUMresolversInsert a non-executed resulution in front of the wait list
• BUG/MINORclidon't show sockpairs in HAPROXY_CLI and HAPROXY_MASTER_CLI

#2024/11/07 : 2.9r1 (1.0.0-329.624)

• MINORdebugmove the recover now warn message after the optional notes
• DEBUGwdtmake the blocked traffic warning delay configurable
• DEBUGclimake it possible for debug dev loop to trigger warnings
• DEBUGwdtbetter detect apparently locked up threads and warn about them
• MINORdebugadd a function to dump a stuck thread
• MINORwdtmove the local timers to a struct
• MINORdebugremove the redundant process.thread_info array from post_mortem
• MINORdebugalso add fdtab and acitvity to struct post_mortem
• MINORdebugalso add a pointer to struct global to post_mortem
• MINORdebugdo not limit backtraces to stuck threads
• MINORdebugprint gdb hints when crashing
• MINORstreammaintain a counter of the number of active streams.
• MINORconnectionadd new sample fetch functions fc_err_name and bc_err_name
• MINORrawsockset connection error codes when returning from recv/send/splice
• MINORconnectionadd more connection error codes to cover common errno
• MINORcli/debugshow dev: add cmdline and version
• BUG/MEDIUMpromexFix dump of extra counters
• MINORtcpcheckAdd support for an option host header value for httpchk option
• CLEANUPconnectionproperly name the CO_ER_SSL_FATAL enum entry
• DOCconfigdocument connection error 44 (reverse connect failure)
• MINORstreamSave last evaluated rule on invalid yield
• BUG/MINORhttp-anaReport internal error if an action yields on a final eval
• BUG/MEDIUMmux-h1Fix how timeouts are applied on H1 connections
• BUG/MINORssl/cli'set ssl cert' does not check the transaction name correctly
• BUG/MINORtracestop rewriting argv with -dt

#2024/10/24 : 2.9r1 (1.0.0-329.599)

• MINORcliremove non-printable characters from 'debug dev fd'
• MINORdebugstore important pointers in post_mortem
• MINORdebugplace the post_mortem struct in its own section.
• MINORdebugplace a magic pattern at the beginning of post_mortem
• MINORpoolsexport the pools variable
• BUILDdebugsilence a build warning with threads disabled
• BUG/MEDIUMserverfix race on servers_list during server deletion
• BUG/MINORstconnDon't disable 0-copy FF if EOS was reported on consumer side
• BUG/MINORhttp-anaFix wrong client abort reports during responses forwarding
• BUG/MEDIUMstconnReport blocked send if sends are blocked by an error
• BUG/MINORserverfix dynamic server leak with check on failed init
• BUG/MINORmux-quicdo not close STREAM with empty FIN if no data sent
• MINORactivity/memprofileshow per-DSO stats
• BUG/MEDIUMconnection/http-reusefix address collision on unhandled address families
• MINORactivity/memprofilealways return other bin on NULL return address
• BUG/MEDIUMmux-h2Remove H2S from send list if data are sent via 0-copy FF
• BUG/MINORmworkerfix mworker-max-reloads parser
• DOCconfigfix rfc7239 forwarded typo in desc
• BUG/MEDIUMquicavoid freezing 0RTT connections
• BUG/MINORquicavoid leaking post handshake frames
• REGTESTSNever reuse server connection in http-messaging/truncated.vtc
• BUG/MAJORfilters/htxAdd a flag to state the payload is altered by a filter
• BUG/MEDIUMstconnCheck FF data of SC to perform a shutdown in sc_notify()
• BUG/MINORhttp-anaDon't report a server abort if response payload is invalid
• BUG/MEDIUMstconnWait iobuf is empty to shut SE down during a check send
• BUG/MINORhttpclientreturn NULL when no proxy available during httpclient_new()
• BUG/MEDIUMqueuemake sure never to queue when there's no more served conns
• BUG/MEDIUMmux-quicensure timeout server is active for short requests
• BUG/MEDIUMhluaproperly handle sample func errors in hlua_run_sample_{fetch,conv}()
• BUG/MEDIUMhluamake hlua_ctx_renew() safe
• MEDIUMdebugon panic, make the target thread automatically allocate its buf
• MINORdebugreplace ha_thread_dump() with its two components
• MINORdebugmake ha_thread_dump_done() take the pointer to be used
• MINORdebugslightly change the thread_dump_pointer signification
• MINORdebugsplit ha_thread_dump() in two parts
• MINORchunkdrop the global thread_dump_buffer
• MINORdebugmake mark_tainted() return the previous value

#2024/10/21 : 2.9r1 (1.0.0-329.562)

• MINORargadd an argument type for identifier
• BUG/MEDIUMserverserver stuck in maintenance after FQDN change

#2024/10/07 : 2.9r1 (1.0.0-329.560)

• BUG/MINORproxyfix option tcplog clf invalid free

#2024/10/02 : 2.9r1 (1.0.0-329.559)

