CHANGELOG revision d39df4b6
12020-08-04
2    - 2.19.3
3    - [BUGFIX] Regression in 2.19.1 that breaks Q050
4
52020-07-30
6    - 2.19.2
7    - [BUGFIX] Do not reduce PLPMTU size by network overhead.
8    - [BUGFIX] Windows build.
9
102020-07-29
11    - 2.19.1
12    - [FEATURE] DPLPMTUD support.  IETF connections now search for the
13      maximum packet size, improving throughput.
14    - [DEBUG] Record event in stream history when on_close() is called
15      in dtor.
16
172020-07-22
18    - 2.18.2
19    - [BUGFIX] Send prediction: lone path challenges do not get squeezed out
20    - Fix crash in http_client: now -K and -B can be used simultaneously
21
222020-07-14
23    - 2.18.1
24    - [FEATURE] Implement the "QUIC bit grease" extension.
25    - [BUGFIX] Selecting CID used for logging on client.
26    - [BUGFIX] Header protection assertion.
27    - [BUGFIX] Server: enable SSL key logging when cert lookup callback
28      is not set.
29    - Remove some dead code.
30
312020-07-06
32    - 2.18.0
33    - [API] Rename "0-RTT" to "session resumption." In IETF QUIC, "0-RTT"
34      always refers to early data, meaning a request that the server can
35      reply to in the very first return flight.  A more appropriate name
36      for what we support on the client site is "session resumption," which
37      is standard TLS terminology.  Later, when we add support for 0-RTT
38      (early data), we can use the 0-RTT terminology again, this time in
39      proper context.
40    - [BUGFIX] Do not set certificate callback if ea_lookup_cert is NULL.
41    - [BUGFIX] Make connection tickable when it's marked as closed.
42    - [BUGFIX] Fail certificate lookup if SNI is not present in HTTP mode.
43    - Several documentation fixes and improvements.
44    - Minor code cleanup.
45
462020-06-24
47    - 2.17.2
48    - [BUGFIX] Infinite loop in stream: advance read offset when discarding
49      data.
50    - [OPTIMIZATION] Header protection: only initialize cipher once.
51    - [OPTIMIZATION] Batch header protection application.
52
532020-06-18
54    - 2.17.1
55    - [FEATURE] QUIC and HTTP/3 Internet Draft 29 support.
56    - [BUGFIX] Check that scheduled packets are also sendable when
57      calculating a connection's "tickable" property.
58    - [BUGFIX] Don't count scheduled packets as in-flight when pacer is
59      checked on tick.
60    - gQUIC: delay calling on_new for pushed stream until headers are
61      available.
62    - Allow nested calls to lsquic_engine_connect().
63
642020-06-15
65    - 2.16.3
66    - [OPTIMIZATION] Stash up to two reordered packets in IETF mini conn
67      instead of dropping them.
68    - [BUGFIX] Crash: check decrypt context before using it.  This regression
69      was introduced in 2.16.2.
70
712020-06-12
72    - 2.16.2
73    - [BUGFIX] ID-28: do not use TLS middlebox compatibility mode in
74      ClientHello.  This change requires using a newer version of BoringSSL.
75    - [BUGFIX] Free connections in Advisory Tick Time Queue in engine dtor.
76    - [BUGFIX] IETF QUIC client: narrow migration check to a single path.
77    - [BUGFIX] NULL dereference: set function pointers for alarm for path
78      challenges 2 and 3.
79    - [BUGFIX] HTTP/3 headers may be followed immediately by trailers.
80    - [BUGFIX] Log messages when SCID changes.
81
822020-06-09
83    - 2.16.1
84    - [FEATURE] Use "no-progress timeout" after which connection is closed.
85    - [BUGFIX] Select new SCID when current SCID is retired.
86    - [BUGFIX] Don't warn about dropped Initial packet sequence gaps during
87      mini/full handoff.
88    - [BUGFIX] Send correct conn error when HTTP/3 frame is truncated.
89    - [BUGFIX] Mini conn: consider amplification when deciding to return
90      TICK_SEND.
91    - [BUGFIX] Don't double-count tag length in amplification logic.
92    - [BUGFIX] Don't squeeze out lone path challenges.
93    - [BUGFIX] Log messages dealing with scheduled packet queue squeezing.
