This is an automated email from the ASF dual-hosted git repository. maskit pushed a change to branch quic-latest in repository https://gitbox.apache.org/repos/asf/trafficserver.git.
from fbc8d4a Document qlog_dir configuration (#6935) add c7e8054 Prevent stale netvc access on SSL Callbacks (#6925) add ae9af29 Fix dual_cert_select test to run with older openssl binary (#6896) add 9ae1a76 example: Move to blocklists and allowlists add bfffcf0 Enable only squash and merge for GitHub add 74366b9 Make compress Au test less flakey. (#6915) add 54cff07 Disable max_connections_active_in default now that featur works (#6903) add 4817786 Fixed bug in the calculation of the header block fragment length (#6923) add 6d9d1ba Update buffer-writer.en.rst (wrong header link) (#6934) add d0adba9 Prevent use-after-free of TransactionPlugin (#6937) add 32cb4fe Move to blocklists and allowlists (#6941) add a35befa plugins: Move to blocklists and allowlists (#6940) add 8c79a31 Load combined file with bogus key path (#6933) add f115b51 Add IPCAP Plugin (#6484) add 93a72ec AuTest: New log and When condition for ATS initialized (#6931) add 5e2d662 Cleanup: Remove unused arguments (#6943) add 6aef2b0 Retry read when fastopen_bread() get non fatal error (#6841) add dc662cb Remove dup code in QUICMultiCertConfigLoader (#6942) add 8d74203 Add CI verbose and debug options for autest (#6947) add 5a17b53 remove useless code (#6952) add 61f8ee3 Build test C/C++ files with Automake. (#6945) add 3d14b21 Set the default thread count factor to 1x the number of logical cores (#6949) add 32b4827 Remove two unused includes in HdrHeap.h. (#6905) add 6ff0f48 Make HostDBInfo class safer to use. (#6858) add ad49416 Prevent buffer overflow during log filter actions (#6950) add 224e918 Cleanup: Remove unnecessary member from Http2Stream (#6951) add 613576f Metrics for origin close (#6873) add 93b2c46 Fixes icap build on macOS (#6958) add c81215c Fix format string for int64_t (#6963) add 524d2e4 Assert on valid boundaries for UserArgTable access (#6953) add 9ab53fe Cleanup: Simplify Http2Stream::update_write_request() (#6962) add 82cbc53 Make the log_pipe test more efficient. (#6966) add c32fc64 Fix support for openssl async engine (#6910) add 3ffd8ac Log whether client certs were exchanged in TLS handshake (#6699) add e5fcd1d Update docs for some DNS config settings (#6969) add e2a0d8c RateLimiting and Connection Config changes (#6968) add c59542d Perf: Use LocalBuffer in HTTP/2 (#6536) add e3212f1 Cleanup: Break down HpackIndexingTable::lookup() into static table lookup & dynamic table lookup (#6509) add 43b0ca0 Add new test and fix for float configuration failure in conf_remap (#6967) add 7ef20c6 AuTest: Properly handle experimental plugins. (#6971) add 986d355 Assert non-zero HdrHeap object size (#6954) add 7f44f21 Use print mode with length in validate_sni debug (#6976) add 25929ab remap doc correction (#6974) add c5c4633 Fix out of source tree builds for QUIC (#6984) add be23454 Fixes use after free when boringssl is used (#6985) add 159f25c Fix typo in Http2ConnectionState (#6991) add 0a9c6e8 Fix memory leak in header_rewrite (#6986) add f57c0a9 Updates path to reflect new location in tree (#6993) add fbc670f Update autest to version 1.8.0. (#6981) add da88876 Fix a build issue with BoringSSL (#6988) add 32fb67f Merge branch 'master' into quic-latest No new revisions were added by this update. Summary of changes: .asf.yaml | 5 + .gitignore | 2 + LICENSE | 2 +- Makefile.am | 2 +- ci/jenkins/bin/autest.sh | 6 +- configure.ac | 1 + contrib/openssl/README.md | 2 +- contrib/openssl/async_engine.c | 45 +- .../configuration/proxy-protocol.en.rst | 2 +- doc/admin-guide/files/records.config.en.rst | 39 +- doc/admin-guide/files/remap.config.en.rst | 4 +- doc/admin-guide/logging/formatting.en.rst | 46 +- .../monitoring/statistics/core/network-io.en.rst | 2 +- .../monitoring/statistics/core/origin.en.rst | 59 + doc/admin-guide/plugins/cachekey.en.rst | 10 +- doc/admin-guide/plugins/esi.en.rst | 6 +- doc/admin-guide/plugins/icap.en.rst | 122 ++ doc/admin-guide/plugins/index.en.rst | 4 + .../internal-libraries/buffer-writer.en.rst | 2 +- example/plugins/c-api/Makefile.am | 12 +- example/plugins/c-api/blacklist_1/readme.txt | 17 - .../blacklist_0.c => blocklist_0/blocklist_0.c} | 12 +- .../blacklist.txt => blocklist_1/blocklist.txt} | 0 .../blacklist_1.c => blocklist_1/blocklist_1.c} | 36 +- example/plugins/c-api/blocklist_1/readme.txt | 17 + .../ssl_sni_allowlist.cc} | 8 +- include/tscore/PluginUserArgs.h | 4 +- include/tscpp/api/TransactionPlugin.h | 2 + iocore/cache/Cache.cc | 2 - iocore/hostdb/I_HostDBProcessor.h | 46 +- iocore/net/BIO_fastopen.cc | 2 +- iocore/net/I_NetVConnection.h | 12 + iocore/net/Net.cc | 4 +- iocore/net/P_Net.h | 2 +- iocore/net/P_SSLNetVConnection.h | 30 + iocore/net/P_SSLUtils.h | 3 +- iocore/net/P_UnixNet.h | 59 +- iocore/net/QUICMultiCertConfigLoader.cc | 63 +- iocore/net/QUICMultiCertConfigLoader.h | 2 +- iocore/net/SSLClientUtils.cc | 16 + iocore/net/SSLNetVConnection.cc | 38 +- iocore/net/SSLUtils.cc | 70 +- iocore/net/UnixNet.cc | 47 +- iocore/net/quic/Makefile.am | 1 + mgmt/RecordsConfig.cc | 6 +- plugins/Makefile.am | 1 + plugins/cachekey/configs.cc | 28 +- plugins/cachekey/configs.h | 6 +- plugins/conf_remap/conf_remap.cc | 14 +- plugins/esi/combo_handler.cc | 76 +- plugins/esi/esi.cc | 8 +- plugins/esi/lib/Utils.cc | 6 +- plugins/esi/lib/Utils.h | 4 +- plugins/esi/lib/Variables.cc | 4 +- plugins/esi/lib/Variables.h | 6 +- plugins/esi/test/processor_test.cc | 4 +- plugins/esi/test/utils_test.cc | 4 +- plugins/esi/test/vars_test.cc | 68 +- plugins/experimental/access_control/config.cc | 20 +- plugins/experimental/access_control/config.h | 4 +- .../experimental/icap/Makefile.inc | 8 +- plugins/experimental/icap/icap_plugin.cc | 1240 ++++++++++++++++++++ plugins/header_rewrite/conditions.cc | 11 +- proxy/ProtocolProbeSessionAccept.cc | 10 +- proxy/hdrs/HdrHeap.cc | 12 + proxy/hdrs/HdrHeap.h | 2 - proxy/hdrs/XPACK.cc | 28 +- proxy/http/Http1ServerSession.cc | 1 + proxy/http/HttpConfig.cc | 40 +- proxy/http/HttpConfig.h | 19 + proxy/http/HttpSM.cc | 57 +- proxy/http/HttpSM.h | 39 +- proxy/http/HttpSessionManager.cc | 4 +- proxy/http/HttpTunnel.cc | 1 + proxy/http2/HPACK.cc | 174 ++- proxy/http2/HPACK.h | 17 +- proxy/http2/HTTP2.cc | 16 +- proxy/http2/Http2ClientSession.cc | 1 + proxy/http2/Http2ConnectionState.cc | 85 +- proxy/http2/Http2Stream.cc | 43 +- proxy/http2/Http2Stream.h | 11 +- proxy/http3/Makefile.am | 1 + proxy/logging/Log.cc | 10 + proxy/logging/LogAccess.cc | 50 +- proxy/logging/LogAccess.h | 2 + proxy/private/SSLProxySession.cc | 1 + proxy/private/SSLProxySession.h | 7 + src/traffic_quic/Makefile.inc | 1 + src/traffic_server/traffic_server.cc | 61 +- src/tscpp/api/TransactionPlugin.cc | 6 + src/tscpp/api/utils_internal.cc | 16 +- src/tscpp/api/utils_internal.h | 2 +- {src => tests}/Makefile.am | 39 +- tests/Pipfile | 2 +- tests/gold_tests/autest-site/build.test.ext | 53 - tests/gold_tests/autest-site/copy_config.test.ext | 55 - tests/gold_tests/autest-site/setup.cli.ext | 1 + .../gold_tests/autest-site/traffic_replay.test.ext | 2 +- .../gold_tests/autest-site/trafficserver.test.ext | 30 +- .../autest-site/trafficserver_plugins.test.ext | 128 +- tests/gold_tests/autest-site/when.test.ext | 61 +- tests/gold_tests/basic/config.test.py | 4 +- tests/gold_tests/basic/config/records_8090.config | 2 - tests/gold_tests/basic/config/records_8091.config | 2 - tests/gold_tests/basic/config/remap.config | 1 - tests/gold_tests/basic/copy_config.test.py | 8 +- tests/gold_tests/basic/copy_config2.test.py | 4 +- tests/gold_tests/basic/deny0.test.py | 5 +- tests/gold_tests/bigobj/bigobj.test.py | 6 +- .../body_factory/http204_response_plugin.test.py | 2 +- tests/gold_tests/cache/cache-control.test.py | 4 +- .../cache/cache-generation-clear.test.py | 3 +- .../cache/cache-generation-disjoint.test.py | 4 +- .../cache/disjoint-wait-for-cache.test.py | 3 +- .../gold_tests/chunked_encoding}/Makefile.inc | 8 +- .../chunked_encoding/chunked_encoding.test.py | 8 +- .../command_argument/verify_global_plugin.test.py | 67 +- .../command_argument/verify_remap_plugin.test.py | 18 +- .../cont_schedule/schedule_on_pool.test.py | 2 +- .../cont_schedule/schedule_on_thread.test.py | 2 +- .../cont_schedule/thread_affinity.test.py | 2 +- tests/gold_tests/continuations/double.test.py | 10 +- tests/gold_tests/continuations/double_h2.test.py | 9 +- tests/gold_tests/continuations/openclose.test.py | 11 +- .../gold_tests/continuations/openclose_h2.test.py | 11 +- .../gold_tests/continuations/plugins}/Makefile.inc | 7 +- .../continuations/plugins/session_id_verify.cc | 11 +- tests/gold_tests/continuations/session_id.test.py | 9 +- tests/gold_tests/h2/h2active_timeout.py | 29 +- tests/gold_tests/h2/h2enable.test.py | 2 +- .../h2/h2enable_no_accept_threads.test.py | 2 +- tests/gold_tests/h2/h2spec.test.py | 7 +- tests/gold_tests/h2/http2.test.py | 6 +- tests/gold_tests/h2/http2_priority.test.py | 3 +- tests/gold_tests/h2/httpbin.test.py | 3 +- tests/gold_tests/h2/nghttp.test.py | 5 +- .../gold_tests/headers/cache_and_req_body.test.py | 4 +- tests/gold_tests/headers/cachedIMSRange.test.py | 4 +- tests/gold_tests/headers/forwarded.test.py | 9 +- tests/gold_tests/headers/normalize_ae.test.py | 6 +- tests/gold_tests/headers/syntax.test.py | 2 +- tests/gold_tests/headers/via.test.py | 2 +- tests/gold_tests/ip_allow/ip_allow.test.py | 12 +- tests/gold_tests/logging/all_headers.test.py | 3 - tests/gold_tests/logging/custom-log.test.py | 1 - tests/gold_tests/logging/log-field.test.py | 3 +- tests/gold_tests/logging/log-filter.test.py | 3 +- tests/gold_tests/logging/log_pipe.test.py | 41 +- tests/gold_tests/logging/log_retention.test.py | 3 +- .../null_transform/null_transform.test.py | 7 +- .../cache_range_requests.test.py | 4 +- .../cache_range_requests_cachekey.test.py | 4 +- .../cache_range_requests_ims.test.py | 4 +- .../pluginTest/cert_update/cert_update.test.py | 7 +- .../client_context_dump.test.py | 5 +- .../pluginTest/combo_handler/combo_handler.test.py | 4 +- tests/gold_tests/pluginTest/compress/compress.gold | 42 +- .../pluginTest/compress/compress.test.py | 16 +- tests/gold_tests/pluginTest/compress/greplog.sh | 2 +- .../pluginTest/cookie_remap/bucketcookie.test.py | 1 - .../cookie_remap/collapseslashes.test.py | 1 - .../pluginTest/cookie_remap/connector.test.py | 1 - .../pluginTest/cookie_remap/existscookie.test.py | 1 - .../pluginTest/cookie_remap/matchcookie.test.py | 1 - .../pluginTest/cookie_remap/matchuri.test.py | 1 - .../pluginTest/cookie_remap/matrixparams.test.py | 1 - .../cookie_remap/notexistscookie.test.py | 1 - .../pluginTest/cookie_remap/regexcookie.test.py | 1 - .../pluginTest/cookie_remap/subcookie.test.py | 1 - .../pluginTest/cookie_remap/substitute.test.py | 1 - tests/gold_tests/pluginTest/cppapi/cppapi.test.py | 5 +- .../header_rewrite/header_rewrite.test.py | 1 - .../pluginTest/lua/lua_states_stats.test.py | 4 +- .../pluginTest/lua/lua_watermark.test.py | 6 +- .../pluginTest/regex_remap/regex_remap.test.py | 3 +- .../regex_revalidate/regex_revalidate.test.py | 2 - tests/gold_tests/pluginTest/slice/slice.test.py | 9 +- .../pluginTest/slice/slice_error.test.py | 6 +- .../pluginTest/slice/slice_regex.test.py | 8 +- .../pluginTest/slice/slice_selfhealing.test.py | 9 +- .../pluginTest/sslheaders/sslheaders.test.py | 5 +- .../pluginTest/test_hooks/hook_add.test.py | 11 +- .../pluginTest/test_hooks/test_hooks.test.py | 13 +- .../pluginTest/traffic_dump/traffic_dump.test.py | 2 - tests/gold_tests/pluginTest/tsapi/tsapi.test.py | 13 +- .../pluginTest/uri_signing/uri_signing.test.py | 3 +- .../gold_tests/pluginTest/url_sig/url_sig.test.py | 6 +- .../post_slow_server/post_slow_server.test.py | 3 +- tests/gold_tests/redirect/redirect.test.py | 3 +- tests/gold_tests/redirect/redirect_actions.test.py | 3 +- tests/gold_tests/redirect/redirect_post.test.py | 3 +- .../conf_remap_float.py} | 32 +- tests/gold_tests/remap/remap_http.test.py | 1 - tests/gold_tests/remap/remap_https.test.py | 4 +- tests/gold_tests/shutdown/emergency.test.py | 2 +- tests/gold_tests/shutdown/fatal.test.py | 2 +- tests/gold_tests/slow_post/slow_post.test.py | 7 +- tests/gold_tests/timeout/active_timeout.test.py | 2 +- tests/gold_tests/timeout/inactive_timeout.test.py | 2 +- tests/gold_tests/timeout/timeout.test.py | 2 +- .../gold_tests/tls}/Makefile.inc | 8 +- .../gold_tests/tls/gold/clientcert-accesslog.gold | 9 + tests/gold_tests/tls/gold/proxycert-accesslog.gold | 8 + .../gold_tests/tls/gold/proxycert2-accesslog.gold | 8 + tests/gold_tests/tls/ssl-post.c | 19 + tests/gold_tests/tls/ssl/combined-ec.pem | 18 + tests/gold_tests/tls/ssl/combined.pem | 84 ++ tests/gold_tests/tls/ssl/signed-foo-ec.pem | 8 + tests/gold_tests/tls/ssl/signed-foo.pem | 28 + tests/gold_tests/tls/ssl/signed-san-ec.pem | 5 + tests/gold_tests/tls/ssl/signed-san.pem | 28 + tests/gold_tests/tls/tls.test.py | 9 +- tests/gold_tests/tls/tls_0rtt_server.test.py | 2 +- .../tls/tls_check_cert_selection.test.py | 2 +- .../tls/tls_check_dual_cert_selection.test.py | 56 +- .../tls/tls_check_dual_cert_selection2.test.py | 180 +++ tests/gold_tests/tls/tls_client_cert.test.py | 39 +- tests/gold_tests/tls/tls_client_cert2.test.py | 25 +- tests/gold_tests/tls/tls_client_verify.test.py | 53 +- .../tls/{tls.test.py => tls_engine.test.py} | 70 +- .../gold_tests/tls/tls_hooks_client_verify.test.py | 2 +- tests/gold_tests/tls/tls_hooks_verify.test.py | 4 +- tests/gold_tests/tls/tls_keepalive.test.py | 2 +- tests/gold_tests/tls/tls_session_cache.test.py | 1 - tests/gold_tests/tls/tls_ticket.test.py | 1 - tests/gold_tests/tls/tls_tunnel.test.py | 17 +- tests/gold_tests/tls/tls_verify.test.py | 1 - .../gold_tests/tls/tls_verify_not_pristine.test.py | 1 - tests/gold_tests/tls_hooks/tls_hooks.test.py | 2 +- tests/gold_tests/tls_hooks/tls_hooks10.test.py | 2 +- tests/gold_tests/tls_hooks/tls_hooks11.test.py | 2 +- tests/gold_tests/tls_hooks/tls_hooks12.test.py | 2 +- tests/gold_tests/tls_hooks/tls_hooks13.test.py | 2 +- tests/gold_tests/tls_hooks/tls_hooks14.test.py | 2 +- tests/gold_tests/tls_hooks/tls_hooks15.test.py | 2 +- tests/gold_tests/tls_hooks/tls_hooks16.test.py | 4 +- tests/gold_tests/tls_hooks/tls_hooks17.test.py | 4 +- tests/gold_tests/tls_hooks/tls_hooks18.test.py | 4 +- tests/gold_tests/tls_hooks/tls_hooks2.test.py | 2 +- tests/gold_tests/tls_hooks/tls_hooks3.test.py | 2 +- tests/gold_tests/tls_hooks/tls_hooks4.test.py | 2 +- tests/gold_tests/tls_hooks/tls_hooks6.test.py | 2 +- tests/gold_tests/tls_hooks/tls_hooks7.test.py | 2 +- tests/gold_tests/tls_hooks/tls_hooks8.test.py | 2 +- tests/gold_tests/tls_hooks/tls_hooks9.test.py | 2 +- tests/tools/plugins/Makefile.inc | 79 ++ ...definition.c => missing_mangled_definition_c.c} | 0 ...nition.cc => missing_mangled_definition_cpp.cc} | 0 tests/tools/plugins/null_transform.c | 319 ----- tests/tools/plugins/request_buffer.c | 144 --- tests/tools/plugins/ssl_client_verify_test.cc | 15 +- tests/tools/plugins/test_cppapi.cc | 10 + 252 files changed, 3667 insertions(+), 1751 deletions(-) create mode 100644 doc/admin-guide/plugins/icap.en.rst delete mode 100644 example/plugins/c-api/blacklist_1/readme.txt rename example/plugins/c-api/{blacklist_0/blacklist_0.c => blocklist_0/blocklist_0.c} (93%) rename example/plugins/c-api/{blacklist_1/blacklist.txt => blocklist_1/blocklist.txt} (100%) rename example/plugins/c-api/{blacklist_1/blacklist_1.c => blocklist_1/blocklist_1.c} (90%) create mode 100644 example/plugins/c-api/blocklist_1/readme.txt rename example/plugins/c-api/{ssl_sni_whitelist/ssl_sni_whitelist.cc => ssl_sni_allowlist/ssl_sni_allowlist.cc} (92%) copy example/plugins/c-api/thread_pool/include/Makefile.am => plugins/experimental/icap/Makefile.inc (86%) create mode 100644 plugins/experimental/icap/icap_plugin.cc copy {src => tests}/Makefile.am (58%) delete mode 100644 tests/gold_tests/autest-site/build.test.ext delete mode 100755 tests/gold_tests/autest-site/copy_config.test.ext delete mode 100644 tests/gold_tests/basic/config/records_8090.config delete mode 100644 tests/gold_tests/basic/config/records_8091.config delete mode 100644 tests/gold_tests/basic/config/remap.config copy {plugins/authproxy => tests/gold_tests/chunked_encoding}/Makefile.inc (78%) copy {plugins/authproxy => tests/gold_tests/continuations/plugins}/Makefile.inc (80%) copy tests/gold_tests/{basic/basic-manager.test.py => remap/conf_remap_float.py} (51%) copy {plugins/authproxy => tests/gold_tests/tls}/Makefile.inc (84%) create mode 100644 tests/gold_tests/tls/gold/clientcert-accesslog.gold create mode 100644 tests/gold_tests/tls/gold/proxycert-accesslog.gold create mode 100644 tests/gold_tests/tls/gold/proxycert2-accesslog.gold create mode 100644 tests/gold_tests/tls/ssl/combined-ec.pem create mode 100644 tests/gold_tests/tls/ssl/combined.pem create mode 100644 tests/gold_tests/tls/tls_check_dual_cert_selection2.test.py copy tests/gold_tests/tls/{tls.test.py => tls_engine.test.py} (59%) create mode 100644 tests/tools/plugins/Makefile.inc rename tests/tools/plugins/{missing_mangled_definition.c => missing_mangled_definition_c.c} (100%) rename tests/tools/plugins/{missing_mangled_definition.cc => missing_mangled_definition_cpp.cc} (100%) delete mode 100644 tests/tools/plugins/null_transform.c delete mode 100644 tests/tools/plugins/request_buffer.c