• BUG/MINORhttp-anaDisable fast-fwd for unfinished req waiting for upgrade
• BUG/MINORmux-h1Fix condition to set EOI on SE during zero-copy forwarding
• BUG/MEDIUMqueuealways dequeue the backend when redistributing the last server
• MINORservermake srv_shutdown_sessions() call pendconn_redistribute()
• BUG/MINORqueuemake sure that maintenance redispatches server queue
• BUG/MEDIUMstreammake stream_shutdown() async-safe
• MINORtaskdefine two new one-shot events for use with WOKEN_OTHER or MSG
• BUG/MINORquicprevent freeze after early QCS closure
• BUG/MEDIUMquichandle retransmit for standalone FIN STREAM
• MINORquicimplement function to check if STREAM is fully acked
• MINORquicconvert qc_stream_desc release field to flags
• BUG/MINORcfgparse-globalfix allowed args number for setenv
• BUG/MINORservermake sure the HMAINT state is part of MAINT
• BUG/MEDIUMcliDeadlock when setting frontend maxconn
• REGTESTSshorten a bit the delay for the h1/h2 upgrade test
• REGTESTSh1/h2Update script testing H1/H2 protocol upgrades
• BUG/MEDIUMmux-h1/mux-h2Reject upgrades with payload on H2 side only
• MINORmux-h1Set EOI on SE during demux when both side are in DONE state
• BUG/MINORh2reject extended connect for h2c protocol
• BUG/MINORh1do not forward h2c upgrade header token
• BUG/MINORssl_sockfix xprt_set_used() to properly clear the TASK_F_USR1 bit
• BUG/MINORcfgparse-listenfix option httpslog override warning message

#2024/09/17 : 2.9r1 (1.0.0-329.537)

• BUG/MEDIUMcfgparse-listenfix option tcplog regression
• BUG/MINORfix missing 'option httpslog' overrides previous 'option tcplog clf'... detection
• BUG/MINORfix missing log-format overrides previous 'option tcplog clf'... detection
• BUG/MEDIUMpromexWait to have the request before sending the response
• BUG/MEDIUMcache/statsWait to have the request before sending the response
• DOCconfigExplicitly list relaxing rules for accept-invalid-http-* options
• BUG/MEDIUMqueueimplement a flag to check for the dequeuing
• BUG/MINORclockvalidate that now_offset still applies to the current date
• BUG/MINORclockmake time jump corrections a bit more accurate
• BUG/MINORpollingfix time reporting when using busy polling
• MEDIUMh1Accept invalid T-E values with accept-invalid-http-response option
• BUG/MINORpatterndo not leave a leading comma on set error messages

#2024/09/09 : 2.9r1 (1.0.0-329.525)

• HAPEEupdate list of backported patches (tcplog clf)
• MINORconfigCreated env variables for http and tcp clf formats
• MINORImplements new log format of option tcplog clf
• BUG/MINORh1-htxDon't flag response as bodyless when a tunnel is established
• BUG/MAJORmux-h1Wake SC to perform 0-copy forwarding in CLOSING state
• BUG/MEDIUMpatternprevent UAF on reused pattern expr
• BUG/MINORpatternprevent const sample from being tampered in pat_match_beg()
• BUG/MEDIUMclockdetect and cover jumps during execution
• REGTESTSfix random failures with wrong_ip_port_logging.vtc under load
• DOCconfigurationplace the HAPROXY_HTTP_LOG_FMT example on the correct line
• BUG/MINORquicToo short datagram during packet building failures (aws-lc only)
• BUG/MINORquicCrash from trace dumping SSL eary data status (AWS-LC)
• BUG/MEDIUMquicalways validate sender address on 0-RTT
• MINORquicAdd trace for QUIC_EV_CONN_IO_CB event.
• MINORquicImplement qc_ssl_eary_data_accepted().
• MINORquicModify NEW_TOKEN frame structure (qf_new_token struct)
• BUG/MINORquicMissing incrementation in NEW_TOKEN frame builder
• MINORquicToken for future connections implementation.
• MEDIUMssl/quicimplement quic crypto with EVP_AEAD
• MINORquicImplement quic_tls_derive_token_secret().
• MINORtoolsImplement ipaddrcpy().
• BUG/MEDIUMclockalso update the date offset on time jumps

#2024/09/04 : 2.9r1 (1.0.0-329.503)

• BUG/MINORcfgparse-globalremove tune.fast-forward from common_kw_list
• DOCconfigcorrect the table for option tcplog
• BUG/MINORpatternpat_ref_set: return 0 if err was found
• BUG/MINORpatternpat_ref_set: fix UAF reported by coverity
• BUG/MINORh3properly reject too long header responses
• BUG/MINORproto_uxstdelete fd from fdtab if listen() fails
• BUG/MINORmux-quicdo not send too big MAX_STREAMS ID
• REGTESTSmclitest the pipelined commands on master CLI
• BUG/MEDIUMmworker/clifix pipelined modes on master CLI
• MINORchannelimplement ci_insert() function
• BUG/MINORproto_tcpkeep error msg if listen() fails
• BUG/MINORproto_tcpdelete fd from fdtab if listen() fails
• BUG/MINORquic/tracemake quic_conn_enc_level_init() emit NEW not CLOSE
• BUG/MINORtrace/quicmake qconn selectable as a lockon criterion
• BUG/MINORtraceautomatically start in waiting mode with "start <evt>"
• BUG/MEDIUMtracefix null deref in lockon mechanism since TRACE_ENABLED()
• BUG/MINORtrace/quicpermit to lock on frontend/connect/session etc
• BUG/MINORtrace/quicenable conn/session pointer recovery from quic_conn
• BUG/MINORfcgi-apphandle a possible strdup() failure
• BUG/MEDIUMmux-h2Propagate term flags to SE on error in h2s_wake_one_stream
• BUG/MEDIUMh2Only report early HTX EOM for tunneled streams
• BUG/MEDIUMhttp-anaReport error on write error waiting for the response
• BUG/MEDIUMquicprevent conn freeze on 0RTT undeciphered content
• BUG/MINORstconnbs.id and fs.id had their dependencies incorrect
• BUILDmux-ptUse the right name for the sedesc variable
• BUG/MEDIUMmux-pt/mux-h1Release the pipe on connection error on sending path
• BUG/MEDIUMstconnReport error on SC on send if a previous SE error was set
• BUG/MEDIUMserver/addrfix tune.events.max-events-at-once event miss and leak