94    - [BUGFIX] don't wipe current path if no path challenge responses
95      come back.
96    - [BUGFIX] When path is reset, don't lose path_id which is used for
97      logging.
98    - Downgrade flow control violations to info log level from warnings.
99    - Fix connection cap extra check, avoid checks in nested calls.
100    - Fix some unit tests when extra checks are enabled.
101    - Use ls-hpack 2.2.1.
102    - Turn off unconditional extra checks for IETF clients.
103    - Extra checks: don't verify sent size of hello packets.  Client
104      changes DCID length and this check will fail.
105
1062020-06-03
107    - 2.16.0
108    - [API] Use lsxpack_header v206.
109    - [FEATURE] Windows supported.
110    - [BUGFIX] Fix uninitialized variable use in client (regression in
111      2.15.0).
112    - Use ls-hpack 2.2.0.
113    - Use ls-qpack 2.2.0.
114    - Sample programs: fix the way maximum number of packets is
115      calculated.
116    - Remove some dead code.
117
1182020-05-27
119    - 2.15.0
120    - [FEATURE] QUIC and HTTP/3 Internet Draft 28 support.
121    - [BUGFIX] Ignore Retry packets after other packets are decrypted
122      successfully.
123    - [BUGFIX] Transport parameter decoding: CID no longer has 4-byte
124      length minimum.
125    - http_client: fix and optimize lsxpack_header allocator.
126    - Drop support for Internet Draft 25.
127
1282020-05-19
129    - 2.14.8
130    - Support Android.
131    - Rerrange tree: move command-line examples into bin/ and unit
132      tests into tests/ from test/unittests/.
133
1342020-05-12
135    - 2.14.7
136    - [BUGFIX] ALPN-to-version mapping: do not skip h3-Q050.
137    - [BUGFIX] Frame reader: skip headers if target stream is closed.
138
1392020-05-06
140    - 2.14.6
141    - [BUGFIX] Fix amplification mitigation in 0-RTT case.
142    - [BUGFIX] IETF mini connection should not tickable if cannot send
143      a packet due to amplification.
144    - [BUGFIX] Fail if active_connection_id_limit TP is smaller than 2.
145    - [BUGFIX] Qlog server certificates for IETF QUIC connections.
146    - [BUGFIX] Uninitialized struct padding usage in tokgen (benign).
147    - [BUGFIX] Incorrect argument to shi_lookup() (benign).
148
1492020-04-29
150    - 2.14.5
151    - [BUGFIX] In coalesced datagram, ignore packets whose CID does not match.
152    - [BUGFIX] Frame reader: skip headers if target stream is not found.
153    - [BUGFIX] Log message in QPACK decoder handler.
154
1552020-04-24
156    - 2.14.4
157    - [BUGFIX] Heed es_rw_once for pushed HTTP/3 streams.
158    - [BUGFIX] IETF client: set correct flags on bidirectional streams.
159    - [BUGFIX] Generate Cancel Stream QPACK instructions for abandoned
160      streams.
161    - [BUGFIX] Do not call header callbacks after stream is closed.
162    - Use ls-qpack 2.1.1
163
1642020-04-15
165    - 2.14.3
166    - [BUGFIX] gQUIC: pass correct stream to hsi_create_header_set() callback.
167    - [BUGFIX] Use ls-hpack 2.1.1
168    - Improve stream code readability.
169    - Use ls-qpack 2.0.5
170
1712020-04-08
172    - 2.14.2
173    - [BUGFIX] Use ls-qpack 2.0.4
174    - [BUGFIX] Honor max packet size on the client and when path changes.
175    - http_server: fix prepare_decode() function.
176
1772020-04-07
178    - 2.14.1
179    - [BUGFIX] Place connections on tickable queue when sending is reenabled.
180    - [BUGFIX] A connection is tickable if it has unsent packets.
181    - [BUGFIX] Heed peer's max_packet_size transport parameter.
182
1832020-03-30
184    - 2.14.0
185    - [API] Use lsxpack_header structure to send HTTP headers.
186    - [OPTIMIZATION] nocopy's readable_bytes() function.
187    - http_server: fix typo in error message
188    - Use ls-hpack 2.1.0.
189    - Use ls-qpack 2.0.0.
