CHANGELOG revision 5392f7a3
12019-09-11 2 - 2.2.0 3 - [FEATURE] Server code is included in the library 4 - [FEATURE] IETF QUIC and HTTP/3 Support (ID-22) 5 62019-05-13 7 - 1.21.2 8 - [OPTIMIZATION] HPACK: use history to improve compression performance 9 102019-05-06 11 - 1.21.1 12 - [BUGFIX] If FIN or RST not received, don't delay stream destruction. 13 - [OPTIMIZATION] Speed up HPACK encoder by using same hash value to 14 search static and dynamic tables. 15 162019-04-12 17 - 1.21.0 18 - [FEATURE] Add qlog log module. 19 202019-04-01 21 - 1.20.0 22 - [FEATURE] Add support for Q046. 23 242019-03-19 25 - 1.19.6 26 - [BUGFIX] Ensure that Largest Observed does not decrease in ACKs we 27 send. ACK frames placed in packets in buffered queues (optimization 28 introduced in 1.17.15) can be preceded by an ACK frame generated later. 29 In this case, the older ACK frame should not be sent out, as Chromium- 30 based servers flags decrease in the ACK frame's Largest Observed value 31 as an error. 32 332019-03-05 34 - 1.19.5 35 - [BUGFIX] Use correct public key from PUBS based on KEXS index. 36 - [BUGFIX] Check flags before dispatching writes, avoiding assert. 37 - [BUGFIX] Set :scheme to "https" (instead of "HTTP"). 38 392019-02-25 40 - 1.19.4 41 - [BUGFIX] Check buffer bounds when looking up version in 0-RTT blob. 42 - [BUGFIX] http_client: don't fetch 0-rtt info if handshake failed. 43 - Log number of pacer calls at DEBUG, rather than NOTICE, level. 44 452019-02-18 46 - 1.19.3 47 - [BUGFIX] Q044: don't encode packet number in 6 bytes. Six-byte 48 packet number encoding does not exist in Q044. This fixes a 49 regression introduced in '[BUGFIX] Buffered packets can contain 50 ACK frames' -- we need to keep QUIC version in mind when selecting 51 the longest possible packet number encoding used for the buffered 52 packet that carries the ACK. 53 - [BUGFIX] Do not increase CWND when timeout occurs. 54 - http_client: support setting handshake timeout on command line. 55 Use -o handshake_to=timeout. 56 - http_client: use -k to connect UDP socket to pick up ICMP errors. 57 - http_client: allow pathless mode, when only handshake is performed 58 without issuing any requests. This can be done by simply not 59 specifying a -p flag on the command line. 60 612019-02-11 62 - 1.19.2 63 - [BUGFIX] Begin negotiation with version provided in 0-RTT info. 64 - [BUGFIX] Version checking in zero_rtt deserialize function. 65 662019-02-04 67 - 1.19.1 68 - [BUGFIX] Fix Windows build. 69 702019-02-04 71 - 1.19.0 72 - [FEATURE, API Change] 0-RTT support. Add function to export 0-RTT 73 information; it can be supplied to a subsequent connect() call. 74 - [FEATURE] Add -0 flag to http_client to exercise 0-RTT support. 75 - [BUGFIX] Resuscitate the Windows build. 76 - [BUGFIX] Send HTTP settings (max header list size) if necessary. 77 - [BUGFIX] Buffered packets can contain ACK frames. 78 - [BUGFIX] Make packet writeable once all STREAM frames are elided. 79 - [BUGFIX] Fix potential null dereference when realloc fails. 80 - cmake: simplify build configuration. 81 822019-01-28 83 - 1.18.0 84 - [API Change] Can specify clock granularity in engine settings. 85 - [BUGFIX] Pacer uses fixed clock granularity. Since the change on 86 2018-04-09, it is not necessary to try to approximate the next tick 87 time in the pacer: it can use fix clock granularity specified by 88 the user. 89 - [BUGFIX] Do not tick constantly before handshake is done. 90 - [BUGFIX] Do not exit tick prematurely: reuse packet with ACK. Even 91 if we cannot allocate *more* packets, we could still be able to write 92 to one already allocated. 93 - [BUGFIX] Do not schedule pacer if there are no lost packets. 94 952019-01-17 96 - 1.17.15 97 - [BUGFIX] http_client: make sure only one read per on_read() callback 98 is performed in the header conversion bypass (-B) mode. 99 - http_client: with -E, assign random priority when stream is created. 100 - [OPTIMIZATION] On immediate write, place an ACK frame into the first 101 buffered packet if an ACK is queued. This reduces the number of 102 standalone ACK packets. 