#2024/09/03 : 2.9r1 (1.0.0-328.475)

• BUG/MINORCrash on O-RTT RX packet after dropping Initial pktns
• BUG/MINORquicToo shord datagram during O-RTT handshakes (aws-lc only)
• BUG/MAJORmux-h2always clear MUX_MFULL and DEM_MROOM when clearing the mbuf
• MINORmux-h2try to clear DEM_MROOM and MUX_MFULL at more places
• BUG/MEDIUMmux-h1Properly handle empty message when an error is triggered
• BUG/MINORquicunexploited retransmission cases for Initial pktns.
• BUG/MEDIUMcliAlways release back endpoint between two commands on the mcli
• BUG/MEDIUMmux-ptNever fully close the connection on shutdown
• BUG/MEDIUMstreamPrevent mux upgrades if client connection is no longer ready
• BUG/MEDIUMmux-h2Set ES flag when necessary on 0-copy data forwarding
• DOCquicfix default minimal value for max window size

#2024/08/02 : 2.9r1 (1.0.0-328.464)

• HAPEEDOCfix gptstr for dconv parsing
• MEDIUMh1allow to preserve keep-alive on T-E + C-L
• BUG/MEDIUMinitfix fd_hard_limit default in compute_ideal_maxconn
• MEDIUMinitset default for fd_hard_limit via DEFAULT_MAXFD (take #2)
• BUG/MEDIUMqueuedeal with a rare TOCTOU in assign_server_and_queue()
• MINORqueueadd a function to check for TOCTOU after queueing
• BUG/MEDIUMjwtClear SSL error queue on error when checking the signature
• BUG/MINORquicLack of precision when computing K (cubic only cc)
• BUG/MINORcliAtomically inc the global request counter between CLI commands
• BUG/MINORserverDon't warn fallback IP is used during init-addr resolution
• BUG/MINORstick-tablefix crash for src_inc_gpc() without stkcounter
• DOCconfigimprove the http-keep-alive section
• DOCconfigurationissuers-chain-path not compatible with OCSP
• BUG/MAJORmux-h2force a hard error upon short read with pending error
• BUG/MEDIUMssl_sockfix deadlock in ssl_sock_load_ocsp() on error path
• BUG/MEDIUMdebug/clifix show threads crashing with low thread counts
• BUG/MINORsessionEval L4/L5 rules defined in the default section
• BUG/MEDIUMbwlimBe sure to never set the analyze expiration date in past
• BUG/MEDIUMspoeBe sure to create a SPOE applet if none on the current thread
• BUG/MEDIUMh1Reject empty Transfer-encoding header
• BUG/MINORh1Reject empty coding name as last transfer-encoding value
• BUG/MINORh1Fail to parse empty transfer coding names
• BUG/MINORjwtfix variable initialisation
• DOCconfigurationupdate maxconn description
• BUG/MINORjwtdon't try to load files with HMAC algorithm
• HAPEEDOC: document the GPTSTR extensions in configuration.txt

#2024/07/03 : 2.9r1 (1.0.0-328.438)

• MINORhapeeupdate the notes to reflect backport of RLIMIT_DATA
• MINORhapeerefresh the list of backported commits
• MINORinituse RLIMIT_DATA instead of RLIMIT_AS
• MINORhapeeupdate backports list
• BUG/MINORpromexRemove Help prefix repeated twice for each metric
• BUG/MINORpromexSkip resolvers metrics when there is no resolver section
• DOCconfigurationmore details about the master-worker mode
• BUG/MEDIUMquicfix possible exit from qc_check_dcid() without unlocking
• BUG/MINORquicfix race-condition on trace for CID retrieval
• BUG/MINORquicfix race condition in qc_check_dcid()
• BUG/MEDIUMquicfix race-condition in quic_get_cid_tid()
• BUG/MEDIUMh3ensure the :scheme pseudo header is totally valid
• BUG/MEDIUMh3ensure the :method pseudo header is totally valid
• MINORactivitymake the memory profiling hash size configurable at build time
• BUG/MEDIUMstick-tableDecrement the ref count inside lock to kill a session
• BUG/MINORhluareport proper context upon error in hlua_cli_io_handler_fct()
• BUG/MINORquicfix BUG_ON() on Tx pkt alloc failure
• BUG/MINORmux-quicfix crash on qcs SD alloc failure
• BUG/MINORh3fix crash on STOP_SENDING receive after GOAWAY emission
• DOCapi/event_hdlsmall updates, fix an example and add some precisions
• SCRIPTSgit-show-backportsdo not truncate git-show output
• DOCconfigurationfix alphabetical order of bind options
• BUG/MEDIUMproxyfix email-alert invalid free
• REGTESTSsslfix some regtests 'feature cmd' start condition
• DOCmanagementrename show stats domain cli dns to resolvers
• DOC/MINORmanagementadd -dZ option
• DOC/MINORmanagementadd missed -dR and -dv options
• BUG/MAJORmux-h1Prevent any UAF on H1 connection after draining a request
• BUG/MINORproxyfix header_unique_id leak on deinit()
• BUG/MINORproxyfix source interface and usesrc leaks on deinit()
• BUG/MINORproxyfix dyncookie_key leak on deinit()
• BUG/MINORproxyfix check_{command,path} leak on deinit()
• BUG/MINORproxyfix email-alert leak on deinit()
• BUG/MINORproxyfix log_tag leak on deinit()
• BUG/MINORproxyfix server_id_hdr_name leak on deinit()
• MINORlogfix http-send-name-header ignore warning message
• BUG/MINORquicfix computed length of emitted STREAM frames
• BUG/MEDIUMsslbad auth selection with TLS1.2 and WolfSSL

