Releases: yahoo/proxy-verifier
openssl quic 3.3
This updates the library dependencies, including the use of openssl quic 3.3 via dev branch since it hasn't landed yet in 3 months:
https://github.com/quictls/openssl/tree/wladd/quic-on-3.3-dirty
- nghttp2: v1.62.1
- nghttp3: v1.4.0
- ngtcp2: v1.6.0
- openssl-quic 3.3 (via wladd dev branch)
--poll-timeout and close-on-goaway
This release adds the following features:
--poll-timeout
: a new command line argument to specify what the socket timeout should be. The previous hard-coded value, and the current default value, is 5000 milliseconds.close-on-goaway
: a new session directive for HTTP/2 connections that directs whether the verifier client will close the connection on aGOAWAY
frame after processing outstanding streams, or continue to try to send the other specified streams from the replay file. The former behavior is the default as that is more in keeping with the RFC.
This release also contains HTTP/2 Expect: 100-Continue
fixes.
--send-buffer-size
- This adds feature support for --send-buffer-size.
- It also has a fix for #289
Fix multi-DATA frame related bugs
This bug fix release contains fixes for transactions with multiple DATA frames specified.
Specify separate DATA frames
This release adds the ability to specify separate DATA frames in a replay file.
HTTP/2 trailer support
This release comes with a number of bug fixes and updates. The big new feature is HTTP/2 trailer support. This also includes:
- Transition to OpenSSL 3.1 from OpenSSL 1.1.1.
- Update the ng* library dependencies:
- ngtcp2: v0.15.0 to v0.16.0
- nghttp3: v0.11.0 to v0.12.0
- Update libswoc from 1.3.7 to 1.5.1. This adds support for the newest compilers used by fedora:38.
- Updates Expect: 100-continue support. The previous behavior was compliant, but this makes it so the client actually waits to send the body until the
100 Continue
response is received. - Updates the HTTP/2 test proxy to use the currently supported h2 library rather than the abandoned httpx library.
Updated HTTP/2 pseudo-headers enforcement logic
This release contains a bug fix for #252 to fix the way Proxy Verifier relates to pseudo header fields for HTTP/2 CONNECT requests.
This also updates the library dependencies as follows:
- openssl: 1.1.1u
- nghttp2: v1.54.0
- ngtcp2: v0.15.0
- nghttp3: v0.11.0
This also updates the Proxy Verifier autests to support Python 3.11.
HTTP/2 frame delay and other updates
This updates the way PV relates to RST_STREAM, delayed frames, and documents the behavior of PV with respect to the END_STREAM flag.
Proxy Protocol Support
This release adds:
- Proxy Protocol support.
- HTTP response reason verification.
For each of these, see the README.md for details.