+Changes to squid-3.3.1 (09 Feb 2013):
+
+ - Bug 3726: build errors with --disable-ssl
+ - Propigate pinned connection persistency and closures to the client.
+ - Mimic SSL certificate Key Usage and Basic Constraints
+ - Fix segmentation fault on missing squid.conf values
+ - ext_sql_session_acl: Fix hex decoding on UID
+ - ... and some code polish
+ - ... and a lot of documentation polish
+ - ... and all changes from squid 3.2.7
+
Changes to squid-3.3.0.3 (09 Jan 2013):
- Bug 3729: 32-bit overflow in parsing 64-bit configuration values
<HTML>
<HEAD>
<META NAME="GENERATOR" CONTENT="LinuxDoc-Tools 0.9.66">
- <TITLE>Squid 3.3.0.3 release notes</TITLE>
+ <TITLE>Squid 3.3.1 release notes</TITLE>
</HEAD>
<BODY>
-<H1>Squid 3.3.0.3 release notes</H1>
+<H1>Squid 3.3.1 release notes</H1>
<H2>Squid Developers</H2>
<HR>
<HR>
<H2><A NAME="s1">1.</A> <A HREF="#toc1">Notice</A></H2>
-<P>The Squid Team are pleased to announce the release of Squid-3.3.0.3 for testing.</P>
+<P>The Squid Team are pleased to announce the release of Squid-3.3.1 for testing.</P>
<P>This new release is available for download from
<A HREF="http://www.squid-cache.org/Versions/v3/3.3/">http://www.squid-cache.org/Versions/v3/3.3/</A> or the
<A HREF="http://www.squid-cache.org/Mirrors/http-mirrors.html">mirrors</A>.</P>
<P>While this release is not deemed ready for production use, we believe it is ready for wider testing by the community.</P>
<P>We welcome feedback and bug reports. If you find a bug, please see
-<A HREF="http://wiki.squid-cache.org/SquidFaq/TroubleShooting#head-7067fc0034ce967e67911becaabb8c95a34d576d">http://wiki.squid-cache.org/SquidFaq/TroubleShooting#head-7067fc0034ce967e67911becaabb8c95a34d576d</A> for how to submit a report with a stack trace.</P>
+<A HREF="http://wiki.squid-cache.org/SquidFaq/BugReporting">http://wiki.squid-cache.org/SquidFaq/BugReporting</A>
+for how to submit a report with a stack trace.</P>
<H2><A NAME="ss1.1">1.1</A> <A HREF="#toc1.1">Known issues</A>
</H2>
<P>Although this release is deemed good enough for use in many setups, please note the existence of
-<A HREF="http://www.squid-cache.org/bugs/buglist.cgi?query_format=advanced&short_desc_type=allwordssubstr&short_desc=&target_milestone=3.3&long_desc_type=allwordssubstr&long_desc=&bug_file_loc_type=allwordssubstr&bug_file_loc=&status_whiteboard_type=allwordssubstr&status_whiteboard=&bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&emailtype1=substring&email1=&emailtype2=substring&email2=&bugidtype=include&bug_id=&votes=&chfieldfrom=&chfieldto=Now&chfieldvalue=&cmdtype=doit&order=bugs.bug_severity&field0-0-0=noop&type0-0-0=noop&value0-0-0=">open bugs against Squid-3.3</A>.</P>
+<A HREF="http://bugs.squid-cache.org/buglist.cgi?query_format=advanced&product=Squid&bug_status=UNCONFIRMED&bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&version=3.3">open bugs against Squid-3.3</A>.</P>
+
<H2><A NAME="ss1.2">1.2</A> <A HREF="#toc1.2">Changes since earlier releases of Squid-3.3</A>
</H2>
<DT><B>sslproxy_cert_adapt</B><DD>
<P>New option to adapt certain properties of outgoing SSL certificates generated for use when bumping SSL to an upstream server.</P>
-
</DL>
</P>
<P>
<DL>
<DT><B>acl</B><DD>
-<P><EM>myport</EM> and <EM>myip</EM>ACL types replaced with <EM>localport</EM> and <EM>localip</EM> respecitively.
+<P><EM>myport</EM> and <EM>myip</EM>ACL types replaced with <EM>localport</EM> and <EM>localip</EM> respectively.
To reflect that it matches the TCP connection details and not the squid.conf port.
-This matters when dealing with interecepted traffic, where the Squid receiving port differs from the TCP connection IP:port.
+This matters when dealing with intercepted traffic, where the Squid receiving port differs from the TCP connection IP:port.
Always use <EM>myportname</EM> type to match the squid.conf port details.</P>
<P>New default built-in ACLs for testing SSL certificate properties.</P>
<P><EM>ssl::certHasExpired</EM>,
<DT><B>logformat</B><DD>
<P>New token <EM>%ssl::bump_mode</EM> to log the SSL-bump mode type performed on a request.
Logs values of: <EM>-</EM>, <EM>none</EM>, <EM>client-first</EM>, or <EM>server-first</EM>.</P>
-<P>New token of <EM>%ssl::>cert_subject</EM> to log the Subject field of a SSL certficate received from the client.</P>
-<P>New token of <EM>%ssl::>cert_issuer</EM> to log the Issuer field of a SSL certficate received from the client.</P>
+<P>New token of <EM>%ssl::>cert_subject</EM> to log the Subject field of a SSL certificate received from the client.</P>
+<P>New token of <EM>%ssl::>cert_issuer</EM> to log the Issuer field of a SSL certificate received from the client.</P>
<DT><B>ssl_bump</B><DD>
<P>New action types <EM>none</EM>, <EM>client-first</EM>, <EM>server-first</EM>. The default is <EM>none</EM>.</P>
<P>
<DL>
-<P><EM>There are no removed squid.conf tags in Squid-3.3.</EM></P>
+
+<P><EM>There are no removed squid.conf options in Squid-3.3.</EM></P>
</DL>
</P>
<DT><B>storeurl_rewrite_program</B><DD>
<P>Not yet ported from 2.7</P>
-<DT><B>update_headers</B><DD>
-<P>Not yet ported from 2.7</P>
-
</DL>
</P>