#2024/06/10 : 2.9r1 (1.0.0-327.400)

• CIscriptsreset backported changes on macOS version
• BUG/MEDIUMstick-tablesFix locking of updt_lock when trashing oldest entries
• BUG/MEDIUMsslwrong priority whem limiting ECDSA ciphers in ECDSA+RSA configuration
• CLEANUPhluasimplify ambiguous lua_insert() usage in hlua_ctx_resume()
• BUG/MINORhluafix leak in hlua_ckch_set() error path
• BUG/MINORhluaprevent LJMP in hlua_traceback()
• BUG/MINORhluafix unsafe hlua_pusherror() usage
• BUG/MINORhluadon't use lua_pushfstring() when we don't expect LJMP
• CLEANUPhluause hlua_pusherror() where relevant
• BUG/MINORquicprevent crash on qc_kill_conn()
• BUG/MEDIUMh1-htxDon't state interim responses are bodyless
• BUG/MINORhluause CertCache.set() from various hlua contexts
• BUG/MINORtoolsfix possible null-deref in env_expand() on out-of-memory
• BUG/MINORtcpcheckreport correct error in tcp-check rule parser
• BUG/MINORcfgparseremove the correct option on httpcheck send-state warning
• BUG/MINORactivityfix Delta_calls and Delta_bytes count
• BUG/MINORssl/ocspinit callback func ptr as NULL
• CLEANUPssl/ocspreadable ifdef in ssl_sock_load_ocsp
• DOCconfigadd %ID logformat alias alternative
• BUILDfderrno is also needed without poll()
• CIscriptsfix build of vtest regarding option -C
• CImodernize macos matrix
• REGTESTSacl_cli_spacesavoid a warning caused by undefined logs
• DOCconfigfix incorrect section reference about custom log format
• DOCquicspecify that connection migration is not supported
• BUG/MINORserverDon't reset resolver options on a new default-server line
• BUG/MINORhttp-htxSupport default path during scheme based normalization
• BUG/MINORquicadjust restriction for stateless reset emission
• MEDIUMconfigprevent communication with privileged ports
• BUG/MEDIUMstick-tablesmake sure never to create two same remote entries
• BUG/MEDIUMstick-tablesFix race with peers when killing a sticky session
• BUG/MEDIUMstick-tablesFix race with peers when trashing oldest entries
• BUILDquicfix unused variable warning when threads are disabled
• BUG/MEDIUMmux-quicCreate sedesc in same time of the QUIC stream
• BUG/MEDIUMquic_tlsprevent LibreSSL < 4.0 from negotiating CHACHA20_POLY1305
• BUG/MAJORquicCrash with TLS_AES_128_CCM_SHA256 (libressl only)
• BUG/MINORrhttpfix task_wakeup state
• BUG/MINORrhttpprevent listener suspend
• BUG/MEDIUMrhttpfix preconnect on single-thread
• BUG/MINORserverfree PROXY v2 TLVs on srv drop
• BUG/MINORconnectionparse PROXY TLV for LOCAL mode
• BUG/MINORhttp-anaDon't crush stream termination condition on internal error
• DOCconfigurationupdate the crt-list documentation
• CLEANUPssl/cliremove unused code in dump_crtlist_conf
• MEDIUMmux-h1Support C-L/T-E header suppressions when sending messages
• MINORmux-h1Add a flag to ignore the request payload
• BUG/MINORstatsDon't state the 303 redirect response is chunked
• BUG/MEDIUMfdprevent memory waste in fdtab array
• BUILDstick-tablesbetter mark the stktable_data as 32-bit aligned
• BUG/MEDIUMh1Reject CONNECT request if the target has a scheme
• BUG/MINORh1Check authority for non-CONNECT methods only if a scheme is found
• BUG/MEDIUMstick-tablesproperly mark stktable_data as packed
• BUG/MEDIUMhtxmark htx_sl as packed since it may be realigned
• BUG/MINORqpackfix error code reported on QPACK decoding failure
• BUG/MINORmux-quicfix error code on shutdown for non HTTP/3
• BUG/MINORlogsmp_rgs array issues with inherited global log directives
• DOCluafix filters.txt file location
• BUG/MINORcfgparseuse curproxy global var from config post validation
• BUG/MINORaclsupport built-in ACLs with acl() sample
• REGTESTadd tests for acl() sample fetch
• BUG/MINORhaproxyonly tid 0 must not sleep if got signal
• BUILDclockimprove check for pthread_getcpuclockid()
• BUG/MINORmworkerreintroduce way to disable seamless reload with -x /dev/null
• BUG/MINORh1fix detection of upper bytes in the URI
• BUG/MINORbackenduse cum_sess counters instead of cum_conn
• BUG/MINORfdmy_closefrom() on Linux could skip contiguous series of sockets
• BUG/MINORsockhandle a weird condition with connect()
• BUG/MINORstconnFix sc_mux_strm() return value

#2024/05/03 : 2.9r1 (1.0.0-325.332)

#2024/04/29 : 2.9r1 (1.0.0-321.332)

• REGTESTScacheAdd test on 'vary' other than accept-encoding
• BUG/MEDIUMcacheVary not working properly on anything other than accept-encoding

#2024/04/19 : 2.9r1 (1.0.0-320.330)