103 - [OPTIMIZATION] Allow placing more than one STREAM frame from the same 104 stream into an outgoing packet. This change minimizes the number of 105 buffered packets required to store several small HTTP messages by 106 virtue of allowing more than one STREAM frame from HEADERS stream in 107 the same packet. 108 - [OPTIMIZATION] Flush headers when writing to buffered packets. This 109 causes the headers to be written to the same buffered packet queue, 110 thereby improving packet utilization, especially for small HTTP 111 messages. 112 1132019-01-16 114 - 1.17.14 115 - [FEATURE] http_client can now collect stats: time to connect, TTFB, 116 time to download, requests per seconds, and bandwidth. See -t flag. 117 - [BUGFIX] http_client: -B, -K, and -r can be used at the same time. 118 - [BUGFIX] http_client: do not display cert chain before each request. 119 Now this is only done once per connection, if the handshake is 120 successful and -a option is given. 121 - [BUGFIX] Do not wait to dispatch on_close() after reading. If a 122 stream is scheduled to be closed after on_read() callback returns, 123 close it immediately instead of waiting until the end of the tick. 124 If client creates new request from on_close() event, they will be 125 processed in the same tick instead of waiting for the next one. 126 - [BUGFIX] HEADERS stream is critical: always treat it with highest 127 priority. 128 1292019-01-10 130 - 1.17.12 131 - [FEATURE] http_client can now issue parallel requests in the context 132 of a single connection. See -w option. 133 1342019-01-03 135 - 1.17.11 136 - Fix strict aliasing warning in optimized compilation. 137 1382018-12-27 139 - 1.17.10 140 - Fix the example program to be able to use parallel connections 141 again. (See the -n argument.) 142 1432018-12-18 144 - 1.17.9 145 - [BUGFIX] Engine: reduce minimum batch size from 256 to 4 146 1472018-12-10 148 - 1.17.8 149 - [BUGFIX] Fix compilation on FreeBSD and 32-bit Linux 150 1512018-12-03 152 - 1.17.7 153 - [BUGFIX] Do not unset PING alarm before ringing expired alarms. 154 This prevented PING from ever being sent. 155 1562018-11-29 157 - 1.17.6 158 - Add failsafe: resume sending packets after some time 159 160 The change puts a 1-second limit on the amount of time the engine 161 will not send packets after some packets are delayed. This makes 162 the library robust in case the user does not unblock the engine 163 explicitly using lsquic_engine_send_unsent_packets() call. 164 165 - [BUGFIX] Handle corner cases in send controller when packets are 166 a) delayed or b) dropped during repackaging. 167 - [BUGFIX] Memory leak: destroy buffered packets during controller 168 cleanup. 169 1702018-11-16 171 - 1.17.3 172 - [BUGFIX] Do not send STOP_WAITING frames when using Q044 173 1742018-10-19 175 - 1.17.2 176 - [BUGFIX] Memory leak in test_frame_rw unit test. 177 - [BUGFIX] Parsing packets with short IETF header: do not overwrite 178 flags. (Only a problem in unit tests -- benign otherwise.) 179 1802018-10-16 181 - 1.17.0 182 - [API Change] Packet out Memory Interface (PMI) update: 183 - Split PMI pool return into pmi_release and pmi_return 184 - PMI callbacks take peer_ctx and is_ipv6 arguments 185 - [BUGFIX] Fix use-after-free when certificate is updated 186 - Silence gcc warning in optimized mode by performing useless 187 initialization 188 - cmake: use the standard variable CMAKE_BUILD_TYPE instead of 189 DEVEL_MODE 190 1912018-10-03 192 - 1.16.0 193 - [API Change] Add lsquic_conn_n_avail_streams() 194 - [BUGFIX] only dispatch crypto stream read events if WANT_READ is on 195 1962018-09-27 197 - 1.15.0 198 - [API Change] Add LSCONN_ST_PEER_GOING_AWAY to the list of conn statuses 199 - [BUGFIX] free uncompressed headers correctly when error occurs 200 2012018-09-12 202 - 1.14.3 203 - [BUGFIX] Do not abort conn on STREAM frame for a reset stream 204 - [BUGFIX] Drop packets that would become empty due to repackaging. 205 Packets on the scheduled queue may be marked for repackaging. 206 Frames such as ACK frame that are never resent are removed from 207 repackaged packets. We must check that the newly repackaged packet 208 would not be empty. If it would be, it is destroyed instead and 209 the next packet on the scheduled queue is used. Note that this 210 change only affects the logic to return the next packet to be sent. 211 Lost packets that are being rescheduled are already processed in 212 this fashion. 