This is an automated email from the ASF dual-hosted git repository.
dependabot[bot] pushed a change to branch
dependabot/go_modules/tests/gold_tests/h3/go_h3_client/golang.org/x/crypto-0.52.0
in repository https://gitbox.apache.org/repos/asf/trafficserver.git
discard aa2023eda7 build(deps): bump golang.org/x/crypto
add ff3eaaa5da Add ats-build skill for Claude harness (#13451)
add 8b9a0075cc Fix JSONRPC server shutdown race (#13461)
add 3df2bceb04 HTTP/3 support via OpenSSL 3.5 (#13186)
add df93dd75ef Stabilize proxy protocol access log test (#13462)
add 89fdedb504 Raise HTTP/2 SETTINGS limits (#13444)
add 56ddbbb34f Add tests for OpenSSL cert loading (#13350)
add 07aa06c79b TLS: Fix EVP_PKEY leak in SSLPrivateKeyHandler (#13464)
add b080c8386c Release logging thread continuations (#13466)
add f063c0eb9a Make log pipe test tolerate restricted kernels (#13431)
add 16bd59ab4c healthchecks: reference count status file data (#13432)
add 4c2e3e2fbb txn_box: Log text block reload failures (#13411)
add 80c01c262e Rename `OPENSSL_IS_X` -> `OPENSSL_IS_AT_LEAST_X` (#13469)
add 3ccfb197ee Enable OpenSSL QUIC when available (#13468)
add d05506e2c3 Fix exact URL cache config matching (#13438)
add c0520405e5 Restrict HTTP/2 TLS cipher suites (#13428)
add bac05dadfa Add QMux support (HTTP/3 over TLS/TCP) (#13465)
add 5d878a4be2 Guard quiche-only QUIC connection state (#13478)
add b279b9f5ca Guard pre-init log wakeups (#13472)
add 62016861cf Fix some copy instead of move Coverity CIDs (#13470)
add e7eb77a5c3 Remove OpenSSL ENGINE code (#13471)
add 6d36c38b9c ci-fedora-cxx20 preset: use clang (#13477)
add db21b1b3d4 Make QUIC token secrets configurable (#13397)
add ae4e19e994 header_rewrite: add POST_REMAP_HOOK support (#13426)
add e013fde85e header_rewrite: inherit default hook support (#13486)
add be113cdf34 Fix certifier test permissions (#13473)
add a2ff4aeac3 Fix wrong variable in eventloop events max metric (#13488)
add d0119c4647 Cache empty chunked responses (#13410)
add 2d9d666bc6 Add traffic_ctl cache clear command (#13418)
add e7569f35c3 CMake: use new policies for Highway (#13414)
add bc0bca7be4 Fix enabling per-server metrics that disables the outbound
keep-alive minimum (#13480)
add 339614ac04 Track minimum-only origin connections (#13492)
add f00122e03a autest: skip tls_engine_abort test when plugin is absent
(#13494)
add 698cb9f0e7 Only restore a retried parent when the retry succeeds
(#13474)
add d70bdb7035 Fix bad return in `validate_hostname` (#13498)
add bdefaf97b6 Resolve OpenSSL 4.0 build issues (#13476)
add c340299eb2 build(deps): bump golang.org/x/crypto (#13479)
add 4e2f5c25fe build(deps): bump golang.org/x/crypto
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (aa2023eda7)
\
N -- N -- N
refs/heads/dependabot/go_modules/tests/gold_tests/h3/go_h3_client/golang.org/x/crypto-0.52.0
(4e2f5c25fe)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
.claude/CLAUDE.md | 89 +--
.claude/skills/ats-build/SKILL.md | 81 +++
CMakeLists.txt | 103 +++-
CMakePresets.json | 10 +-
cmake/CheckOpenSSLHasNativeQuic.cmake | 59 ++