• BUG/MINORserverfix slowstart behavior
• BUG/MEDIUMpeersFix exit condition when max-updates-at-once is reached
• BUG/MEDIUMspoeAlways retry when an applet fails to send a frame
• BUG/MEDIUMappletFix applet API to put input data in a buffer
• BUG/MEDIUMevportsdo not clear returned events list on signal
• BUG/MEDIUMstconnDon't forward channel data if input data must be filtered
• BUG/MEDIUMgrpcFix several unaligned 32/64 bits accesses
• MINORnet_helperAdd support for floats/doubles.
• CIrevert kernel addr randomization introduced in 3a0fc864
• BUG/MAJORstick-tablesfix race with peers in entry expiration
• BUG/MEDIUMpeers/tracefix crash when listing event types
• BUILDcachefix non-inline vs inline declaration mismatch to silence a warning
• BUG/MINORdebugmake sure DEBUG_STRICT=0 does work as documented
• BUG/MINORhttp-anaFix TX_L7_RETRY and TX_D_L7_RETRY values
• BUG/MEDIUMhttp-anaDeliver 502 on keep-alive for fressh server connection
• CLEANUPloglf_text_len() returns a pointer not an integer
• BUG/MINORloginvalid snprintf() usage in sess_build_logline()
• BUG/MINORtools/loginvalid encode_{chunk,string} usage
• BUG/MINORlogfix lf_text_len() truncate inconsistency
• BUG/MINORlisteneralways assign distinct IDs to shards
• BUG/MEDIUMquicdon't blindly rely on unaligned accesses
• BUG/MINORcliReport an error to user if command or payload is too big
• BUG/MAJORconnectionfix server used_conns with H2 + reuse safe
• BUG/MEDIUMhttp_anaignore NTLM for reuse aggressive/always and no H1
• BUG/MAJORserverdo not delete srv referenced by session
• MINORsessionrename private conns elements
• BUG/MEDIUMsslFix crash when calling update ssl ocsp-response when an update is ongoing
• BUG/MAJORocspSeparate refcount per instance and per store
• MEDIUMsslinitialize the SSL stack explicitely
• BUG/MEDIUMquicfix connection freeze on post handshake
• MEDIUMhtx/http-anaNo longer close connection on early HAProxy response
• MAJORmux-h1Drain requests on client side before shut a stream down
• MINORmux-h1Move all stuff to detach a stream in an internal function
• MINORmux-h1Move checks performed before a shutdown in a dedicated function
• BUG/MEDIUMserverfix dynamic servers initial settings
• BUG/MINORinitrelax LSTCHK_NETADM checks for non root
• BUG/MINORproxyfix logformat expression leak in use_backend rules

#2024/04/04 : 2.9r1 (1.0.0-320.293)

