The Squid HTTP Proxy team is very pleased to announce the
availability of the Squid-3.2.0.8 beta release!
This release brings may bug and stability fixes found in earlier releases.
Some build toolchain changes:
Libtool 2.2 is now a minimal requirement for building Squid-3.2. This
brings the minimum build tools to: libtool 2.2, autoconf 2.61, automake
and libcap 2.0.9. gcc/g++ 4.x is required when using the GNU compiler tools.
pkg-config is now being utilized. For now only eCAP adaptation
requires it. Other features will be converted in upcoming releases. For
now it remains optional for a basic default build. If you are aware of
any operating system which does not provide the tool please inform us
via the squid-dev mailing list.
Additional minor features now supported:
* Bug #2055: Honor ICAP Max-Connections
* SSL Server Name Indication (SNI)
* external_acl_type %EXT_LOG and %EXT_TAG format options
* Separate SSL error detail name and message
As usual this release contains all the fixes passed on to 3.1 series
alongside its own changes. There are several important security changes
to SSL-bump feature included:
* Bug 3209: Leaking decrypted information to cache_peers. From this
release onwards it will not be permitted blindly. The security audit of
ssl-bump is ongoing so if you have any need for this behaviour please
present your requirement case to the squid-dev mailing list for discussion.
* Bug 3205: SSL-Bump starts and hangs. A regression raised when
correcting the CONNECT status handling.
* Support for "slow" ACLs in the ssl_bump access control. Those
requiring remote information lookups. ie DNS, IDENT, or external ACLs.
* Fixed HTTP redirection and auth handling of CONNECT requests. SSL is
only bumped if the request is to be tunneled by this Squid.
See the ChangeLog for the list of other minor changes in this release.
All users of the ssl-bump feature are urged to upgrade to this release
as soon as possible.
Users of earlier 3.2 beta releases are encouraged to upgrade as soon as
possible.
Please refer to the release notes at
http://www.squid-cache.org/Versions/v3/3.2/RELEASENOTES.html
when you are ready to make the switch to Squid-3.2
Upgrade tip:
"squid -k parse" is starting to display even more useful hints about
squid.conf changes.
This new release can be downloaded from our HTTP or FTP servers
http://www.squid-cache.org/Versions/v3/3.2/
ftp://ftp.squid-cache.org/pub/squid/
ftp://ftp.squid-cache.org/pub/archive/3.2/
or the mirrors. For a list of mirror sites see
http://www.squid-cache.org/Download/http-mirrors.dyn
http://www.squid-cache.org/Download/mirrors.dyn
If you encounter any issues with this release please file a bug report.
http://bugs.squid-cache.org/
Amos Jeffries
