From: Amos Jeffries <yadij@users.noreply.github.com>
Date: Fri, 19 Jan 2018 14:14:42 +0000 (+1300)
Subject: 4.0.23 release (#133)
X-Git-Tag: SQUID_4_0_23
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=787b41c3b0ef9b7330032a1947c5f93bd050f32a;p=thirdparty%2Fsquid.git

4.0.23 release (#133)
---

diff --git a/ChangeLog b/ChangeLog
index 4c1e50e822..a5c5c0b8b9 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,17 @@
+Changes to squid-4.0.23 (19 Jan 2018):
+
+	- Bug 4715: security_file_certgen: Remove -g and -n options docs
+	- Bug 4679: User names not sent to url_rewrite_program
+	- Bug 4631: security_file_certgen helper without disk cache
+	- Bug 3911: clang -fsanitize warnings
+	- Bug 2378: Duplicates in selected peer destinations
+	- Nettle v3.4 support
+	- Fix Squid FTP server dying because of an unhandled exception
+	- Automatically revive hopeless kids on reconfigure and after a timeout
+	- Fix %<Hs, %<pt, %<tt, %<bs calculation bugs for error responses
+	- ... and many documentation updates
+	- ... and some stability fixes
+
 Changes to squid-4.0.22 (07 Dec 2017):
 
 	- Regression fix: Relay peer CONNECT error status line and headers to clients
diff --git a/configure.ac b/configure.ac
index cb0e99d3bf..d07292d1f8 100644
--- a/configure.ac
+++ b/configure.ac
@@ -5,7 +5,7 @@
 ## Please see the COPYING and CONTRIBUTORS files for details.
 ##
 
-AC_INIT([Squid Web Proxy],[4.0.22-VCS],[http://bugs.squid-cache.org/],[squid])
+AC_INIT([Squid Web Proxy],[4.0.23-VCS],[http://bugs.squid-cache.org/],[squid])
 AC_PREREQ(2.61)
 AC_CONFIG_HEADERS([include/autoconf.h])
 AC_CONFIG_AUX_DIR(cfgaux)
diff --git a/doc/release-notes/release-4.sgml b/doc/release-notes/release-4.sgml
index 43b1995017..45665ae1d6 100644
--- a/doc/release-notes/release-4.sgml
+++ b/doc/release-notes/release-4.sgml
@@ -1,6 +1,6 @@
 <!doctype linuxdoc system>
 <article>
-<title>Squid 4.0.22 release notes</title>
+<title>Squid 4.0.23 release notes</title>
 <author>Squid Developers</author>
 
 <abstract>
@@ -12,7 +12,7 @@ for Applied Network Research and members of the Web Caching community.
 <toc>
 
 <sect>Notice
-<p>The Squid Team are pleased to announce the release of Squid-4.0.22 for testing.
+<p>The Squid Team are pleased to announce the release of Squid-4.0.23 for testing.
 
 This new release is available for download from <url url="http://www.squid-cache.org/Versions/v4/"> or the
  <url url="http://www.squid-cache.org/Download/http-mirrors.html" name="mirrors">.
@@ -54,6 +54,7 @@ The Squid-4 change history can be <url url="http://www.squid-cache.org/Versions/
 	<item>Improved SMP support
 	<item>Improved process management
 	<item>Initial GnuTLS support
+	<item>ESI Custom Parser removal
 </itemize>
 
 Most user-facing changes are reflected in squid.conf (see below).
@@ -189,6 +190,12 @@ Most user-facing changes are reflected in squid.conf (see below).
    the OpenSSL options when using GnuTLS.
 
 
+<sect1>ESI Custom Parser removal
+<p>The Squid custom ESI (Edge Side Includes) parser has been removed in favour
+of better supported and maintained third-party libraries. At least one of libxml2
+or libexpat is now mandatory to build support for the ESI response processor.
+
+
 <sect>Changes to squid.conf since Squid-3.5
 <p>
 There have been changes to Squid's configuration file since Squid-3.5.
@@ -258,6 +265,8 @@ This section gives a thorough account of those changes in three categories:
 
 	<tag>acl</tag>
 	<p>New <em>-m</em> flag for <em>note</em> ACL to match substrings.
+	<p>New <em>clientside_mark</em> type for matching Netfilter CONNMARK on
+	   the client TCP connection.
 	<p>New <em>connections_encrypted</em> type for matching transactions
 	   where all HTTP messages were received over TLS transport connections,
 	   including messages received from ICAP servers.
@@ -290,6 +299,10 @@ This section gives a thorough account of those changes in three categories:
 	<p>Replaced option <em>sslcafile=</em> with <em>tls-cafile=</em>
 	   which takes multiple entries.
 
+	<tag>esi_parser</tag>
+	<p>Removed <em>custom</em> parser option.
+	<p>Changed default to auto-detect available parsers instead of <em>custom</em>.
+
 	<tag>external_acl_type</tag>
 	<p>New parameter <em>queue-size=</em> to set the maximum number
 	   of queued requests.
@@ -359,6 +372,11 @@ This section gives a thorough account of those changes in three categories:
 	   negotiated cipher of the client connection.
 	<p>New code <em>%ssl::&lt;negotiated_cipher</em> to display the
 	   negotiated cipher of the last server or peer connection.
+	<p>Fixed <em>%&lt;Hs</em>, <em>%&lt;pt</em> and <em>%&lt;tt</em>
+	   codes for received CONNECT errors.
+	<p>Improved <em>%&lt;bs</em> logging on forwarding retries.
+	<p>Improved <em>%&lt;Hs</em>, <em>%&lt;pt</em>, <em>%&lt;tt</em>,
+	   <em>%&lt;bs</em> logging on SslBump errors.
 
 	<tag>pid_filename</tag>
 	<p>Default value now based on squid -n command line parameter.
@@ -492,6 +510,10 @@ This section gives an account of those changes in three categories:
 	   actually auto-detect them without configuring the module
 	   list manually.
 
+	<tag>--enable-esi</tag>
+	<p>Custom ESI parser has been removed.
+	   Libxml2 or libexpat is now required to enable ESI processing.
+
 </descrip>
 </p>