From mboxrd@z Thu Jan  1 00:00:00 1970
From: Michael Tremer <michael.tremer@ipfire.org>
To: development@lists.ipfire.org
Subject: Re: [PATCH] squid: Update to 4.5
Date: Fri, 04 Jan 2019 18:07:10 +0000
Message-ID: <7DD4FCC4-FF89-45FB-8A9D-86EB85B9F412@ipfire.org>
In-Reply-To: <3acb0703-c790-e823-fa7d-d24f604ebb1c@ipfire.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============7716575244102586430=="
List-Id: <development.lists.ipfire.org>

--===============7716575244102586430==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Hey,

indeed. Luckily we are not users of this SSL bump nightmare.

Best,
-Michael

> On 4 Jan 2019, at 18:02, Matthias Fischer <matthias.fischer(a)ipfire.org> w=
rote:
>=20
> Hi,
>=20
> On 02.01.2019 20:11, Michael Tremer wrote:
>>> ...
>>>>=20
>>>> Why do they compare everything to squid 3.5 then?
>>>=20
>>> No idea. Perhaps to make upgrading easier for people running
>>> (huge/complex) 3.x-installations? They even still list "missing
>>> squid.conf options available in Squid-2.7"! ;-)
>>>=20
>>> ...3.x will not be continued, see:
>>>=20
>>> https://wiki.squid-cache.org/RoadMap/Squid3
>>>=20
>>> "We are no longer releasing new Squid series with 3.x numbers.=E2=80=9D
>>=20
>> No, it is indeed time to migrate!
>> ...
> Just for completeness - excerpts from the official announcement which
> came today: ;-)
>=20
> ***SNIP***
> The Squid HTTP Proxy team is very pleased to announce the availability
> of the Squid-4.5 release!
>=20
> This release is a security and bug fix release resolving several issues
> found in the prior Squid releases.
>=20
> The major changes to be aware of:
>=20
> * Bug 4253: ssl_bump prevents access to some web contents
>=20
> ...
>=20
> * Redesign forward_max_tries to count TCP connection attempts
>=20
> ...
>=20
> * Fix client_connection_mark ACL handling of clientless transactions
>=20
> ...
>=20
> * Multiple NetDB behaviour updates
>=20
> ...
>=20
> * The logformat code %>handshake is added
>=20
> ...
>=20
> * Use pkg-config for detecting libxml2
>=20
> ...
>=20
>  All users of Squid-4 with SSL-Bump functionality are urged to upgrade
> as soon as possible.
>=20
>  All other users of Squid-4 are encouraged to upgrade as time permits.
>=20
>  All users of Squid-3 are encouraged to upgrade where possible.
> ***SNAP***
>=20
> The last sentence says it all...
>=20
> Best,
> Matthias


--===============7716575244102586430==--