Accepting request 184541 from home:bruno_friedmann:branches:server:proxy
Upgrade to last bugfix upstream release, Make version and date vars in description, Refreshed REALEASENOTE.html file OBS-URL: https://build.opensuse.org/request/show/184541 OBS-URL: https://build.opensuse.org/package/show/server:proxy/squid?expand=0&rev=41
This commit is contained in:
parent
e5e777489b
commit
80fe4147a0
@ -1,11 +1,11 @@
|
|||||||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
|
||||||
<HTML>
|
<HTML>
|
||||||
<HEAD>
|
<HEAD>
|
||||||
<META NAME="GENERATOR" CONTENT="LinuxDoc-Tools 0.9.66">
|
<META NAME="GENERATOR" CONTENT="LinuxDoc-Tools 0.9.69">
|
||||||
<TITLE>Squid 3.2.6 release notes</TITLE>
|
<TITLE>Squid 3.2.13 release notes</TITLE>
|
||||||
</HEAD>
|
</HEAD>
|
||||||
<BODY>
|
<BODY>
|
||||||
<H1>Squid 3.2.6 release notes</H1>
|
<H1>Squid 3.2.13 release notes</H1>
|
||||||
|
|
||||||
<H2>Squid Developers</H2>
|
<H2>Squid Developers</H2>
|
||||||
<HR>
|
<HR>
|
||||||
@ -72,12 +72,14 @@ for Applied Network Research and members of the Web Caching community.</EM>
|
|||||||
<HR>
|
<HR>
|
||||||
<H2><A NAME="s1">1.</A> <A HREF="#toc1">Notice</A></H2>
|
<H2><A NAME="s1">1.</A> <A HREF="#toc1">Notice</A></H2>
|
||||||
|
|
||||||
<P>The Squid Team are pleased to announce the release of Squid-3.2.6 for
|
<P>The Squid Team are pleased to announce the release of Squid-3.2.13.</P>
|
||||||
testing.</P>
|
|
||||||
<P>This new release is available for download from
|
<P>This new release is available for download from
|
||||||
<A HREF="http://www.squid-cache.org/Versions/v3/3.2/">http://www.squid-cache.org/Versions/v3/3.2/</A> or the
|
<A HREF="http://www.squid-cache.org/Versions/v3/3.2/">http://www.squid-cache.org/Versions/v3/3.2/</A> or the
|
||||||
<A HREF="http://www.squid-cache.org/Mirrors/http-mirrors.html">mirrors</A>.</P>
|
<A HREF="http://www.squid-cache.org/Mirrors/http-mirrors.html">mirrors</A>.</P>
|
||||||
<P>While this release is not deemed ready for production use, we believe it is ready for wider testing by the community.</P>
|
|
||||||
|
<P>A large number of the show-stopper bugs have been fixed along with general improvements to the IPv6 support.
|
||||||
|
While this release is not fully bug-free we believe it is ready for use in production on many systems.</P>
|
||||||
|
|
||||||
<P>We welcome feedback and bug reports. If you find a bug, please see
|
<P>We welcome feedback and bug reports. If you find a bug, please see
|
||||||
<A HREF="http://wiki.squid-cache.org/SquidFaq/BugReporting">http://wiki.squid-cache.org/SquidFaq/BugReporting</A> for how to submit a
|
<A HREF="http://wiki.squid-cache.org/SquidFaq/BugReporting">http://wiki.squid-cache.org/SquidFaq/BugReporting</A> for how to submit a
|
||||||
report with a stack trace.</P>
|
report with a stack trace.</P>
|
||||||
@ -86,7 +88,7 @@ report with a stack trace.</P>
|
|||||||
</H2>
|
</H2>
|
||||||
|
|
||||||
<P>Although this release is deemed good enough for use in many setups, please note the existence of
|
<P>Although this release is deemed good enough for use in many setups, please note the existence of
|
||||||
<A HREF="http://bugs.squid-cache.org/buglist.cgi?query_format=advanced&short_desc_type=allwordssubstr&short_desc=&target_milestone=3.2&long_desc_type=allwordssubstr&long_desc=&bug_file_loc_type=allwordssubstr&bug_file_loc=&status_whiteboard_type=allwordssubstr&status_whiteboard=&bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&emailtype1=substring&email1=&emailtype2=substring&email2=&bugidtype=include&bug_id=&votes=&chfieldfrom=&chfieldto=Now&chfieldvalue=&cmdtype=doit&order=bugs.bug_severity&field0-0-0=noop&type0-0-0=noop&value0-0-0=">open bugs against Squid-3.2</A>.</P>
|
<A HREF="http://bugs.squid-cache.org/buglist.cgi?query_format=advanced&product=Squid&bug_status=UNCONFIRMED&bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&version=3.2">open bugs against Squid-3.2</A>.</P>
|
||||||
|
|
||||||
<P>Some issues to note as currently known in this release which are not able to be fixed in the 3.2 series are:</P>
|
<P>Some issues to note as currently known in this release which are not able to be fixed in the 3.2 series are:</P>
|
||||||
<P>
|
<P>
|
||||||
@ -160,7 +162,7 @@ only to the original destination IP the client was requesting or to explicit pee
|
|||||||
DNS lookups to locate alternative DIRECT destinations will not be done.</P>
|
DNS lookups to locate alternative DIRECT destinations will not be done.</P>
|
||||||
|
|
||||||
<P>Known Issue: When non-strict validation fails Squid will relay the request, but can only do
|
<P>Known Issue: When non-strict validation fails Squid will relay the request, but can only do
|
||||||
so safely to the orginal destination IP the client was contacting. The client original
|
so safely to the original destination IP the client was contacting. The client original
|
||||||
destination IP is lost when relaying to peers in a hierarchy. This means the upstream peers
|
destination IP is lost when relaying to peers in a hierarchy. This means the upstream peers
|
||||||
are still at risk of causing same-origin bypass CVE-2009-0801 vulnerability.
