• Files Changed
• Browse Source

Update to 9.2.3

• Files Changed
• Browse Source

- Update to 9.2.2
  * #9544 - Docs: format typos in header_rewrite doc
  * #9754 - Fix OCSP detection during build (9.2.x)
  * #9829 - Add TSHttpTxnNextHopPortGet, add NEXT-HOP to header rewrite
  * #9831 - Allow slice plugin to purge requests
  * #9840 - Fix crash on config reload with BoringSSL
  * #9877 - Do not add content-length for status 204 cache
  * #9879 - doc: fix the internal libraries section formatting
  * #9886 - Fix deprecated set_class for documentation build
  * #9943 - Add yaml libs reference to HTTP proxy test suite.
  * #9944 - Fix clang-format for 9.2.x branch
  * #9952 - 92x autest updates
  * #9959 - 9.2.x: OpenSSL 3.0 tls autest updates (#9947)
  * #9971 - Update to autest version 1.10.3
  * #9976 - fix: require RSRC_CLIENT_REQUEST_HEADERS in ConditionMethod
  * #9989 - Do not set @SECLEVEL with boringssl
  * #10038 - LSan: Fix leaks of Cache Unit Test
  * #10054 - Demote SSL log line to debug and remove key printing
  * #10093 - tools/check-unused-dependencies:  make exceptions for tools under clang+asan
  * #10103 - autest get_port: update to use psutil
  * #10105 - Update autest to the latest 1.10.4
  * #10107 - Fix ports.py type hint for sets on older Python
  * #10124 - Fix DbgCtl reference that got cherry-picked into 9.2.x
  * #10125 - Remove duplicate slashes at the beginning of the incoming URL
  * #10127 - 9.2.x: Correctly handle encoding for cache hash generation
  * #10131 - 9.2.x: Fix a crash triggered by invalid range header
- Refreshed patch: apache-trafficserver8-remove-bundled-yamlcpp.patch 

• Files Changed
• Browse Source

- Update to 9.2.1
  * #9184 - TSan: Make Thread::cur_time thread local
  * #9238 - Add slice config to strip Range header for HEAD requests
  * #9286 - Skip dns_host_down autest from 9.2.x branch
  * #9300 - Fixed issue with SDK_API_HttpParentProxySet_Fail regression test
  * #9303 - Issue 9274: read-while-writer readers can't find fragment inserted
  * #9306 - Updated warning message for adding duplicated remap entries
  * #9307 - AuTests: update to Proxy Verifier v2.6.0
  * #9316 - Update rtd-theme to the latest version
  * #9325 - glibc 2.37 requires additional explicit includes
  * #9326 - ppc64 stack grows down, so it can be re-enabled as a supported arch
  * #9328 - s3_auth: Schedule reloading config event on TASK thread
  * #9329 - s3_auth: Fix assertion failure of TSActionCancel
  * #9330 - Don't send response body on status 204 No Content
  * #9333 - Make 204 cacheable again
  * #9337 - s3_auth autest: convert from gold file to file contains
  * #9339 - Revert PRs 7667 and 7807
  * #9387 - Update h2disable tests for new curl output
  * #9430 - On arm64 macOS, do not use pagezero linker flag when using luajit
  * #9444 - Fix SSLSessionDup for old OpenSSL and BoringSSL
  * #9445 - Stabilize autest for traffic_dump
  * #9450 - Stabilize autest for tls_check_cert_selection_reload
  * #9453 - Fix parameter parser in ssl_hook_test plugin
  * #9454 - Stabilize autest tls_hook18
  * #9455 - Run autest tls_hooks17 and tls_hooks18 on BoringSSL build
  * #9464 - Adds a --enable-lto option (Link Time Optimization)
  * #9468 - Fixed documentation issue with xdebug plugin to be a literal block
  * #9473 - Use deprecated OpenSSL APIs for MD5 and SHA256 if available (#9469)
  * #9480 - Slight performance improvements before calling APIHooks::clear
  * #9491 - Adds a new percentage option, cleans up pressure calculations
  * #9494 - Properly support multiple instantiation in plugins.config
  * #9508 - 9.2.x: http2_flow_control.test.py: Correctly enable debug logs
  * #9525 - Fix compile warning on BoringSSL build
  * #9534 - (backport) Fixes silent header duplication and early loop termination that occurs upon successful revalidation when duplicate headers are present
  * #9544 - Docs: format typos in header_rewrite doc
  * #9546 - Fix a build issue with the latest BoringSSL
  * #9554 - Make magick plugin buildable with BoringSSL
  * #9579 - Enable loading invalid SSL configuration on first load.
  * #9626 - Doc: document IP allow filter for remap.
  * #9639 - HttpSM: fix no_dns_forward_to_parent for cache stale (92x)
  * #9640 - 9.2.x: Fix clang 16 92x warnings
  * #9641 - 9.2.x Stabilize 92x emergency and fatal autests
  * #9646 - (Backport)Fix debian symbol not found for test_HttpTransact
  * #9647 - 9.2.x: Fix an error on SSL config reload (plus some cleanup). (#9334)
  * #9653 - 9.2.x: Autest updates for recent versions of curl
  * #9660 - Try to do less work in hot function HttpHookState::getNext
  * #9671 - Stabilize autest tls_hooks17
  * #9691 - Check the calling thread of Ethread::schedule_local
  * #9699 - Reload hosting.config on TASK thread
  * #9722 - Fix ttmsh log field
  * #9764 - parent_select plugin: look in ats config dir for yaml config if path is relative
  * #9779 - s3_auth: Fix hash calculation
  * #9785 - 9.2.x: Add back push_method_enabled enforcement
  * #9788 - Deny the TRACE method by default