• MINORhapeeUpdate list of dropped commits
• BUG/MEDIUMstick-tableuse the update lock when reading tables from peers
• BUG/MEDIUMstconnDon't forward shutdown to SE if iobuf is not empty
• BUG/MINORbackendproperly handle redispatch 0
• BUG/MEDIUMstick-tablesfix a small remaining race in expiration task
• BUG/MINORlog/balancedetect if user tries to use unsupported algo
• DOCconfigbalance 'first' not usable in LOG mode
• BUG/MINORserverignore 'enabled' for dynamic servers
• MINORserverallow cookie for dynamic servers
• BUG/MINORserverfix persistence cookie for dynamic servers
• BUG/MINORsslDetect more 'ocsp-update' incompatibilities
• BUG/MINORsslWrong ocsp-update incompatibility error message
• BUILDsslfix build error on older compilers with openssl-3.2
• BUG/MINORserver'source' interface ignored from 'default-server' directive
• OPTIMhttp_extavoid useless copy in http_7239_extract_{ipv4,ipv6}
• BUG/MEDIUMmux-fcgiProperly handle EOM flag on end-of-trailers HTX block
• BUG/MINORmux-quicclose all QCS before freeing QCC tasklet
• BUG/MEDIUMsslFix crash in ocsp-update log function
• BUG/MINORsessionensure conn owner is set after insert into session
• BUG/MEDIUMspoeReturn an invalid frame on recv if size is too small
• CItemporarily adjust kernel entropy to work with ASAN/clang
• BUG/MINORspoeBe sure to be able to quickly close IDLE applets on soft-stop
• BUG/MEDIUMspoeDon't rely on stream's expiration to detect processing timeout
• BUG/MINORlistenerDon't schedule frontend without task in listener_release()
• BUG/MINORlistenerWake proxy's mngmt task up if necessary on session release
• BUG/MEDIUMhluastreams don't support mixing lua-load with lua-load-per-thread (2nd try)
• MINORhluause accessors for stream hlua ctx
• DEBUGluaprecisely identify if stream is stuck inside lua or not
• BUG/MINORhluafix missing lock in hlua_filter_delete()
• BUG/MINORhluamissing lock in hlua_filter_new()
• BUG/MINORhluasegfault when loading the same filter from different contexts
• CIgithubadd -DDEBUG_LIST to the default builds
• BUG/MINORsslfix possible ctx memory leak in sample_conv_aes_gcm()
• DOCconfigurationclarify ciphersuites usage (V2)
• BUILDsolarisfix compilation errors
• MINORquicalways use ncbuf for rx CRYPTO
• BUG/MEDIUMquicfix handshake freeze under high traffic
• BUG/MINORcfgparsereport proper location for log-format-sd errors
• BUG/MINORssl/clitypo in new ssl crl-file CLI description
• CIskip scheduled builds on forks
• BUG/MINORsinkfix a race condition in the TCP log forwarding code
• BUG/MINORhluadon't call ha_alert() in hlua_event_subscribe()
• BUG/MAJORhluaimproper lock usage with hlua_ctx_resume()
• BUG/MEDIUMhluaimproper lock usage with SET_SAFE_LJMP()
• BUG/MINORhluaimproper lock usage in hlua_filter_new()
• BUG/MINORhluaimproper lock usage in hlua_filter_callback()
• BUG/MINORhluafix possible crash in hlua_filter_new() under load
• BUG/MINORhluadon't use lua_tostring() from unprotected contexts
• BUG/MINORhluafix unsafe lua_tostring() usage with empty stack
• BUG/MINORtoolsseed the statistical PRNG slightly better
• MINORhluaBe able to disable logging from lua
• BUG/MINORhluaFix log level to the right value when set via TXN:set_loglevel
• BUG/MINORconfig/quicAlert about PROXY protocol use on a QUIC listener
• DOCconfigurationclarify ciphersuites usage
• BUG/MINORmux-h1Properly report when mux is blocked during a nego
• LICENSEhttp_extfix GPL license version
• LICENSEevent_hdlfix GPL license version
• BUG/MINORssl/cliduplicate cleaning code in cli_parse_del_crtlist
• BUG/MINORistonly store NUL byte on succeeded alloc
• BUG/MINORquicfix output of show quic
• BUG/MEDIUMcliWarn if pipelined commands are delimited by a \n
• MINORcliRemove useless loop on commands to find unescaped semi-colon
• BUG/MAJORserverfix stream crash due to deleted server
• BUG/MINORstatsdrop srv refcount on early release
• BUG/MINORistallocate nul byte on istdup
• MINORquicwarn on bind on multiple addresses if no IP_PKTINFO support
• DOCquicfix recommandation for bind on multiple address
• BUG/MEDIUMquicfix transient send error with listener socket
• BUG/MEDIUMhluaDon't loop if a lua socket does not consume received data
• BUG/MEDIUMhluaBe able to garbage collect uninitialized lua sockets
• BUG/MEDIUMappletImmediately free appctx on early error
• DOCquicMissing tuning setting in Global parameters
• BUG/MINORqpackreject invalid dynamic table capacity
• BUG/MINORqpackreject invalid increment count decoding
• BUG/MINORquicreject HANDSHAKE_DONE as server
• BUG/MINORquicreject unknown frame type
• MINORconnectionadd sample fetches to report per-connection glitches
• MINORmux-h2implement MUX_CTL_GET_GLITCHES
• MINORconnectionadd a new mux_ctl to report number of connection glitches
• MEDIUMmux-h2allow to set the glitches threshold to kill a connection
• MINORmux-h2always use h2c_report_glitch()
• MINORmux-h2count late reduction of INITIAL_WINDOW_SIZE as a glitch
• MINORmux-h2count excess of CONTINUATION frames as a glitch
• BUG/MINORmux-h2count rejected DATA frames against the connection's flow control
• MINORmux-h2add a counter of glitches on a connection
• BUG/MAJORssl/ocspcrash with ocsp when old process exit or using ocsp CLI
• BUG/MAJORpromexfix crash on deleted server
• BUG/MEDIUMmux-h2Don't report error on SE for closed H2 streams
• BUG/MEDIUMmux-h2Don't report error on SE if error is only pending on H2C
• BUG/MEDIUMmux-h2Only Report H2C error on read error if demux buffer is empty
• BUG/MEDIUMmux-h2Switch pending error to error if demux buffer is empty
• MINORmuxes/appletSimplify checks on options to disable zero-copy forwarding
• BUG/MAJORstconnCheck support for zero-copy forwarding on both sides
• MINORmuxesAnnounce support for zero-copy forwarding on consumer side
• MINORstconnAdd SE flag to announce zero-copy forwarding on consumer side
• MINORstconnRename SE_FL_MAY_FASTFWD and reorder bitfield
• CLEANUPstconnMove SE flags set by app layer at the end of the bitfield
• BUG/MEDIUMstconnDon't check pending shutdown to wake an applet up
• BUG/MEDIUMstconnAllow expiration update when READ/WRITE event is pending
• MINORquicAdd a counter for reordered packets
• MINORquicDynamic packet reordering threshold
• MINORquicUpdate K CUBIC calculation (RFC 9438)
• BUG/MEDIUMquicWrong K CUBIC calculation.
• BUG/MEDIUMsslFix crash when calling update ssl ocsp-response when an update is ongoing
• BUG/MEDIUMpoolfix rare risk of deadlock in pool_flush()
• BUILDaddress a few remaining calloc(size, n) cases
• CIUpdate to actions/cache@v4
• BUG/MEDIUMclifix once for all the problem of missing trailing LFs
• BUG/MINORvars/clifix missing LF after get var output
• DOCinternalupdate missing data types in peers-v2.0.txt
• DOCconfigfix misplaced bytes_{in,out}
• DOCconfigfix typos for bytes_{in,out}
• DOCconfigfix misplaced txn.conn_retries
• DOCinstallrecommend pcre2
• REGTESTSsslAdd OCSP related tests
• REGTESTSsslFix empty line in cli command input
• BUG/MINORsslReenable ocsp auto-update after an add ssl crt-list
• BUG/MINORsslDestroy ckch instances before the store during deinit
• BUG/MEDIUMocspSeparate refcount per instance and per store
• MINORsslUse OCSP_CERTID instead of ckch_store in ckch_store_build_certid
• BUG/MINORsslClear the ckch instance when deleting a crt-list line
• BUG/MINORsslDuplicate ocsp update mode when dup'ing ckch

#2024/04/04 : 2.9r1 (1.0.0-319.171)

• MINORsslCall callback function after loading SSL CRL data

#2024/02/27 : 2.9r1 (1.0.0-315.170)