|
are still at risk of causing same-origin bypass CVE-2009-0801 vulnerability.
|
||||||
Developer time is required to implement safe transit of these requests.
|
Developer time is required to implement safe transit of these requests.
|
||||||
@ -253,7 +255,7 @@ in front of the name of whichever helper is being multiplexed. It takes the help
|
|||||||
path and parameters as its own command parameters. The <EM>concurrency</EM> setting already
|
path and parameters as its own command parameters. The <EM>concurrency</EM> setting already
|
||||||
existing in Squid is used to configure how many child helpers it may run.</P>
|
existing in Squid is used to configure how many child helpers it may run.</P>
|
||||||
|
|
||||||
<P>For example, a traditional configration is
|
<P>For example, a traditional configuration is
|
||||||
<PRE>
|
<PRE>
|
||||||
url_rewrite_program /your/redirector.sh
|
url_rewrite_program /your/redirector.sh
|
||||||
url_rewrite_children 5
|
url_rewrite_children 5
|
||||||
@ -289,10 +291,10 @@ will be needed to be solved before starting Squid in production use.</P>
|
|||||||
<P>The on-demand helpers feature allows greater flexibility and resolves this problem by allowing
|
<P>The on-demand helpers feature allows greater flexibility and resolves this problem by allowing
|
||||||
maximum, initial and idle thresholds to be configured. Squid will start the initial set during
|
maximum, initial and idle thresholds to be configured. Squid will start the initial set during
|
||||||
start and reconfigure phases. However over the operational use new helpers up to the maxium will
|
start and reconfigure phases. However over the operational use new helpers up to the maxium will
|
||||||
be started as load demands. The idle threshold determins how many more helpers to start if the
|
be started as load demands. The idle threshold determines how many more helpers to start if the
|
||||||
currently running set is not enough to handle current request loads.</P>
|
currently running set is not enough to handle current request loads.</P>
|
||||||
|
|
||||||
<P>For example, a traditional configration is
|
<P>For example, a traditional configuration is
|
||||||
<PRE>
|
<PRE>
|
||||||
auth_param ntlm /usr/libexec/squid/ntlm_auth
|
auth_param ntlm /usr/libexec/squid/ntlm_auth
|
||||||
auth_param ntlm children 200
|
auth_param ntlm children 200
|
||||||
@ -357,7 +359,7 @@ For several helpers the directory name used in --enable-X-helpers configure opti
|
|||||||
<P>
|
<P>
|
||||||
<UL>
|
<UL>
|
||||||
<LI>mswin_check_ad_group - ext_ad_group_acl - Check logged in users Group membership using Active Directory.</LI>
|
<LI>mswin_check_ad_group - ext_ad_group_acl - Check logged in users Group membership using Active Directory.</LI>
|
||||||
<LI>ip_user_check - ext_file_userip_acl - Restrict users to cetain IP addresses, using a text file backend.</LI>
|
<LI>ip_user_check - ext_file_userip_acl - Restrict users to certain IP addresses, using a text file backend.</LI>
|
||||||
<LI>squid_kerb_ldap - ext_kerberos_ldap_group_acl - Check logged in Kerberos or NTLM users Group membership using LDAP.</LI>
|
<LI>squid_kerb_ldap - ext_kerberos_ldap_group_acl - Check logged in Kerberos or NTLM users Group membership using LDAP.</LI>
|
||||||
<LI>squid_ldap_group - ext_ldap_group_acl - Check logged in users Group membership using LDAP.</LI>
|
<LI>squid_ldap_group - ext_ldap_group_acl - Check logged in users Group membership using LDAP.</LI>
|
||||||
<LI>mswin_check_lm_group - ext_lm_group_acl - Check logged in users Group membership using LanManager.</LI>
|
<LI>mswin_check_lm_group - ext_lm_group_acl - Check logged in users Group membership using LanManager.</LI>
|
||||||
@ -416,8 +418,8 @@ This move begins the Localization of the internal administrator facing manuals.<
|
|||||||
|
|
||||||
<P>Automatic detection and use of the pthreads library available from Solaris 10</P>
|
<P>Automatic detection and use of the pthreads library available from Solaris 10</P>
|
||||||
|
|
||||||
<P>The result of this addition means that faster more efficient AUFS cache storage mechanisims
|
<P>The result of this addition means that faster more efficient AUFS cache storage mechanism
|
||||||
are now available in Solaris 10.</P>
|
is now available in Solaris 10.</P>
|
||||||
|
|
||||||
<P>Support is experimental at this stage due to lack of feedback on the results of enabling it.