213 - Byteswap CID before logging it - this makes it match Chrome CIDs. 214 (Except Q035, which is the last little-endian GQUIC version we 215 support.) 216 2172018-09-06 218 - 1.14.0 219 - [API Change] Disable packet sending if full batch cannot be sent 220 If lsquic_packets_out_f() cannot send the whole batch, disable 221 packet sending until lsquic_engine_send_unsent_packets() is called. 222 - [BUGFIX] Handle case when STREAM frame does not fit. 223 - [BUGFIX] Always allow incoming STREAM frames to overlap. Peers 224 may send overlapping STREAM frames even if using versions older 225 than Q043. 226 - Custom header set fixes: 227 - set "FIN reached" flag when custom header with FIN flag is 228 claimed; 229 - do not return custom header set for a reset stream. 230 2312018-08-27 232 233 - 1.13.0 234 - [FEATURE, API Change] Add ability to create custom header set 235 objects via callbacks. This avoids reading and re-parsing 236 headers from the stream. 237 2382018-08-27 239 240 - 1.12.4 241 - Fix memory leak when engine is destroyed 242 - Fix memory leak in http_client 243 - Fix gcc warning in unit tests 244 2452018-08-22 246 247 - 1.12.3 248 - [BUGFIX] Fix duplicate STREAM frame detection 249 2502018-08-20 251 252 - 1.12.2 253 - [BUGFIX] Update count of scheduled bytes when adjusting size of 254 an already-scheduled packet. 255 - Emit info instead of warning messages when stream is used in 256 unexpected ways. 257 2582018-08-17 259 260 - 1.12.0 261 - [FEATURE, API Change] Add support for certificate verification 262 2632018-08-16 264 265 - 1.11.1 266 - [BUGFIX] Fix STOP_WAITING frame processing in the new Q044 code 267 2682018-08-15 269 270 - 1.11.0 271 - [FEATURE] Add support for Q044. 272 2732018-08-09 274 275 - 1.10.2 276 - [BUGFIX] Don't go over limit when creating delayed streams 277 2782018-07-10 279 280 - 1.10.1 281 - [BUGFIX] process connections after each batch of packets is read 282 This avoids a problem of accumulating a very large list of packets 283 (possible when speeds are high and socket's receive buffer is large) 284 and processing it all at once. 285 - If glibc is older than 2.17, link with rt. This is necessary for 286 clock_getres(2). 287 - Add version macros to lsquic.h; remove unnecessary includes. 288 2892018-06-13 290 291 - [BUGFIX] allow multiple parallel connections by default 292 293 Use the original method of tracking connections by CIDs by default. 294 If zero-sized CID support is turned on, connections are tracked by 295 the address. A new connection is not created if another connection 296 is using the same network address 297 2982018-05-30 299 300 - [FEATURE, API CHANGE] Support zero-sized CIDs in received packets 301 3022018-05-24 303 304 - Close connection properly when packet encryption fails 305 3062018-05-23 307 308 - [BUGFIX] Do not produce packet sequence gaps due to delayed packets 309 3102018-05-21 311 312 - [API Change] Add optional callback to call when handshake is done 313 - [API Change, BUGFIX] After send failure, wait until transport available 314 3152018-05-18 316 317 - [API] Expose useful lsquic_ver2str[] in lsquic.h 318 - [BUGFIX] Do not produce packet sequence gaps due to STREAM frame elision 319 - Improve checks of number of incoming streams limit and associated 320 error reporting. 321 - [BUGFIX] Command-line option `-6` now works correctly. 322 3232018-05-16 324 325 - [FEATURE] DNS resolution 326 - [BUGFIX] Frame insertion mis-ID as overlap instead of dup 327 - http_client: fix priority range generated by -E flag 328 3292018-05-09 330 331 - [FEATURE] Add support for Q043. 332 - Support for versions Q037, Q038, Q041, and Q042 has been removed. 333 - Fix typo in debug message. 334 - Fix code indentation. 335 - Add /* fallthru */ comment to stop newer gcc from complaining. 336 - Logger: fix compilation of optimized Windows build. 337 3382018-05-04 339 340 - [FEATURE] Add support for Q042. 