190
1912020-03-23
192    - 2.13.3
193    - [BUGFIX] ACK ping-pong: TIMESTAMP frame is not to be acked.
194
1952020-03-13
196    - 2.13.2
197    - [BUGFIX] Use of new lsxpack_header API's hsi_prepare_decode().
198
1992020-03-12
200    - 2.13.1
201    - [API] Use lsxpack_header structure to process incoming headers.
202    - [BUGFIX] Fix assertion when zero-padding Initial packet.
203    - [BUGFIX] Use idle timeout before we learn of peer's value.
204    - Use ls-hpack 2.0.1 -- has lsxpack_header changes.
205    - Use ls-qpack 0.14.0 -- new, common with ls-hpack, XXH seed (not
206      used yet).
207    - Code cleanup: prefix exported functions with "lsquic_".
208
2092020-03-02
210    - 2.12.0
211    - [FEATURE] QUIC timestamps extension.
212    - [API] New: ea_alpn that is used when not in HTTP mode.
213    - [BUGFIX] SNI is mandatory only for HTTP/3 and gQUIC.
214    - [BUGFIX] Benign double-free -- issue #110.
215    - [BUGFIX] Printing of transport parameters.
216
2172020-02-24
218    - 2.11.1
219    - [FEATURE] QUIC and HTTP/3 Internet Draft 27 support.
220    - [FEATURE] Add experimental delayed ACKs extension.
221    - Drop support for Internet Draft 24.
222    - Code cleanup.
223
2242020-02-14
225    - 2.10.6
226    - [BUGFIX] HTTP/3 framing: don't misinterpret rare occurence as error.
227    - [BUGFIX] Send gap warning due to missing poisoned packet.
228    - Stream unit test for scenario in issue #106.
229
2302020-02-13
231    - 2.10.5
232    - [BUGFIX] BBR: call cci_sent() with correct arguments and at correct
233      time.
234    - Refactor transport parameters module.
235    - Minor code cleanup.
236
2372020-02-11
238    - 2.10.4
239    - [BUGFIX] Send HANDSHAKE_DONE only after Finished is received.
240    - [BUGFIX] Don't treat garbage UDP padding as library error; ignore
241      it instead.
242    - [BUGFIX] Fix compilation on FreeBSD (missing header).
243    - Code cleanup: remove unnecessary #includes.
244
2452020-01-31
246    - 2.10.3
247    - [BUGFIX] Cancel path responses and challenges on old path when
248      switching to new path
249    - Logging network path information.
250
2512020-01-30
252    - 2.10.2
253    - [BUGFIX] Do not delay ACKs for Initial and Handshake packets.
254    - [BUGFIX] Send PATH_CHALLENGE if path changed before mini conn
255      promotion.
256    - Logging improvements.
257    - http_client: discard data faster.
258
2592020-01-29
260    - 2.10.1
261    - [BUGFIX] Coalesced packets could get longer than normal packet
262      size.
263    - Add spin bit configuration option es_spin (-o spin=[01]).
264    - Disable spin bit in 1/16 of connections.
265    - Improve logging a bit.
266
2672020-01-28
268    - 2.10.0
269    - [FEATURE] QUIC and HTTP/3 Internet Draft 25 support.
270    - [API] Drop support for ID-23.
271    - [BUGFIX] Set key phase bit on outgoing packets correctly.
272    - Code cleanup.
273
2742020-01-20
275    - 2.9.0
276    - [API] Drop support for Q039.
277    - Improve ACK-queuing logic.  Send an ACK once in a while if
278      peer keeps on sending non-ack-eliciting packets.
279    - Improve Alt-Svc string: Q050 and later are not included in
280      the old-style "quic" string.
281    - Send stateless resets if connection could not be promoted.
282    - Schedule MAX_DATA if needed when DATA_BLOCKED is received.
283    - Use ls-qpack 0.11.2 -- needed for server push optimization.
284    - Code cleanup: handle some error cases, improve logging.
285
2862020-01-16
287    - 2.8.9
288    - [BUGFIX] Use ls-qpack 0.11.1
289    - [OPTIMIZATION] Generate random bytes in batches.
290    - Change loss_bits transport parameter ID to 0x1057 following
291      latest draft.
292    - Randomize period with which PINGs are sent to elicit ACKs.