|
<P>Support is experimental at this stage due to lack of feedback on the results of enabling it.
|
||||||
We recommend giving AUFS a try for faster disk storage and encourage feedback.</P>
|
We recommend giving AUFS a try for faster disk storage and encourage feedback.</P>
|
||||||
@ -431,14 +433,14 @@ cache controls for a reverse proxy acting on its behalf. Previously this was clo
|
|||||||
feature support in Squid. This release opens Surrogate support to all reverse proxies.</P>
|
feature support in Squid. This release opens Surrogate support to all reverse proxies.</P>
|
||||||
|
|
||||||
<P>Reverse proxy requests sent on to the web server include the HTTP header <EM>Surrogate-Capabilities:</EM>
|
<P>Reverse proxy requests sent on to the web server include the HTTP header <EM>Surrogate-Capabilities:</EM>
|
||||||
specifying the capabilities of the reverse proxy along with an ID which can be used to target reponses with
|
specifying the capabilities of the reverse proxy along with an ID which can be used to target responses with
|
||||||
a <EM>Surrogate-Control:</EM> HTTP header used instead of the <EM>Cache-Control:</EM> header.</P>
|
a <EM>Surrogate-Control:</EM> HTTP header used instead of the <EM>Cache-Control:</EM> header.</P>
|
||||||
|
|
||||||
<P>The default surrogate ID is generated automatically from the Squid site-unique hostname as found by the
|
<P>The default surrogate ID is generated automatically from the Squid site-unique hostname as found by the
|
||||||
automatic detection or manual configuration of <EM>visible_hostname</EM> although can be configured
|
automatic detection or manual configuration of <EM>visible_hostname</EM> although can be configured
|
||||||
separately with the <EM>httpd_accel_surrogate_id</EM> option.</P>
|
separately with the <EM>httpd_accel_surrogate_id</EM> option.</P>
|
||||||
|
|
||||||
<P><EM>Security Considerations:</EM> Websites sould be careful of accepting any surrogate ID.
|
<P><EM>Security Considerations:</EM> Websites should be careful of accepting any surrogate ID.
|
||||||
Older releases of Squid leak the Surrogate-Control headers to external servers.
|
Older releases of Squid leak the Surrogate-Control headers to external servers.