341 - Remove comment: MSPC is obsolete (no code changes) 342 - Prog: use lsquic_str2ver() when processing -o version flag 343 - Remove unused CTIM and SRBF transport parameters 344 - Disable QUIC versions Q037 and Q038 by default 345 - Fix Windows compilation by including compat header file in 346 lshpack.c 347 - Address warnings produced by newer versions of gcc 348 - Future-proof: turn off -Werror 349 3502018-05-02 351 352 - [BUGFIX] Make lsquic_conn_quic_version() available 353 - Switch to using ls-hpack 1.1 354 - [BUGFIX] Do not ignore stream resets after receiving FIN 355 3562018-04-27 357 358 - HPACK: do not allow header block to end with table size update. 359 3602018-04-25 361 362 - [BUGFIX] Do not create gap in sent packnos when squeezing delayed 363 packets. 364 - [BUGFIX] sendctl checks for all unacked bytes, not just retx bytes. 365 - [BUGFIX] connections with blocked scheduled packets are not tickable 366 for sending. 367 - [BUGFIX] Conn is tickable if it wants to send a connection-level 368 frame. 369 3702018-04-23 371 372 - Fix busy loop: tickable must make progress. When connection is 373 self-reporting as tickable, it must make progress when ticked. There 374 are two issues: 375 1. If there are buffered packets, the connection is only tickable if 376 they can be sent out. 377 2. A connection is tickable if there are streams on the servicing 378 queue. When the tick occurs, we must service the stream 379 independent of whether any packets are sent. 380 - Fix assertion in pacer which can be incorrect under some 381 conditions. 382 - cmake: do not turn on address sanitizer if in Travis. 383 3842018-04-20 385 386 - [BUGFIX] Fix bug in lsquic_engine_connect() exposed by yesterday's 387 changes. 388 3892018-04-19 390 391 - [BUGFIX] Add connection to Tickable Queue on stream write 392 - cmake: use MSVC variable instead of trying to detect 393 - engine: improve connection incref/decref logging 394 - stream: don't ignore errors that may occur on triggered flush 395 - connection: remove obsolete method 396 - engine: indicate connection as tickable if previous call went 397 over threshold 398 3992018-04-09 400 401 [API Change, OPTIMIZATION] Only process conns that need to be processed 402 403 The API is simplified: do not expose the user code to several 404 queues. A "connection queue" is now an internal concept. 405 The user processes connections using the single function 406 lsquic_engine_process_conns(). When this function is called, 407 only those connections are processed that need to be processed. 408 A connection needs to be processed when: 409 410 1. New incoming packets have been fed to the connection. 411 2. User wants to read from a stream that is readable. 412 3. User wants to write to a stream that is writeable. 413 4. There are buffered packets that can be sent out. (This 414 means that the user wrote to a stream outside of the 415 lsquic library callback.) 416 5. A control frame (such as BLOCKED) needs to be sent out. 417 6. A stream needs to be serviced or delayed stream needs to 418 be created. 419 7. An alarm rings. 420 8. Pacer timer expires. 421 422 To achieve this, the library places the connections into two 423 priority queues (min heaps): 424 425 1. Tickable Queue; and 426 2. Advisory Tick Time queue (ATTQ). 427 428 Each time lsquic_engine_process_conns() is called, the Tickable 429 Queue is emptied. After the connections have been ticked, they are 430 queried again: if a connection is not being closed, it is placed 431 either in the Tickable Queue if it is ready to be ticked again or 432 it is placed in the Advisory Tick Time Queue. It is assumed that 433 a connection always has at least one timer set (the idle alarm). 434 435 The connections in the Tickable Queue are arranged in the least 436 recently ticked order. This lets connections that have been quiet 437 longer to get their packets scheduled first. 438 439 This change means that the library no longer needs to be ticked 440 periodically. The user code can query the library when is the 441 next tick event and schedule it exactly. When connections are 442 processed, only the tickable connections are processed, not *all* 443 the connections. When there are no tick events, it means that no 444 timer event is necessary -- only the file descriptor READ event 445 is active. 