• Files Changed
• Browse Source

- Update to 9.2.0
  * New feature: Log throttling settings
  * New feature: Create and manage pre-warmed TLS tunnels
  * New feature: SNI value for the TLS connection to the origin can be overridden
  * New feature: Remap rule inspector
  * Parent Selection Improvements
  * New experimental plugin http_stats
- Refreshed patches:
  * apache-trafficserver8-remove-bundled-yamlcpp.patch
  * apache-trafficserver9-ignore-cycle-check-on-tr-conn.patch
- New patch: apache-trafficserver9-localhost-is-always-self.patch
    In build environment "localhost" is not necessarily the name returned by getnameinfo(127.0.0.1)
    This confuses the server into believing that "localhost" is not the local host
    Fixed by hardcoding "localhost" into Machine ID.

• Files Changed
• Browse Source

- Transparent mode loop detection patch is reverted as the upstream fix is incomplete.
- Update to 9.1.4
  * #8232 - Updates yaml-cpp to 0.7.0
  * #8806 - Modifying array outside bounds
  * #8837 - Add compatibility define when building with OpenSSL3
  * #8838 - mkdfa.c is not being used and doesn't compile with gcc 12.1.1
  * #8909 - Move HKDF to OpenSSL 3 interfaces
  * #9033 - 9.1.x: Fix a couple compiler warnings
  * #9034 - 9.1.x: Update Proxy Verifier to v2.4.1
  * #9100 - Validate request-target
  * #9135 - 9.1.x: Fix GCC 12 compiler warnings
  * #9242 - drain request body on cache noop action
  * #9243 - authproxy: Handle WRITE_READY event
  * #9248 - [9.1.x] Change Content-Type to text/plain if xdebug modifies response body

• Files Changed
• Browse Source

Replaced transparent mode loop detection patch with upstream fix.

• Files Changed
• Browse Source

- removed obsolete apache-trafficserver-catch-2-13-7.patch
- Update to 9.1.3

• Files Changed
• Browse Source

- Update to 9.1.2 

• Files Changed
• Browse Source

- Update to 9.1.1
- Specfile updated to support building for EL8
- 1 upstream patch:
  * apache-trafficserver-textview-ub.patch
      Running over the end of TextView results in UB in MIME parsing

• Files Changed
• Browse Source

- The following hardening directives has been enabled in unit file:
  * ProtectSystem:          full
  * ProtectHome:            yes
  * PrivateDevices:         yes
  * PrivateTmp:             yes
  * ProtectKernelTunables:  yes
  * ProtectKernelModules:   yes
  * ProtectControlGroups:   yes
  * RestrictRealtime:       yes
  * MemoryDenyWriteExecute: yes
- On Leap 15.3 and Tumbleweed, further hardening is enabled:
  * DynamicUser:            yes
  * ProtectHostname:        yes
  * ProtectClock:           yes
  * ProtectKernelLogs:      yes
  * LockPersonality:        yes
  * RestrictSUIDSGID:       yes
- Due to hardening, installations using block device(s) for cache 
  storage will fail silently, installations using transparent
  proxying will no longer start. Configuration update via
  `traffic_ctl config set` will no longer be persistent.
  See /etc/systemd/system/apache-trafficserver.service.d/00-relax-hardening.conf
- 1 upstream patch:
  * apache-trafficserver-catch-2-13-7.patch:
      Upgrade catch.hpp to v2.13.7, resolves test failures on Factory