|
||||||
This 3.2 series of Squid will now prevent this leakage of its own ID destined responses, however it is possible
|
This 3.2 series of Squid will now prevent this leakage of its own ID destined responses, however it is possible
|
||||||
and for some uses desirable to receive external reverse-proxies <EM>Surrogate-Capabilities:</EM> headers.</P>
|
and for some uses desirable to receive external reverse-proxies <EM>Surrogate-Capabilities:</EM> headers.</P>
|
||||||
@ -553,7 +555,7 @@ redirects required for their initial GUI display.</P>
|
|||||||
<UL>
|
<UL>
|
||||||
<LI>should contain a complete HTML page, with optional client-side scripting.</LI>
|
<LI>should contain a complete HTML page, with optional client-side scripting.</LI>
|
||||||
<LI>must not contain server-side scripting. </LI>
|
<LI>must not contain server-side scripting. </LI>
|
||||||
<LI>will have macro substitution performed on it using the same macros as used by the error page tempates.</LI>
|
<LI>will have macro substitution performed on it using the same macros as used by the error page templates.</LI>
|
||||||
</UL>
|
</UL>
|
||||||
</P>
|
</P>
|
||||||
|
|
||||||
@ -588,32 +590,32 @@ to those managers.</P>
|
|||||||
headers or eCAP options to Squid ICAP requests or eCAP transactions.</P>
|
headers or eCAP options to Squid ICAP requests or eCAP transactions.</P>
|
||||||
|
|
||||||
<DT><B>adaptation_send_client_ip</B><DD>
|
<DT><B>adaptation_send_client_ip</B><DD>
|
||||||
<P>Same as depricated icap_send_client_ip
|
<P>Same as deprecated icap_send_client_ip
|
||||||
but applies to both ICAP and eCAP.</P>
|
but applies to both ICAP and eCAP.</P>
|
||||||
|
|
||||||
<DT><B>adaptation_send_username</B><DD>
|
<DT><B>adaptation_send_username</B><DD>
|
||||||
<P>Same as depricated icap_send_client_username
|
<P>Same as deprecated icap_send_client_username
|
||||||
but applies to both ICAP and eCAP.</P>
|
but applies to both ICAP and eCAP.</P>
|
||||||
|
|
||||||
<DT><B>adaptation_uses_indirect_client</B><DD>
|
<DT><B>adaptation_uses_indirect_client</B><DD>
|
||||||
<P>Same as depricated icap_uses_indirect_client
|
<P>Same as deprecated icap_uses_indirect_client
|
||||||
but applies to both ICAP and eCAP.</P>
|
but applies to both ICAP and eCAP.</P>
|
||||||
|
|
||||||
<DT><B>client_delay_pools</B><DD>
|
<DT><B>client_delay_pools</B><DD>
|
||||||
<P>New setting for client bandwith limits to specifies the number
|
<P>New setting for client bandwidth limits to specifies the number
|
||||||
of client delay pools used.</P>
|
of client delay pools used.</P>
|
||||||
|
|
||||||
<DT><B>client_delay_initial_bucket_level</B><DD>
|
<DT><B>client_delay_initial_bucket_level</B><DD>
|
||||||
<P>New setting for client bandwith limits to determine the initial
|
<P>New setting for client bandwidth limits to determine the initial
|
||||||
bucket size as a percentage of max_bucket_size from
|
bucket size as a percentage of max_bucket_size from
|
||||||
client_delay_parameters.</P>
|
client_delay_parameters.</P>
|
||||||
|
|
||||||
<DT><B>client_delay_parameters</B><DD>
|
<DT><B>client_delay_parameters</B><DD>
|
||||||
<P>New setting for client bandwith limits to configures client-side
|
<P>New setting for client bandwidth limits to configures client-side
|
||||||
bandwidth limits.</P>
|
bandwidth limits.</P>
|
||||||
|
|
||||||
<DT><B>client_delay_access</B><DD>
|
<DT><B>client_delay_access</B><DD>
|
||||||
<P>New setting for client bandwith limits to determines the
|
<P>New setting for client bandwidth limits to determines the
|
||||||
client-side delay pool for the request.</P>
|
client-side delay pool for the request.</P>
|
||||||
|
|
||||||
<DT><B>client_dst_passthru</B><DD>
|
<DT><B>client_dst_passthru</B><DD>
|
||||||
@ -727,17 +729,12 @@ It is recommended to upgrade logging to the faster <EM>daemon:</EM> module.</P>
|
|||||||
New installs, or installs with no logs configured explicitly will use this module by default.</P>
|
New installs, or installs with no logs configured explicitly will use this module by default.</P>
|
||||||
<P>New <EM>tcp</EM> module to send each log line as text data to a TCP receiver.</P>
|
<P>New <EM>tcp</EM> module to send each log line as text data to a TCP receiver.</P>
|
||||||
<P>New <EM>udp</EM> module to send each log line as text data to a UDP receiver.</P>
|
<P>New <EM>udp</EM> module to send each log line as text data to a UDP receiver.</P>
|
||||||
<P>New format <EM>referrer</EM> to log with the format prevously used by referer_log directive.</P>
|
<P>New format <EM>referrer</EM> to log with the format previously used by referer_log directive.</P>
|
||||||
<P>New format <EM>useragent</EM> to log with the format prevously used by useragent_log directive.</P>
|
<P>New format <EM>useragent</EM> to log with the format previously used by useragent_log directive.</P>
|
||||||
|
|
||||||
<DT><B>acl : random, localip, localport</B><DD>
|
<DT><B>acl : random, urllogin</B><DD>
|
||||||
<P>New type <EM>random</EM>. Pseudo-randomly match requests based on a configured probability.</P>
|
<P>New type <EM>random</EM>. Pseudo-randomly match requests based on a configured probability.</P>
|
||||||
<P>Renamed <EM>myip</EM> to <EM>localip</EM>. It matches the IP which the client connected to.</P>
|
|
||||||
<P>Renamed <EM>myport</EM> to <EM>localport</EM>. It matches the port which the client connected to.</P>
|
|
||||||
<P>Ported <EM>urllogin</EM> option from Squid 2.7, to match a regex pattern on the URL login field (if any).</P>
|
<P>Ported <EM>urllogin</EM> option from Squid 2.7, to match a regex pattern on the URL login field (if any).</P>
|
||||||
<P>The <EM>localip</EM>/<EM>localport</EM> differ from earlier releases where they matched a mix of
|
|
||||||
of an invalid IP and port 0, the client destination IP/port or the Squid listening IP/port.