446 447 The following are improvements and simplifications that have 448 been triggered: 449 450 - Queue of connections with incoming packets is gone. 451 - "Pending Read/Write Events" Queue is gone (along with its 452 history and progress checks). This queue has become the 453 Tickable Queue. 454 - The connection hash no longer needs to track the connection 455 insertion order. 456 4572018-04-02 458 459 - [FEATURE] Windows support 460 461 - Reduce stack use -- outgoing packet batch is now allocated on the heap. 462 4632018-03-09 464 465 - [OPTIMIZATION] Merge series of ACKs if possible 466 467 Parsed single-range ACK frames (that is the majority of frames) are 468 saved in the connection and their processing is deferred until the 469 connection is ticked. If several ACKs come in a series between 470 adjacent ticks, we check whether the latest ACK is a strict superset 471 of the saved ACK. If it is, the older ACK is not processed. 472 473 If ACK frames can be merged, they are merged and only one of them is 474 either processed or saved. 475 476 - [OPTIMIZATION] Speed up ACK verification by simplifying send history. 477 478 Never generate a gap in the sent packet number sequence. This reduces 479 the send history to a single number instead of potentially a series of 480 packet ranges and thereby speeds up ACK verification. 481 482 By default, detecting a gap in the send history is not fatal: only a 483 single warning is generated per connection. The connection can continue 484 to operate even if the ACK verification code is not able to detect some 485 inconsistencies. 486 487 - [OPTIMIZATION] Rearrange the lsquic_send_ctl struct 488 489 The first part of struct lsquic_send_ctl now consists of members that 490 are used in lsquic_send_ctl_got_ack() (in the absense of packet loss, 491 which is the normal case). To speed up reads and writes, we no longer 492 try to save space by using 8- and 16-bit integers. Use regular integer 493 width for everything. 494 495 - [OPTIMIZATION] Cache size of sent packet. 496 497 - [OPTIMIZATION] Keep track of the largest ACKed in packet_out 498 499 Instead of parsing our own ACK frames when packet has been acked, 500 use the value saved in the packet_out structure when the ACK frame 501 was generated. 502 503 - [OPTIMIZATION] Take RTT sampling conditional out of ACK loop 504 505 - [OPTIMIZATION] ACK processing: only call clock_gettime() if needed 506 507 - [OPTIMIZATION] Several code-level optimizations to ACK processing. 508 509 - Fix: http_client: fix -I flag; switch assert() to abort() 510 5112018-02-26 512 - [API Change] lsquic_engine_connect() returns pointer to the connection 513 object. 514 - [API Change] Add lsquic_conn_get_engine() to get engine object from 515 connection object. 516 - [API Change] Add lsquic_conn_status() to query connection status. 517 - [API Change] Add add lsquic_conn_set_ctx(). 518 - [API Change] Add new timestamp format, e.g. 2017-03-21 13:43:46.671345 519 - [OPTIMIZATION] Process handshake STREAM frames as soon as packet 520 arrives. 521 - [OPTIMIZATION] Do not compile expensive send controller sanity check 522 by default. 523 - [OPTIMIZATION] Add fast path to gquic_be_gen_reg_pkt_header. 524 - [OPTIMIZATION] Only make squeeze function call if necessary. 525 - [OPTIMIZATION] Speed up Q039 ACK frame parsing. 526 - [OPTIMIZATION] Fit most used elements of packet_out into first 64 bytes. 527 - [OPTIMIZATION] Keep track of scheduled bytes instead of calculating. 528 - [OPTIMIZATION] Prefetch next unacked packet when processing ACK. 529 - [OPTIMIZATION] Leverage fact that ACK ranges and unacked list are. 530 ordered. 531 - [OPTIMIZATION] Reduce function pointer use for STREAM frame generation 532 - Fix: reset incoming streams that arrive after we send GOAWAY. 533 - Fix: delay client on_new_conn() call until connection is fully set up. 534 - Fixes to buffered packets logic: splitting, STREAM frame elision. 535 - Fix: do not dispatch on_write callback if no packets are available. 536 - Fix WINDOW_UPDATE send and resend logic. 537 - Fix STREAM frame extension code. 538 - Fix: Drop unflushed data when stream is reset. 539 - Switch to tracking CWND using bytes rather than packets. 540 - Fix TCP friendly adjustment in cubic. 541 - Fix: do not generate invalid STOP_WAITING frames during high packet 542 loss. 543 - Pacer fixes. 