• Files Changed
• Browse Source

Specfile update: mark config files noreplace

• Files Changed
• Browse Source

- Specfile update:
  * header_rewrite plugin split out as it pulls maxmind db libs
  * Lua and esi/combo_handler plugin are no longer experimental
  * sort plugin file list

• Files Changed
• Browse Source

- Update to 9.1.0
  * Upstreamed patches removed:
      apache-trafficserver9-LogUtils2-test-remove-duplicate-BWF.patch
      apache-trafficserver9-docs-remove-deprecated-sphinx-gettext_lazy.patch
  * Patches refreshed:
      apache-trafficserver9-docs-remove-git.patch
      apache-trafficserver9-docs-sys-plantuml.patch
  * 1 new patch: apache-trafficserver9-docs-split-manpages.patch
      Split document into man pages
  * Renamed package:
      apache-trafficserver-plugin-WebpTransform
        -> apache-trafficserver-plugin-webp_transform
        Plugin WebpTransform has been renamed webp_transform
  * New plugins in apache-trafficserver-plugins-experimental:
      cache_fill, icap, rate_limit
- Specfile update:
  * Removed stuff related to openSUSE <= 13.2
  * Replace %setup + %patch with %autosetup
  * Tag %license

• Files Changed
• Browse Source

Factory changed MoonJIT back to LuaJIT, update BuildRequires

• Files Changed
• Browse Source

Update to 9.0.2, Sphinx 4.0.2 had regression fixed in 4.1, Factory build would need a new snapshot to succeed.

- Update to 9.0.2
  * apache-trafficserver8-128bit-cas-ppc64le.patch: removed
    Merged upstream 

• Files Changed
• Browse Source

- Update to 9.0.1
- Refresh patch 'apache-trafficserver9-ignore-cycle-check-on-tr-conn.patch' 
- Swap 128-bit CAS patch with upstream patch

• Files Changed
• Browse Source

- Newer versions of OpenJDK seems to throw NPE when no fonts is
  installed and asked to measure text size, pull in Noto Sans
  so we can continue to build documentations on Factory.

• Files Changed
• Browse Source

- 1 new patch:
  apache-trafficserver9-ignore-cycle-check-on-tr-conn.patch
    Workaround for upstream bug on cycle detection and
    transparent proxying (gh#7525) 

• Files Changed
• Browse Source

- Update to 9.0.0
- 4 new patch:
  apache-trafficserver9-LogUtils2-test-remove-duplicate-BWF.patch
    test_LogUtils2 includes BufferWriterFormat in itself, causing
    global dtor to be run twice on its structures, corrupting memory.
  apache-trafficserver9-docs-sys-plantuml.patch
  apache-trafficserver9-docs-remove-git.patch
  apache-trafficserver9-docs-remove-deprecated-sphinx-gettext_lazy.patch
    Enables building documentation on Factory
- 2 patches dropped, as they're addressed upstream:
  apache-trafficserver8-ignore-cjose-jansson-static-check.patch
  apache-trafficserver8-aarch-va48.patch
- 9 plugins have been promoted from experimental to stable:
  cache_promote
  cache_range_requests
  cachekey
  certifier
  multiplexer
  prefetch
  remap_purge
  escalate
  server_push_preload
- 8 new experimental plugins:
  statichit
  redo_cache_lookup
  memory_profile
  cert_reporting_tool
  cookie_remap
  ja3_fingerprint
  maxmind_acl (requires libmaxminddb)
  ssl_session_reuse (requires libhiredis)
- 7 plugins removed:
  test_cppapi
  balancer
  buffer_upload
  header_normalize
  hipes
  ssl_cert_loader
  stale_while_revalidate

• Files Changed
• Browse Source