From: squidadm <squidadm@users.noreply.github.com>
Date: Wed, 13 Apr 2022 05:26:01 +0000 (+1200)
Subject: 5.5 (#1019)
X-Git-Tag: SQUID_5_5
X-Git-Url: http://git.ipfire.org/gitweb/gitweb.cgi?a=commitdiff_plain;h=b8f47edc70a2bd14770b4fef70a5afe21c162eed;p=thirdparty%2Fsquid.git

5.5 (#1019)
---

diff --git a/ChangeLog b/ChangeLog
index 8b03647422..924aa3d305 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,4 +1,13 @@
-Changes in squid-5.4.1 (12 Feb 2021):
+Changes in squid-5.5 (12 Apr 2022):
+
+	- Regression Bug 5192: esi_parser default is incorrect
+	- Bug 5177: clientca certificates sent to https_port clients
+	- Bug 5090: Must(!request->pinnedConnection()) violation
+	- Kid restart leads to persistent queue overflows, delays/timeouts
+	- Fix build on Illumos
+	- ESI: Drop incorrect and unnecessary xmlSetFeature() call
+
+Changes in squid-5.4.1 (12 Feb 2022):
 
 	- Bug 5055: FATAL FwdState::noteDestinationsEnd exception: opening
 	- Fix FATAL ServiceRep::putConnection exception: theBusyConns > 0
@@ -21,7 +30,7 @@ Changes in squid-5.4.1 (12 Feb 2021):
 	- Polished AsyncJob::Start() API
 	- ... and update code documentation
 
-Changes in squid-5.4 (07 Feb 2021):
+Changes in squid-5.4 (07 Feb 2022):
 
 	- Bug 5190: Preserve configured order of intermediate CA certificate chain
 	- Bug 5188: Fix reconfiguration leaking tls-cert=... memory
diff --git a/configure.ac b/configure.ac
index 8e9665b947..b6ba336912 100644
--- a/configure.ac
+++ b/configure.ac
@@ -5,7 +5,7 @@
 ## Please see the COPYING and CONTRIBUTORS files for details.
 ##
 
-AC_INIT([Squid Web Proxy],[5.4.1-VCS],[http://bugs.squid-cache.org/],[squid])
+AC_INIT([Squid Web Proxy],[5.5-VCS],[http://bugs.squid-cache.org/],[squid])
 AC_PREREQ(2.61)
 AC_CONFIG_HEADERS([include/autoconf.h])
 AC_CONFIG_AUX_DIR(cfgaux)
diff --git a/doc/release-notes/release-5.sgml b/doc/release-notes/release-5.sgml
index 2b0e38518c..b16bfd0cbc 100644
--- a/doc/release-notes/release-5.sgml
+++ b/doc/release-notes/release-5.sgml
@@ -1,6 +1,6 @@
 <!doctype linuxdoc system>
 <article>
-<title>Squid 5.4.1 release notes</title>
+<title>Squid 5.5 release notes</title>
 <author>Squid Developers</author>
 
 <abstract>
@@ -12,7 +12,7 @@ for Applied Network Research and members of the Web Caching community.
 <toc>
 
 <sect>Notice
-<p>The Squid Team are pleased to announce the release of Squid-5.4.1.
+<p>The Squid Team are pleased to announce the release of Squid-5.5.
 
 This new release is available for download from <url url="http://www.squid-cache.org/Versions/v5/"> or the
  <url url="http://www.squid-cache.org/Download/http-mirrors.html" name="mirrors">.
@@ -252,6 +252,12 @@ This section gives a thorough account of those changes in three categories:
 	<p>New code <em>A</em> to display Squid listening IP address the client
 	   TCP connection was connected to.
 
+	<tag>esi_parser</tag>
+	<p>Squid-4 removal of the custom parser introduced a bug which caused
+	   the default ESI parser library to be unpredictable. Squid-5.5 release
+	   restores the documented default of libxml2 as most preferred, with
+	   libexpat as alternative.
+
 	<tag>http_port</tag>
 	<p>New <em>worker-queues</em> option to have TCP stack maintain dedicated
 	   listening queue for each worker in SMP.
@@ -261,6 +267,9 @@ This section gives a thorough account of those changes in three categories:
 	   listening queue for each worker in SMP.
 	<p>New <em>CONDITIONAL_AUTH</em> flag for <em>sslflags=</em> option to
 	   request client certificate(s) but not reject clients without any.
+	<p>Squid-5.5 will no longer use <em>tls-clientca=</em> certificates
+	   as possible intermediary CA for the server CA certificate chain when
+	   OpenSSL library supports <em>SSL_MODE_NO_AUTO_CHAIN</em> mode.
 
 	<tag>logformat</tag>
 	<p>New <em>ssl::&lt;cert</em> macro code to display received server X.509