544 5452017-12-18 546 547 - Fix: better follow cubic curve after idle period 548 - Fix: add missing parts to outgoing packet splitting code 549 - Fix: compilation using gcc 4.8.4 550 5512017-10-31 552 553 - Add APIs.txt -- describes LSQUIC APIs 554 5552017-10-31 556 557 - [API Change] Sendfile-like functionality is gone. The stream no 558 longer opens files and deals with file descriptors. (Among other 559 things, this makes the code more portable.) Three writing functions 560 are provided: 561 562 lsquic_stream_write 563 lsquic_stream_writev 564 lsquic_stream_writef (NEW) 565 566 lsquic_stream_writef() is given an abstract reader that has function 567 pointers for size() and read() functions which the user can implement. 568 This is the most flexible way. lsquic_stream_write() and 569 lsquic_stream_writev() are now both implemented as wrappers around 570 lsquic_stream_writef(). 571 572 - [OPTIMIZATION] When writing to stream, be it within or without the 573 on_write() callback, place data directly into packet buffer, 574 bypassing auxiliary data structures. This reduces amount of memory 575 required, for the amount of data that can be written is limited 576 by the congestion window. 577 578 To support writes outside the on_write() callback, we keep N 579 outgoing packet buffers per connection which can be written to 580 by any stream. One half of these are reserved for the highest 581 priority stream(s), the other half for all other streams. This way, 582 low-priority streams cannot write instead of high-priority streams 583 and, on the other hand, low-priority streams get a chance to send 584 their packets out. 585 586 The algorithm is as follows: 587 588 - When user writes to stream outside of the callback: 589 - If this is the highest priority stream, place it onto the 590 reserved N/2 queue or fail. 591 (The actual size of this queue is dynamic -- MAX(N/2, CWND) -- 592 rather than N/2, allowing high-priority streams to write as 593 much as can be sent.) 594 - If the stream is not the highest priority, try to place the 595 data onto the reserved N/2 queue or fail. 596 - When tick occurs *and* more packets can be scheduled: 597 - Transfer packets from the high N/2 queue to the scheduled 598 queue. 599 - If more scheduling is allowed: 600 - Call on_write callbacks for highest-priority streams, 601 placing resulting packets directly onto the scheduled queue. 602 - If more scheduling is allowed: 603 - Transfer packets from the low N/2 queue to the scheduled 604 queue. 605 - If more scheduling is allowed: 606 - Call on_write callbacks for non-highest-priority streams, 607 placing resulting packets directly onto the scheduled queue 608 609 The number N is currently 20, but it could be varied based on 610 resource usage. 611 612 - If stream is created due to incoming headers, make headers readable 613 from on_new. 614 615 - Outgoing packets are no longer marked non-writeable to prevent placing 616 more than one STREAM frame from the same stream into a single packet. 617 This property is maintained via code flow and an explicit check. 618 Packets for stream data are allocated using a special function. 619 620 - STREAM frame elision is cheaper, as we only perform it if a reset 621 stream has outgoing packets referencing it. 622 623 - lsquic_packet_out_t is smaller, as stream_rec elements are now 624 inside a union. 625 6262017-10-12 627 628 - Do not send RST_STREAM when stream is closed for reading 629 - Raise maximum header size from 4K to 64K 630 - Check header name and value lengths against maximum imposed by HPACK 631 - Fix NULL dereference in stream flow controller 632 6332017-10-09 634 635 - Hide handshake implementation behind a set of function pointers 636 - Use monotonically increasing clock 637 - Make sure that retx delay is not larger than the max of 60 seconds 638 6392017-09-29 640 641 - A few fixes to code and README 642 6432017-09-28 644 645 - Add support for Q041; drop support for Q040 646 6472017-09-27 648 649 - Fix CMakeLists.txt: BoringSSL include and lib was mixed up 650 6512017-09-26 652 653 - Add support for Mac OS 654 - Add support for Raspberry Pi 655 - Fix BoringSSL compilation: include <openssl/hmac.h> explicitly 656 6572017-09-22 658 659 - Initial release 660