• MINORhapeeadd a .hapee directory to list backporting notes
• MINORdebugmake BUG_ON() catch build errors even without DEBUG_STRICT
• BUILDdebugremove leftover parentheses in ABORT_NOW()
• MINORdebugmake ABORT_NOW() store the caller's line number when using abort
• MINORdebugmake sure calls to ha_crash_now() are never merged
• MINORcompileradd a new DO_NOT_FOLD() macro to prevent code folding
• MINORquicStop using 1024th of a second.
• BUG/MINORquicfix possible integer wrap around in cubic window calculation
• CLEANUPquicCode clarifications for QUIC CUBIC (RFC 9438)
• BUG/MINORsslFix error message after ssl_sock_load_ocsp call
• BUILDquicVariable name typo inside a BUG_ON().
• BUG/MINORquicWrong ack ranges handling when reaching the limit.
• BUG/MINORdiagrun the final diags before quitting when using -c
• BUG/MINORdiagalways show the version before dumping a diag warning
• REGTESTSpromexAdapt script to be less verbose
• MEDIUMpromexAdd support for filters on metric names
• MINORpromexAlways pass the final name and description to promex_dmp_ts()
• MINORpromexRename dump functions to use the right wording
• MEDIUMpromex/resolversDump resolvers metrics via a promex module
• MEDIUMpromex/stick-tableDump stick-table metrics via a promex module
• MEDIUMpromexDump metrics of registered modules with a way to filter them
• MEDIUMpromexAdd a registration mechanism to support modules
• MINORpromexRemove unsued htx parameter when a metric is dumped
• MEDIUMpromexSimplify the context using generic pointers for restart points
• MINORpromexAlways limit the number of labels dumped for each metric
• DOCpromexAdd documentation about extra-counters
• MEDIUMpromexDump listeners extra counters if requested
• MEDIUMpromexDump servers extra counters if requested
• MEDIUMpromexDump backends extra counters if requested
• MEDIUMpromexDump frontends extra counters if requested
• MINORpromexAdd info in the promex context to dump extra counters
• MINORpromexAdd a param to override the description when a metric is dumped
• MEDIUMstatsBe able to access a specific field into a stats module
• MINORstatsBe able to access to registered stats modules from anywhere
• MINORpromexExport active/backup metrics per-server
• MINORpromexAdd support for specialized front/back/li/srv metric names
• MEDIUMtcp-act/backendsupport for set-bc-{mark,tos} actions
• MEDIUMtcp-act<expr> support for set-fc-{mark,tos} actions
• MINORhluaRename set_{tos, mark} to set_fc_{tos, mark}
• MINORtcp-actRename set-{mark,tos} to set-fc-{mark,tos}
• MINORtcp_actfix alphabetical ordering of tcp request content actions
• OPTIMconnectionprogressive hash for conn_calculate_hash()
• CLEANUPconnectionremove obsolete comment in header file
• BUG/MEDIUMh1always reject the NUL character in header values
• BUG/MINORh1-htxproperly initialize the err_pos field
• DOChttpclientadd dedicated httpclient section
• BUG/MEDIUMh1Don't support LF only to mark the end of a chunk size
• BUG/MINORh1Don't support LF only at the end of chunks
• BUG/MEDIUMquicfix crash on invalid qc_stream_buf_free() BUG_ON
• BUG/MEDIUMqpackallow 6xx..9xx status codes
• BUG/MEDIUMh3do not crash on invalid response status code
• MINORh3add traces for stream sending function
• BUG/MAJORssl_sockAlways clear retry flags in read/write functions
• DOCconfigurationclarify http-request wait-for-body
• BUG/MEDIUMquicremove unsent data from qc_stream_desc buf
• MINORquicextract qc_stream_buf free in a dedicated function
• MINORquicStop hardcoding a scale shifting value (CUBIC_BETA_SCALE_FACTOR_SHIFT)
• CLEANUPquicRemove unused CUBIC_BETA_SCALE_FACTOR_SHIFT macro.
• BUG/MINORquicnewreno QUIC congestion control algorithm no more available
• BUG/MEDIUMcacheFix crash when deleting secondary entry
• BUG/MINORhluafix uninitialized var in hlua_core_get_var()
• BUG/MINORjwtfix jwt_verify crash on 32-bit archs
• BUG/MEDIUMclisome err/warn msg dumps add LR into CSV output on stat's CLI
• MINORmux-h2/tracesadd a missing trace on connection WU with negative inc
• BUG/MEDIUMmux-h2refine connection vs stream error on headers
• DOCconfigurationfix set-dst in actions keywords matrix
• BUG/MINORh3fix checking on NULL Tx buffer
• BUG/MEDIUMquickeylog callback not called (USE_OPENSSL_COMPAT)
• BUG/MINORmux-h2also count streams for refused ones
• BUG/MINORmux-quicdo not prevent non-STREAM sending on flow control
• BUILDquicmissing include for quic_tp
• DOCconfigurationcorrected description of keyword tune.ssl.ocsp-update.mindelay
• REGTESTSadd a test to ensure map-ordering is preserved
• BUG/MINORmaplist-based matching potential ordering regression
• CLEANUPquicDouble quic_dgram_parse() prototype declaration.
• MINORsslUpdate ssl_fc_curve/ssl_bc_curve to use SSL_get0_group_name
• MINORotlogsrv struct becomes logger
• MINORmux-h2support limiting the total number of H2 streams per connection
• BUG/MEDIUMspoeNever create new spoe applet if there is no server up
• BUG/MEDIUMstconnSet fsb date if zero-copy forwarding is blocked during nego
• BUG/MEDIUMstconnForward shutdown on write timeout only if it is forwardable
• BUG/MEDIUMh3fix incorrect snd_buf return value
• BUILDquicMissing quic_ssl.h header protection
• CLEANUPquicRemaining useless code into server part
• REGTESTScheck attach-srv out of order declaration
• MINORdebugadd features and build options to show dev
• MINORglobalexport a way to list build options
• CIuse semantic version compare for determing latest OpenSSL
• BUG/MINORh3disable fast-forward on buffer alloc failure
• BUG/MINORh3close connection on sending alloc errors
• BUG/MINORh3properly handle alloc failure on finalize
• MINORh3add traces for connection init stage
• BUG/MINORh3close connection on header list too big
• MINORh3check connection error during sending
• BUG/MINORquicMissing call to TLS message callbacks
• BUG/MINORquicWrong keylog callback setting.
• BUG/MINORmux-quicdisable fast-fwd if connection on error
• BUG/MINORmux-quicalways report error to SC on RESET_STREAM emission
• DOCfix typo for fastfwd QUIC option
• BUG/MINORserver/event_hdlpropagate map port info through inetaddr event
• MINORserver/event_hdlupdate _srv_event_hdl_prepare_inetaddr prototype
• MINORserver/event_hdladd server_inetaddr struct to facilitate event data usage
• BUG/MEDIUMstatsunhandled switching rules with TCP frontend
• MINORstatsstore the parent proxy in stats ctx (http)
• BUG/MAJORstconnDisable zero-copy forwarding if consumer is shut or in error
• BUG/MINORserverUse the configured address family for the initial resolution