|
|
||||||
This definition is now consistent across all modes of traffic received by Squid.</P>
|
|
||||||
<P>The <EM>manager</EM> ACL requires adjustment to cover new cache manager access. So it has now been
|
<P>The <EM>manager</EM> ACL requires adjustment to cover new cache manager access. So it has now been
|
||||||
built-in as a predefined ACL name matching URLs equivalent to the following regular expression:
|
built-in as a predefined ACL name matching URLs equivalent to the following regular expression:
|
||||||
<PRE>
|
<PRE>
|
||||||
@ -749,7 +746,7 @@ squid.conf containing the old manager definition can expect to see ACL type coll
|
|||||||
|
|
||||||
<DT><B>auth_param</B><DD>
|
<DT><B>auth_param</B><DD>
|
||||||
<P>New options for Basic, Digest, NTLM, Negotiate <EM>children</EM> settings.
|
<P>New options for Basic, Digest, NTLM, Negotiate <EM>children</EM> settings.
|
||||||
<EM>startup=N</EM> determins minimum number of helper processes used.
|
<EM>startup=N</EM> determines minimum number of helper processes used.
|
||||||
<EM>idle=N</EM> determines how many helper to retain as buffer against sudden traffic loads.
|
<EM>idle=N</EM> determines how many helper to retain as buffer against sudden traffic loads.
|
||||||
<EM>concurrency=N</EM> previously called <EM>auth_param ... concurrency</EM> as a separate option.</P>
|
<EM>concurrency=N</EM> previously called <EM>auth_param ... concurrency</EM> as a separate option.</P>
|
||||||
<P>Removed Basic, Digest, NTLM, Negotiate <EM>auth_param ... concurrency</EM> setting option.</P>
|
<P>Removed Basic, Digest, NTLM, Negotiate <EM>auth_param ... concurrency</EM> setting option.</P>
|
||||||
@ -783,8 +780,8 @@ Other status only available when supplying an error template body.</P>
|
|||||||
<P><EM>%SRCEUI64</EM> EUI-64 of clients with SLAAC address.</P>
|
<P><EM>%SRCEUI64</EM> EUI-64 of clients with SLAAC address.</P>
|
||||||
<P><EM>%EXT_LOG</EM> log= message returned by previous external ACL calls. An updated version may be returned.</P>
|
<P><EM>%EXT_LOG</EM> log= message returned by previous external ACL calls. An updated version may be returned.</P>
|
||||||
<P><EM>%EXT_TAG</EM> tag= value returned by previous external ACL calls. Tag may not be altered once set.</P>
|
<P><EM>%EXT_TAG</EM> tag= value returned by previous external ACL calls. Tag may not be altered once set.</P>
|
||||||
<P><EM>children-max=N</EM> determins maximum number of helper processes used.</P>
|
<P><EM>children-max=N</EM> determines maximum number of helper processes used.</P>
|
||||||
<P><EM>children-startup=N</EM> determins minimum number of helper processes used.</P>
|
<P><EM>children-startup=N</EM> determines minimum number of helper processes used.</P>
|
||||||
<P><EM>children-idle=N</EM> determines how many helper to retain as buffer against sudden traffic loads.</P>
|
<P><EM>children-idle=N</EM> determines how many helper to retain as buffer against sudden traffic loads.</P>
|
||||||
<P>Deprecated <EM>children=N</EM> in favor of <EM>children-max=N</EM>.</P>
|
<P>Deprecated <EM>children=N</EM> in favor of <EM>children-max=N</EM>.</P>
|
||||||
|
|
||||||
@ -1024,16 +1021,16 @@ default is to auto-detect the library and use where available.</P>
|
|||||||
<P>Replaced by --enable-eui</P>
|
