-Changes in squid-5.4.1 (12 Feb 2021):
+Changes in squid-5.5 (12 Apr 2022):
+
+ - Regression Bug 5192: esi_parser default is incorrect
+ - Bug 5177: clientca certificates sent to https_port clients
+ - Bug 5090: Must(!request->pinnedConnection()) violation
+ - Kid restart leads to persistent queue overflows, delays/timeouts
+ - Fix build on Illumos
+ - ESI: Drop incorrect and unnecessary xmlSetFeature() call
+
+Changes in squid-5.4.1 (12 Feb 2022):
- Bug 5055: FATAL FwdState::noteDestinationsEnd exception: opening
- Fix FATAL ServiceRep::putConnection exception: theBusyConns > 0
- Polished AsyncJob::Start() API
- ... and update code documentation
-Changes in squid-5.4 (07 Feb 2021):
+Changes in squid-5.4 (07 Feb 2022):
- Bug 5190: Preserve configured order of intermediate CA certificate chain
- Bug 5188: Fix reconfiguration leaking tls-cert=... memory
<!doctype linuxdoc system>
<article>
-<title>Squid 5.4.1 release notes</title>
+<title>Squid 5.5 release notes</title>
<author>Squid Developers</author>
<abstract>
<toc>
<sect>Notice
-<p>The Squid Team are pleased to announce the release of Squid-5.4.1.
+<p>The Squid Team are pleased to announce the release of Squid-5.5.
This new release is available for download from <url url="http://www.squid-cache.org/Versions/v5/"> or the
<url url="http://www.squid-cache.org/Download/http-mirrors.html" name="mirrors">.
<p>New code <em>A</em> to display Squid listening IP address the client
TCP connection was connected to.
+ <tag>esi_parser</tag>
+ <p>Squid-4 removal of the custom parser introduced a bug which caused
+ the default ESI parser library to be unpredictable. Squid-5.5 release
+ restores the documented default of libxml2 as most preferred, with
+ libexpat as alternative.
+
<tag>http_port</tag>
<p>New <em>worker-queues</em> option to have TCP stack maintain dedicated
listening queue for each worker in SMP.
listening queue for each worker in SMP.
<p>New <em>CONDITIONAL_AUTH</em> flag for <em>sslflags=</em> option to
request client certificate(s) but not reject clients without any.
+ <p>Squid-5.5 will no longer use <em>tls-clientca=</em> certificates
+ as possible intermediary CA for the server CA certificate chain when
+ OpenSSL library supports <em>SSL_MODE_NO_AUTO_CHAIN</em> mode.
<tag>logformat</tag>
<p>New <em>ssl::<cert</em> macro code to display received server X.509