#2024/01/17 : 2.9r1 (1.0.0-311.64)

• HAPEEudpupdate structs and functions required for the UDP module
• MEDIUMudpallow to retrieve the frontend destination address
• MINORtcpcheckexport proxy_parse_tcpcheck()
• MINORbackendexport get_server_*() functions
• BUILDhapee/addonsfix build without USE_QUIC=1
• HAPEEmakefileautomatically build objects in addons/hapee_*
• HAPEEmakefileupdate the cleanup rule to also remove *.i from addons
• HAPEEaddonsquic CID in -vv
• HAPEEaddonsadds quic CID generator to interop with packetshield
• MINORhapee/WURFLtransfer error status from the _wurfl_reload() function
• MINORhapee/WURFLadded live update database function
• MINORhapee/WURFLadded custom API log function
• MINORhapee/WURFLadded function to check correct module initialization
• BUG/MINORhapee/WURFLcorrected version check of used wurfl library
• BUILDhapee/darepaired build in case of using old DeviceAtlas library
• MINORhapee/daadd function that allow data reload
• MINORhapee/daadd spin locking
• MINORhapee/daadd support for loading a precompiled json data
• MEDIUMhapee/daRevert MEDIUM: da: update module to handle schedule mode.
• MINORhapee/51dadd function that returns path to 51Degrees data file
• MINORhapee/51dadd function that allow data reload
• BUG/MINORhapee/51dadd spin locking
• BUILDhapee/51dfix error when building with 51Degrees enabled
• BUG/MEDIUMhapee/51dfix a segfault on exit when 51d configuration is not loaded
• MEDIUMhapee/51duse fiftyoneDegreesProvider to access the pool and dataset
• DOCconfigUpdate documentation about local haproxy response
• BUG/MINORresolversdefault resolvers fails when network not configured
• DOCconfigalso add arguments to the converters in the table
• DOCconfigadd arguments to sample fetch methods in the table
• BUG/MEDIUMmux-quicreport early error on stream
• BUG/MEDIUMmux-h2Report too large HEADERS frame only when rxbuf is empty
• CLEANUPmux-h1Fix a trace message about C-L header addition
• BUG/MEDIUMmux-h1Explicitly skip request's C-L header if not set originally
• BUG/MEDIUMmux-h1Cound data from input buf during zero-copy forwarding
• BUG/MEDIUMstconnBlock zero-copy forwarding if EOS/ERROR on consumer side
• BUG/MEDIUMquicQUIC CID removed from tree without locking
• BUG/MINORext-checkcannot use without preserve-env
• BUG/MEDIUMmap/aclpat_ref_{set,delete}_by_id regressions
• BUILDsslupdate types in wolfssl cert selection callback
• BUG/MEDIUMquicPossible buffer overflow when building TLS records
• BUG/MINORmworker/clifix set severity-output support
• DOCconfigurationtypo req.ssl_hello_type
• BUG/MINORluaWrong OCSP CID after modifying an SSL certficate (LUA)
• BUG/MINORsslWrong OCSP CID after modifying an SSL certficate
• MINORssl/cliAdd ha_(warning|alert) msgs to CLI ckch callback
• BUG/MINORsslDouble free of OCSP Certificate ID
• MEDIUMhapeedoes not pass OPTION_LDFLAGS to modules
• MINORhapee/modulescheck if we generate the API hash correctly
• BUG/MINORhapee/modulesadjust include match() in gen-modules-config-h.awk
• BUG/MINORhapee/modulesinitialize the module head list
• BUILDhapee/modulesselect either md5 or md5sum
• MEDIUMhapee/modulesload the STG_REGISTER initcalls
• BUG/MINORhapee/modulesdisplay detailed error message on mod_init() failure
• MINORhapee/modulesadd a new label MODULES_LOCK to the lock_label enum
• MINORhapee/modulesadd the ability to register variable and functions.
• MEDIUMhapee/modules'modules list' on the cli shows currently loaded modules
• MINORhapee/modulesterminate properly loaded modules if possible
• MEDIUMhapee/modulesadd memory reservation support for the modules
• MINORhapeechange URLs for 2.9r1
• BUILDhapee/modulesupdate HAPEE version macro to 2.9r1
• BUILDhapee/modulesadd macros to compute numerical value of a HAPEE version
• BUILDhapee/modulesadd version of the module in the defines
• MEDIUMhapee/modulesadd modules support
• MINORversionmention that it's stable now