cmake/CheckOpenSSLHasQuicTlsCbs.cmake | 55 ++
...SSLIsQuictls.cmake => CheckQuicheHasQmux.cmake} | 20 +-
cmake/Findquiche.cmake | 27 +
doc/admin-guide/files/records.yaml.en.rst | 26 +-
doc/admin-guide/plugins/header_rewrite.en.rst | 16 +
.../plugins/txn_box/user/DirectiveReference.en.rst | 7 +-
doc/appendices/command-line/traffic_ctl.en.rst | 18 +
doc/developer-guide/jsonrpc/jsonrpc-api.en.rst | 57 ++
doc/developer-guide/testing/autests.en.rst | 1 +
.../client_context_dump/client_context_dump.cc | 2 +-
example/plugins/c-api/verify_cert/verify_cert.cc | 4 +-
include/cripts/Certs.hpp | 13 +-
include/cripts/Connections.hpp | 2 +-
include/iocore/eventsystem/EThread.h | 2 +-
include/iocore/net/ConnectionTracker.h | 13 +-
include/iocore/net/QUICMultiCertConfigLoader.h | 14 +-
include/iocore/net/TLSSNISupport.h | 1 +
include/iocore/net/qmux/QMuxConnection.h | 132 +++++
include/iocore/net/quic/QUICConfig.h | 48 ++
include/iocore/net/quic/QUICStream.h | 22 +-
include/iocore/net/quic/QUICStreamManager.h | 10 +-
include/iocore/net/quic/QUICTypes.h | 13 +-
include/mgmt/config/ConfigReloadTrace.h | 5 +-
.../handlers/{hostdb/HostDB.h => cache/Cache.h} | 13 +-
include/mgmt/rpc/server/IPCSocketServer.h | 2 +-
include/proxy/http3/Http3Frame.h | 3 +
include/proxy/http3/Http3HeaderFramer.h | 23 +-
include/proxy/http3/Http3HeaderVIOAdaptor.h | 1 -
include/proxy/http3/Http3Transaction.h | 10 +-
include/ts/apidefs.h.in | 3 +
include/tscore/ink_config.h.cmake.in | 2 +
include/tscore/ink_inet.h | 1 +
lib/CMakeLists.txt | 2 +
lib/highway/CMakeLists.txt | 5 +-
plugins/certifier/certifier.cc | 21 +-
.../access_control/unit_tests/test_utils.cc | 2 +-
.../cert_reporting_tool/cert_reporting_tool.cc | 2 +-
plugins/experimental/filter_body/filter_body.cc | 5 +-
plugins/experimental/jax_fingerprint/ja4/test.cc | 3 +-
plugins/experimental/jax_fingerprint/ja4h/test.cc | 5 +-
plugins/experimental/sslheaders/expand.cc | 8 +-
plugins/experimental/sslheaders/sslheaders.cc | 2 +-
.../experimental/txn_box/plugin/src/Comparison.cc | 3 +-
plugins/experimental/txn_box/plugin/src/Config.cc | 3 +-
.../experimental/txn_box/plugin/src/ip_space.cc | 2 +-
.../experimental/txn_box/plugin/src/text_block.cc | 16 +-
plugins/experimental/txn_box/plugin/src/ts_util.cc | 4 +-
plugins/experimental/wasm/ats_context.cc | 14 +-
plugins/header_rewrite/header_rewrite.cc | 3 +
plugins/header_rewrite/header_rewrite_test.cc | 13 +
plugins/header_rewrite/operators.cc | 56 --
plugins/header_rewrite/operators.h | 4 -
plugins/header_rewrite/parser.cc | 4 +
plugins/header_rewrite/resources.cc | 3 +-
plugins/header_rewrite/statement.cc | 1 +
plugins/healthchecks/healthchecks.cc | 201 +++----
plugins/lua/ts_lua_client_cert_helpers.h | 11 +-
plugins/lua/ts_lua_client_request.cc | 24 +-
plugins/prefetch/path.cc | 3 +-
plugins/stats_over_http/stats_over_http.cc | 3 +-
plugins/webp_transform/ImageTransform.cc | 4 +-
src/api/InkAPI.cc | 12 +-
src/config/ssl_multicert.cc | 5 +-
src/config/unit_tests/test_ssl_multicert.cc | 11 +-
src/cripts/Certs.cc | 16 +-
src/iocore/cache/CacheDir.cc | 3 +-
src/iocore/cache/CacheVC.cc | 19 +-