293    - Some refactoring and code cleanup.
294
2952020-01-14
296    - 2.8.8
297    - [BUGFIX] Invalid read when parsing IETF transport parameters
298      (this was benign).
299    - [OPTIMIZATION] Frame bundling when using buffered packets in
300      IETF QUIC: a) flush QPACK decoder stream and b) include ACKs
301      in opportunistic fashion.
302    - Fix HTTP/3 framing unit test.
303    - Code cleanup.
304
3052020-01-09
306    - 2.8.7
307    - [BUGFIX] Initial packet size check for IETF mini conn applies to
308      UDP payload, not QUIC packet.
309    - Support old and new school loss_bits transport parameter.
310    - Use Q run length of 64 as suggested in the loss bits Draft.
311    - Undo square wave count when packet is delayed.
312    - Code cleanup; minor fixes.
313
3142020-01-06
315    - 2.8.5
316    - [HTTP3] Verify number of bytes in incoming DATA frames against
317      content-length.
318    - [HTTP3] Stop issuing streams credits if peer stops opening QPACK
319      decoder window.  This addresses a potential attack whereby client
320      can cause the server to keep allocating memory.  See Security
321      Considerations in the QPACK draft.
322    - [BUGFIX] Mini conn: don't shorten max packet size for Q050 and later.
323    - [BUGFIX] Init IETF connection flow controller using correct setting.
324    - [BUGFIX] Fix unintended sign extension when removing header protection.
325    - Code cleanup and minor fixes.
326
3272019-12-30
328    - 2.8.1
329    - [FEATURE] Use occasional packet number gaps to detect optimistic
330      ACK attacks.
331    - [BUGFIX] Q050 client: all packet numbers are in the App PNS.
332    - [OPTIMIZATION] Merge multi-range ACK frames, not just single-range
333      ACK frames.
334    - IETF QUIC: use RTT estimate in ack timeout calculation.
335    - IETF handshake: abort conn when unexpected errors occur.
336    - Use PING rather than MAX_DATA frames to elicit ACKs from peer.
337    - Server: enforce 1200 byte Initial minimum packet size.
338    - [CLEANUP] Remove code to disable gQUIC crypto.
339    - [CLEANUP] Remove n_timestamps from ACK info struct.
340    - Optimize driver: reuse previous ancillary message when possible.
341
3422019-12-23
343    - 2.8.0
344    - [FEATURE] Add support for Q050.
345    - [OPTIMIZATION] Reduce mallocs in gQUIC handshake.
346    - [BUGFIX] Disable redo of failed STREAM frame insertion with debug
347      logging.
348
3492019-12-18
350    - 2.7.3
351    - [DEBUG] Further dedup next advisory tick messages when reason is
352      the same.
353    - [BUGFIX] Update size of `a` array in TP struct.  Fixes (benign)
354      GitHub bug #94.
355    - Use Cubic by default again instead of BBR, as it delivers more
356      consistent performance.
357
3582019-12-11
359    - 2.7.2
360    - [BUGFIX] Send controller: update scheduled bytes when DCID length
361      changes (IETF client).
362    - [BUGFIX] Drop alarm check from sanity test.  It no longer works now
363      that we use loss chains.
364    - [PORTABILITY] Fix build on Alpine Linux.
365    - [PORTABILITY] Fix build using XCode.
366    - Client initial DCID length: use RAND_bytes() instead of rand(3).
367    - Add unit tests for connection min heap.
368    - [DEBUG] Log CID in gQUIC handshake module
369    - [DEBUG] Turn on extra checks for IETF client send controller.
370    - [DEBUG] Dedup next advisory tick messages when reason is IDLE timer.
371    - [DEBUG] QPACK decoder handler: log header error code.
372
3732019-12-05
374    - 2.7.1
375    - [BUGFIX] client: don't call ignore_init() in middle of batch send.
376      ignore_init() makes an assumption that the send controller has access
377      to all outgoing packets.  This change wraps a few IETF full connection
378      methods to delay calling ignore_init() until the engine returns all
379      outgoing packets that were batched.
380    - [BUGFIX] set errno to EAGAIN if sendmmsg() can't send all of them.
381      This needs to be done because the value of errno may be lost on
382      some platforms.