<P>Replaced by --enable-eui</P>
|
||||||
|
|
||||||
<DT><B>--enable-auth-basic-helpers</B><DD>
|
<DT><B>--enable-auth-basic-helpers</B><DD>
|
||||||
<P>replaced by <EM>--enable-auth-basic</EM>.</P>
|
<P>Replaced by <EM>--enable-auth-basic</EM>.</P>
|
||||||
|
|
||||||
<DT><B>--enable-auth-digest-helpers</B><DD>
|
<DT><B>--enable-auth-digest-helpers</B><DD>
|
||||||
<P>replaced by <EM>--enable-auth-digest</EM>.</P>
|
<P>Replaced by <EM>--enable-auth-digest</EM>.</P>
|
||||||
|
|
||||||
<DT><B>--enable-auth-negotiate-helpers</B><DD>
|
<DT><B>--enable-auth-negotiate-helpers</B><DD>
|
||||||
<P>replaced by <EM>--enable-auth-negotiate</EM>.</P>
|
<P>Replaced by <EM>--enable-auth-negotiate</EM>.</P>
|
||||||
|
|
||||||
<DT><B>--enable-auth-ntlm-helpers</B><DD>
|
<DT><B>--enable-auth-ntlm-helpers</B><DD>
|
||||||
<P>replaced by <EM>--enable-auth-ntlm</EM>.</P>
|
<P>Replaced by <EM>--enable-auth-ntlm</EM>.</P>
|
||||||
|
|
||||||
<DT><B>--enable-referer-log</B><DD>
|
<DT><B>--enable-referer-log</B><DD>
|
||||||
<P>Obsolete.</P>
|
<P>Obsolete.</P>
|
||||||
@ -1066,7 +1063,7 @@ An external_acl_type helper may be used to bypass authentication if that is suit
|
|||||||
An external_acl_type helper may be used to bypass authentication if that is suitable.</P>
|
An external_acl_type helper may be used to bypass authentication if that is suitable.</P>
|
||||||
|
|
||||||
<DT><B>cache_peer</B><DD>
|
<DT><B>cache_peer</B><DD>
|
||||||
<P><EM>http11</EM> Obsolete.</P>
|
<P>Option <EM>http11</EM> obsolete.</P>
|
||||||
|
|
||||||
<DT><B>external_acl_type</B><DD>
|
<DT><B>external_acl_type</B><DD>
|
||||||
<P>Format tag <EM>%{Header}</EM> replaced by <EM>%>{Header}</EM></P>
|
<P>Format tag <EM>%{Header}</EM> replaced by <EM>%>{Header}</EM></P>
|
||||||
@ -1076,9 +1073,9 @@ An external_acl_type helper may be used to bypass authentication if that is suit
|
|||||||
<P>Replaced by <EM>request_header_access</EM> and <EM>reply_header_access</EM></P>
|
<P>Replaced by <EM>request_header_access</EM> and <EM>reply_header_access</EM></P>
|
||||||
|
|
||||||
<DT><B>http_port</B><DD>
|
<DT><B>http_port</B><DD>
|
||||||
<P><EM>no-connection-auth</EM> replaced by <EM>connection-auth=[on|off]</EM>. Default is ON.</P>
|
<P>Option <EM>no-connection-auth</EM> replaced by <EM>connection-auth=[on|off]</EM>. Default is ON.</P>
|
||||||
<P><EM>transparent</EM> option replaced by <EM>intercept</EM></P>
|
<P>Option <EM>transparent</EM> option replaced by <EM>intercept</EM></P>
|
||||||
<P><EM>http11</EM> obsolete.</P>
|
<P>Option <EM>http11</EM> obsolete.</P>
|
||||||
|
|
||||||
<DT><B>http_access2</B><DD>
|
<DT><B>http_access2</B><DD>
|
||||||
<P>Replaced by <EM>adapted_http_access</EM></P>
|
<P>Replaced by <EM>adapted_http_access</EM></P>
|
||||||
@ -1095,6 +1092,12 @@ An external_acl_type helper may be used to bypass authentication if that is suit
|
|||||||
<DT><B>server_http11</B><DD>
|
<DT><B>server_http11</B><DD>
|
||||||
<P>Obsolete.</P>
|
<P>Obsolete.</P>
|
||||||
|
|
||||||
|
<DT><B>update_headers</B><DD>
|
||||||
|
<P>Obsolete. The experimental actions enabled in 2.7 by this option have been integrated as default
|
||||||
|
actions for the <EM>rock</EM> storage type and memory caches.
|
||||||
|
The configuration option is no longer necessary and has been dropped.