src/iocore/cache/P_CacheInternal.h | 1 +
src/iocore/net/CMakeLists.txt | 44 +-
src/iocore/net/ConnectionTracker.cc | 32 +-
src/iocore/net/OCSPStapling.cc | 8 +-
src/iocore/net/OpenSSLQUICNetProcessor.cc | 125 ++++
...VConnection.cc => OpenSSLQUICNetVConnection.cc} | 660 ++++++++++++---------
src/iocore/net/OpenSSLQUICPacketHandler.cc | 630 ++++++++++++++++++++
src/iocore/net/P_QUICNetProcessor.h | 10 +-
src/iocore/net/P_QUICNetVConnection.h | 66 ++-
src/iocore/net/P_QUICPacketHandler.h | 22 +-
src/iocore/net/P_SSLNetVConnection.h | 24 +-
src/iocore/net/P_SSLUtils.h | 15 +-
src/iocore/net/QUICMultiCertConfigLoader.cc | 243 +++++++-
src/iocore/net/QUICNetVConnection.cc | 29 +-
src/iocore/net/SSLClientCoordinator.cc | 5 +-
src/iocore/net/SSLClientUtils.cc | 2 +-
src/iocore/net/SSLKeyUtils.cc | 8 +-
src/iocore/net/SSLKeyUtils.h | 4 +-
src/iocore/net/SSLNetVConnection.cc | 29 +-
src/iocore/net/SSLSessionTicket.cc | 8 +
src/iocore/net/SSLUtils.cc | 129 ++--
src/iocore/net/TLSSNISupport.cc | 10 +
.../iocore/net/qmux}/CMakeLists.txt | 9 +-
src/iocore/net/qmux/QMuxConnection.cc | 543 +++++++++++++++++
src/iocore/net/quic/CMakeLists.txt | 18 +-
src/iocore/net/quic/OpenSSLQuicCompat.cc | 493 +++++++++++++++
src/iocore/net/quic/QUICConfig.cc | 166 ++++++
src/iocore/net/quic/QUICGlobals.cc | 3 +-
src/iocore/net/quic/QUICStream.cc | 56 +-
src/iocore/net/quic/QUICStreamManager.cc | 28 +-
src/iocore/net/quic/QUICTypes.cc | 222 +++++--
.../net/unit_tests/test_QUICTokenKeyConfig.cc | 138 +++++
src/iocore/net/unit_tests/test_SSLDHParams.cc | 186 +++++-
src/iocore/net/unit_tests/test_SSLSNIConfig.cc | 3 +-
src/iocore/net/unit_tests/unit_test_main.cc | 5 +
src/mgmt/config/ConfigReloadTrace.cc | 5 +-
src/mgmt/config/FileManager.cc | 5 +
src/mgmt/config/ReloadCoordinator.cc | 6 +-
src/mgmt/rpc/CMakeLists.txt | 1 +
src/mgmt/rpc/handlers/cache/Cache.cc | 69 +++
src/mgmt/rpc/handlers/config/Configuration.cc | 3 +-
src/mgmt/rpc/server/IPCSocketServer.cc | 6 +-
src/mgmt/rpc/server/RPCServer.cc | 12 +-
src/proxy/CMakeLists.txt | 2 +-
src/proxy/ControlMatcher.cc | 2 +-
src/proxy/Plugin.cc | 3 +-
src/proxy/http/CMakeLists.txt | 2 +-
src/proxy/http/HttpProxyServerMain.cc | 5 +
src/proxy/http/HttpSM.cc | 3 +-
src/proxy/http/HttpTransact.cc | 6 -
src/proxy/http/HttpTunnel.cc | 14 +-
src/proxy/http2/HTTP2.cc | 4 +-
src/proxy/http3/CMakeLists.txt | 4 +
src/proxy/http3/Http3App.cc | 9 +-
src/proxy/http3/Http3DataFramer.cc | 2 +-
src/proxy/http3/Http3Frame.cc | 6 +
src/proxy/http3/Http3FrameCounter.cc | 3 +-
src/proxy/http3/Http3FrameDispatcher.cc | 8 +-
src/proxy/http3/Http3HeaderFramer.cc | 30 +
src/proxy/http3/Http3ProtocolEnforcer.cc | 4 +-
src/proxy/http3/Http3SessionAccept.cc | 22 +-
src/proxy/http3/Http3Transaction.cc | 15 +-
src/proxy/http3/test/test_Http3FrameDispatcher.cc | 49 +-
src/proxy/logging/Log.cc | 2 +
src/proxy/logging/LogField.cc | 4 +-
src/proxy/logging/LogObject.cc | 8 +-
src/proxy/unit_tests/CMakeLists.txt | 9 +-
src/proxy/unit_tests/test_ControlMatcher.cc | 118 ++++
src/records/RecHttp.cc | 9 +
src/records/RecordsConfig.cc | 6 +-
src/records/unit_tests/test_ReloadDirectives.cc | 2 +-