|
||||||
|
NOTE: It is not yet supported by <EM>ufs</EM>, <EM>aufs</EM>, or <EM>diskd</EM> storage.</P>
|
||||||
|
|
||||||
<DT><B>upgrade_http0.9</B><DD>
|
<DT><B>upgrade_http0.9</B><DD>
|
||||||
<P>Obsolete.</P>
|
<P>Obsolete.</P>
|
||||||
|
|
||||||
@ -1275,9 +1278,6 @@ An external_acl_type helper may be used to bypass authentication if that is suit
|
|||||||
<DT><B>storeurl_rewrite_program</B><DD>
|
<DT><B>storeurl_rewrite_program</B><DD>
|
||||||
<P>Not yet ported from 2.7</P>
|
<P>Not yet ported from 2.7</P>
|
||||||
|
|
||||||
<DT><B>update_headers</B><DD>
|
|
||||||
<P>Not yet fully ported from 2.7. Memory and rock storage caches support this natively. UFS caches do not support it.</P>
|
|
||||||
|
|
||||||
</DL>
|
</DL>
|
||||||
</P>
|
</P>
|
||||||
</BODY>
|
</BODY>
|
||||||
|
@ -1,3 +0,0 @@
|
|||||||
version https://git-lfs.github.com/spec/v1
|
|
||||||
oid sha256:5d5a140e9b72753e6efe467cfa3c56d4db8ba6a8313beeca25145d34ddcadc49
|
|
||||||
size 2897354
|
|
@ -1,20 +0,0 @@
|
|||||||
File: squid-3.2.11.tar.bz2
|
|
||||||
Date: Tue Apr 30 05:08:44 UTC 2013
|
|
||||||
Size: 2897354
|
|
||||||
MD5 : cdd3612bed27e8d513b713004c78bf5b
|
|
||||||
SHA1: 124c0af704f88afb2feb5054b36f253544173a4b
|
|
||||||
Key : 0xFF5CF463 <squid3@treenet.co.nz>
|
|
||||||
fingerprint = EA31 CC5E 9488 E516 8D2D CC5E B268 E706 FF5C F463
|
|
||||||
keyring = http://www.squid-cache.org/pgp.asc
|
|
||||||
keyserver = subkeys.pgp.net
|
|
||||||
-----BEGIN PGP SIGNATURE-----
|
|
||||||
Version: GnuPG v1.4.12 (GNU/Linux)
|
|
||||||
|
|
||||||
iQEcBAABAgAGBQJRf1OIAAoJELJo5wb/XPRjwg4H/iNZaKfeqRLVtpFOXT0RKY+l
|
|
||||||
4+FVq1ptu6VLXRtkJWAj5RZfk6hmO9G+ZwZTnZWLf46c6kUvB/4Nlt0LD98FB9ng
|
|
||||||
ZtWfcTSked7idj3pInjMvNNa7j0qeOy4tvjUvxKtPAg2ZiRJXoPOKkS6TXnyyGvf
|
|
||||||
zlSWqmFUNvBsVULGALk9stq03jxqzf2CamNho8g2Tly//suJr8aHj38E8oMoCHWX
|
|
||||||
SCjo9yVTRdZjaGa6RKkyMGYpPpM9Wh4qIixAGT6Ih94YxzXg/mcWpcl6A6Pwc8CT
|
|
||||||
lrkKV2mDuGMoL1gGWYo8pUCEjvzKjRtoevu1wjzX/mqYbpilfLNnGg3vqZu7pfM=
|
|
||||||
=mQwq
|
|
||||||
-----END PGP SIGNATURE-----
|
|
3
squid-3.2.13.tar.bz2
Normal file
3
squid-3.2.13.tar.bz2
Normal file
@ -0,0 +1,3 @@
|
|||||||
|
version https://git-lfs.github.com/spec/v1
|
||||||
|
oid sha256:92144b72088ac93de7a0d387266172238bfd4e36ed90996af676e406c0c64e35
|
||||||
|
size 2898293
|
20
squid-3.2.13.tar.bz2.asc
Normal file
20
squid-3.2.13.tar.bz2.asc
Normal file
@ -0,0 +1,20 @@
|
|||||||
|
File: squid-3.2.13.tar.bz2
|
||||||
|
Date: Sat Jul 13 13:49:04 UTC 2013
|
||||||
|
Size: 2898293
|
||||||
|
MD5 : 367e59c9c25da7ebbfbf7cbc36d2444e
|
||||||
|
SHA1: f253df4981981c297cc7e719908e07b046506952
|
||||||
|
Key : 0xFF5CF463 <squid3@treenet.co.nz>
|
||||||
|
fingerprint = EA31 CC5E 9488 E516 8D2D CC5E B268 E706 FF5C F463
|
||||||
|
keyring = http://www.squid-cache.org/pgp.asc
|
||||||
|
keyserver = subkeys.pgp.net
|
||||||
|
-----BEGIN PGP SIGNATURE-----
|
||||||
|
Version: GnuPG v1.4.12 (GNU/Linux)
|
||||||
|
|
||||||
|
iQEcBAABAgAGBQJR4VuSAAoJELJo5wb/XPRjDMsH+gN9MyL0RAegBfeJtScW7dOU
|
||||||
|
E7ZPl8BjUqYTOoLPxXX95MTm6gJzzZ69S6ss8+db4fYd6kbGgkX/G05R0E5PBQJG