src/traffic_cache_tool/CacheDefs.h | 3 +-
src/traffic_ctl/CtrlCommands.cc | 27 +-
src/traffic_ctl/CtrlCommands.h | 11 +
src/traffic_ctl/jsonrpc/CtrlRPCRequests.h | 8 +
src/traffic_ctl/jsonrpc/ctrl_yaml_codecs.h | 4 +-
src/traffic_ctl/traffic_ctl.cc | 6 +
src/traffic_layout/info.cc | 2 +
src/traffic_server/CMakeLists.txt | 6 +-
src/traffic_server/RpcAdminPubHandlers.cc | 5 +
src/traffic_server/traffic_server.cc | 12 +-
src/tscore/CMakeLists.txt | 2 +-
src/tscore/X509HostnameValidator.cc | 19 +-
src/tscore/ink_inet.cc | 1 +
tests/gold_tests/autest-site/ats_replay.test.ext | 7 +
.../cache-exact-url.test.py} | 8 +-
.../cache/cache-generation-clear.test.py | 12 +-
.../gold/{hit_default77.gold => hit_default0.gold} | 2 +-
.../{miss_default77.gold => miss_default0.gold} | 2 +-
.../replay/cache-exact-url.replay.yaml} | 97 ++-
...negative-caching-300-second-timeout.replay.yaml | 51 +-
.../gold_tests/h2/clients/h2_extension_settings.py | 156 +++++
tests/gold_tests/h2/http2.test.py | 9 +
tests/gold_tests/h3/h3_go_client.test.py | 2 +-
tests/gold_tests/headers/via.test.py | 2 +-
tests/gold_tests/logging/log_pipe.test.py | 18 +-
.../log_plugin_init.test.py} | 21 +-
.../logging/pipe_buffer_is_larger_than.py | 26 +-
.../minimum_keep_alive.replay.yaml} | 63 +-
.../per_server_connection_min.test.py} | 13 +-
.../per_server_metric_enabled.replay.yaml} | 27 +-
.../per_server_metric_enabled.test.py | 113 ++++
...t.test.py => parent_retry_availability.test.py} | 9 +-
.../parent_retry_failure_stays_down.replay.yaml | 215 +++++++
.../parent_retry_success_restores.replay.yaml | 177 ++++++
.../pluginTest/certifier/certifier.test.py | 26 +-
.../header_rewrite_post_remap.replay.yaml | 123 ++++
.../header_rewrite_post_remap.test.py} | 8 +-
.../{rules/rule_client.conf => post_remap.conf} | 41 +-
.../pluginTest/healthchecks/healthchecks.test.py | 54 ++
.../stale_response/stale_response.test.py | 2 +
.../txn_box/static_file/static_file.replay.yaml | 5 +
.../static_file/txn_box_static_file.test.py | 13 +
.../pluginTest/txn_box/static_file/unreadable.txt | 1 +
.../gold_tests/proxy_protocol/gold/access-cp.gold | 4 +-
.../proxy_protocol/gold/access-nocp.gold | 4 +-
.../proxy_protocol/proxy_protocol.test.py | 15 +-
tests/gold_tests/qmux/go_qmux_client/go.mod | 15 +
.../go_h3_client => qmux/go_qmux_client}/go.sum | 12 +-
tests/gold_tests/qmux/go_qmux_client/main.go | 340 +++++++++++
.../gold_tests/qmux/go_qmux_client/qmux_compat.go | 223 +++++++
tests/gold_tests/qmux/qmux.replay.yaml | 126 ++++
tests/gold_tests/qmux/qmux_go_client.test.py | 128 ++++
tests/gold_tests/records/gold/full_records.yaml | 4 +-
.../records/legacy_config/full_records.config | 4 +-
tests/gold_tests/tls/ssl_multicert_loader.test.py | 2 +
tests/gold_tests/tls/tls_engine_abort.test.py | 3 +-
tests/gold_tests/tls/tls_h2_cipher_suite.test.py | 94 +++
tests/tools/plugins/ssl_client_verify_test.cc | 10 +-
tests/tools/plugins/test_log_interface.cc | 11 +-
202 files changed, 7073 insertions(+), 1164 deletions(-)
create mode 100644 .claude/skills/ats-build/SKILL.md