|
||||||
|
2OnJU1LUUzBcqTedai1SCuL90gVgy7oqzke6qlT43SSzuKPzmvlrtnBOrXK1guy0
|
||||||
|
xCFNFRtuZKIUVAyERlgE6tP0iPn5DZqSqGwGOx/lkNB20bgx83Amy7uav1F/d9Ps
|
||||||
|
sillN9btek4azrPqyqDXoSv+Tqh0u3Ni+zSQJrbVJ59QGFA38OLdW3i3MphgNg5N
|
||||||
|
/HkAGnfsCzJHQlxoM5kKz11U4caIv57gy9ZXIJ8peIIldOiLrfG1zcL/awyQVJc=
|
||||||
|
=hNXf
|
||||||
|
-----END PGP SIGNATURE-----
|
@ -1,3 +1,21 @@
|
|||||||
|
-------------------------------------------------------------------
|
||||||
|
Sun Jul 28 12:44:37 UTC 2013 - bruno@ioda-net.ch
|
||||||
|
|
||||||
|
- Changes for squid 3.2.13 release (July 13th 2013)
|
||||||
|
Better handling of strange port values in Host:
|
||||||
|
Bug #3869: assertion failed: MemBuf.cc:272: size < capacity
|
||||||
|
|
||||||
|
- Changes for squid 3.2.12 release (July 10th 2013)
|
||||||
|
Protect against buffer overrun in DNS query generation
|
||||||
|
Revert rev.11818 - not applicable to 3.2.
|
||||||
|
Allocate ClientInfo::hash.key using malloc() instead of new char[]
|
||||||
|
Remove origin_tries limiter on forwarding
|
||||||
|
Fixed leaking configurable SSL error details.
|
||||||
|
Fix memory error with Kerberos authentication
|
||||||
|
Avoid !closing assertions when helpers call comm_read [during reconfigure].
|
||||||
|
Avoid Comm::Connection leaks when helpers are reconfigured or otherwise closed.
|
||||||
|
Add missing piece omitted from rev.9677
|
||||||
|
|
||||||
-------------------------------------------------------------------
|
-------------------------------------------------------------------
|
||||||
Thu Jul 25 10:19:05 UTC 2013 - tchvatal@suse.com
|
Thu Jul 25 10:19:05 UTC 2013 - tchvatal@suse.com
|
||||||
|
|
||||||
|
@ -18,12 +18,13 @@
|
|||||||
|
|
||||||
%define squidlibdir %{_libdir}/squid
|
%define squidlibdir %{_libdir}/squid
|
||||||
%define squidconfdir /etc/squid
|
%define squidconfdir /etc/squid
|
||||||
|
%define version_published "2013-07-24"
|
||||||
|
|
||||||
Name: squid
|
Name: squid
|
||||||
Summary: Squid Version 3.2 WWW Proxy Server
|
Summary: Squid Version 3.2 WWW Proxy Server
|
||||||
License: GPL-2.0+
|
License: GPL-2.0+
|
||||||
Group: Productivity/Networking/Web/Proxy
|
Group: Productivity/Networking/Web/Proxy
|
||||||
Version: 3.2.11
|
Version: 3.2.13
|
||||||
Release: 0
|
Release: 0
|
||||||
Url: http://www.squid-cache.org/Versions/v3/3.2
|
Url: http://www.squid-cache.org/Versions/v3/3.2
|
||||||
Source0: http://www.squid-cache.org/Versions/v3/3.2/%{name}-%{version}.tar.bz2
|
Source0: http://www.squid-cache.org/Versions/v3/3.2/%{name}-%{version}.tar.bz2
|
||||||
@ -135,8 +136,8 @@ The most important of these new features are:
|
|||||||
* Cache Manager access changes
|
* Cache Manager access changes
|
||||||
|
|
||||||
First STABLE release Date: 02 Aug 2010
|
First STABLE release Date: 02 Aug 2010
|
||||||
Latest Release: 3.2.9
|
Latest Release: %{version}
|
||||||
Latest Release Date: 12 Mar 2013
|
Latest Release Date: %{version_published}
|
||||||
|
|
||||||
%prep
|
%prep
|
||||||
%gpg_verify %{S:1}
|
%gpg_verify %{S:1}
|
||||||
|
Loading…
Reference in New Issue
Block a user