create mode 100644 cmake/CheckOpenSSLHasNativeQuic.cmake
create mode 100644 cmake/CheckOpenSSLHasQuicTlsCbs.cmake
copy cmake/{CheckOpenSSLIsQuictls.cmake => CheckQuicheHasQmux.cmake} (60%)
create mode 100644 include/iocore/net/qmux/QMuxConnection.h
copy include/mgmt/rpc/handlers/{hostdb/HostDB.h => cache/Cache.h} (79%)
create mode 100644 src/iocore/net/OpenSSLQUICNetProcessor.cc
copy src/iocore/net/{QUICNetVConnection.cc => OpenSSLQUICNetVConnection.cc}
(53%)
create mode 100644 src/iocore/net/OpenSSLQUICPacketHandler.cc
copy {plugins/experimental/filter_body => src/iocore/net/qmux}/CMakeLists.txt
(82%)
create mode 100644 src/iocore/net/qmux/QMuxConnection.cc
create mode 100644 src/iocore/net/quic/OpenSSLQuicCompat.cc
create mode 100644 src/iocore/net/unit_tests/test_QUICTokenKeyConfig.cc
create mode 100644 src/mgmt/rpc/handlers/cache/Cache.cc
create mode 100644 src/proxy/unit_tests/test_ControlMatcher.cc
copy tests/gold_tests/{headers/range.test.py => cache/cache-exact-url.test.py}
(82%)
rename tests/gold_tests/cache/gold/{hit_default77.gold => hit_default0.gold}
(83%)
rename tests/gold_tests/cache/gold/{miss_default77.gold => miss_default0.gold}
(82%)
copy tests/gold_tests/{dns/replay/connect_attempts_rr_no_retry.replay.yaml =>
cache/replay/cache-exact-url.replay.yaml} (55%)
create mode 100644 tests/gold_tests/h2/clients/h2_extension_settings.py
copy tests/gold_tests/{pluginTest/cppapi/cppapi.test.py =>
logging/log_plugin_init.test.py} (54%)
copy tests/gold_tests/{headers/replays/malformed_host_port.replay.yaml =>
origin_connection/minimum_keep_alive.replay.yaml} (51%)
copy tests/gold_tests/{chunked_encoding/chunked_flow_control.test.py =>
origin_connection/per_server_connection_min.test.py} (58%)
copy tests/gold_tests/{ats_probe/ats_probe.replay.yaml =>
origin_connection/per_server_metric_enabled.replay.yaml} (64%)
create mode 100644
tests/gold_tests/origin_connection/per_server_metric_enabled.test.py
copy tests/gold_tests/parent_proxy/{parent_retry_non_retryable_post.test.py =>
parent_retry_availability.test.py} (67%)
create mode 100644
tests/gold_tests/parent_proxy/replays/parent_retry_failure_stays_down.replay.yaml
create mode 100644
tests/gold_tests/parent_proxy/replays/parent_retry_success_restores.replay.yaml
create mode 100644
tests/gold_tests/pluginTest/header_rewrite/header_rewrite_post_remap.replay.yaml
copy tests/gold_tests/{headers/range.test.py =>
pluginTest/header_rewrite/header_rewrite_post_remap.test.py} (82%)
copy tests/gold_tests/pluginTest/header_rewrite/{rules/rule_client.conf =>
post_remap.conf} (52%)
create mode 100644
tests/gold_tests/pluginTest/txn_box/static_file/unreadable.txt
create mode 100644 tests/gold_tests/qmux/go_qmux_client/go.mod
copy tests/gold_tests/{h3/go_h3_client => qmux/go_qmux_client}/go.sum (68%)
create mode 100644 tests/gold_tests/qmux/go_qmux_client/main.go
create mode 100644 tests/gold_tests/qmux/go_qmux_client/qmux_compat.go
create mode 100644 tests/gold_tests/qmux/qmux.replay.yaml
create mode 100644 tests/gold_tests/qmux/qmux_go_client.test.py
create mode 100644 tests/gold_tests/tls/tls_h2_cipher_suite.test.py