383    - [BUGFIX] Typo that set all bits in sm_qflags lead to crashes.
384    - [BUGFIX] Do not cancel header block processing after failure, as
385      QPACK releases the reference in that case.
386    - [CLEANUP] IETF encrypt: replace assert(0) with a warning.
387    - Several small improvements to the test server.
388
3892019-11-27
390    - 2.7.0
391    - [API, FEATURE] Close connection immediately when ea_packets_out()
392      fails with errno != EAGAIN.  The API change is that errno is now
393      examined.  Make sure to set it if using something other than
394      sendmsg() to send packets.
395    - [CLEANUP] Immediate close logic in IETF full conn.
396    - [CLEANUP] Fix bogus warning about uninitialized `pair' variable.
397
3982019-11-22
399    - 2.6.7
400    - [FEATURE] Implement the QL extension (offered by default).
401    - [BUGFIX] Abort when encountering unexpected HTTP/3 frames.
402    - [BUGFIX] Acknowledge (QPACK) HTTP/3 trailers correctly.
403    - [DEBUG] Turn on debug message for next advisory tick.
404
4052019-11-20
406    - 2.6.6
407    - [BUGFIX] Using HTTP/3 to HTTP/1.x converter.
408    - [BUGFIX] Truncate log messages instead of throwing them away.
409
4102019-11-15
411    - 2.6.5
412    - [BUGFIX] High priority buffered packet queue length.
413    - [BUGFIX] Rain time calculation: max_ack_delay is in milliseconds.
414
4152019-11-12
416    - 2.6.3
417    - [BUGFIX] Close DATA frames with empty payload correctly.
418
4192019-11-11
420    - 2.6.2
421    - [BUGFIX] SCID!=ODCID rule applies to Retry packets, not regular
422      packets.
423    - [BUGFIX] Zero-RTT: BoringSSL no longer flips read/write secrets.
424    - [BUGFIX] Truncate ACK frame rather instead of aborting IETF
425      connection.
426    - [BUGFIX] Client: don't send duplicate reset tokens.
427    - [BUGFIX] Remove invalid assertion in H3 framing code.
428    - Silence a warning in send ctl by restructuring switch() statement.
429
4302019-11-08
431    - 2.6.1
432    - [BUGFIX] set retry token on all resubmitted packets.
433    - Event log: log sent packet flags.  In particular, this allows one
434      to see whether token was sent.
435    - Don't migrate client if es_allow_migration is false.
436
4372019-11-07
438    - 2.6.0
439    - [FEATURE] QUIC and HTTP/3 Internet Draft 24 support
440
4412019-11-07
442    - 2.5.2
443    - [BUGFIX] argument order to gQUIC client constructor.  Regression
444      introduced in 2.5.0.
445    - [BUGFIX] split buffered packet error recovery: destroy the correct
446      packet.
447
4482019-11-04
449    - 2.5.1
450    - [BUGFIX] Fix double-free when emptying a packet number space.
451    - [BUGFIX] http_server: fix md5sum handler: handle EOF correctly.
452    - [BUGFIX] Use random values in bits 4 and 5 of the first byte of
453      verneg packets (regression introduced in 2.5.0).
454    - [OPTIMIZATION] Don't compile in expensive attq checks by default.
455    - [OPTIMIZATION] http_server: compile regexes only once.
456
4572019-10-31
458    - 2.5.0
459    - [API] lsquic_engine_connect() can now be passed QUIC version to use.
460    - [OPTIMIZATION] Queue opportunistic ACKs if there is data to be sent.
461    - [BUGFIX] Don't evict streams from priority iterator if there is
462      only one queue.
463    - [OPTIMIZATION, BUGFIX] Several other optimizations and bug fixes.
464    - Use ls-qpack v0.10.7.
465
4662019-10-24
467    - 2.4.10
468    - [BUGFIX] IETF QUIC server: fix uninitialized variable use.
469    - [BUGFIX] make sure TLSv1.3 is not disabled in SSL object.
470    - [BUGFIX] Use issuer name and serial number to cache certs (SKID
471      values are not unique).
472    - [BUGFIX] Always set the idle alarm in IETF connection so that it
473      can time out.
474    - Use ls-qpack v0.10.6, as it silences some warnings.
475
4762019-10-21
477    - 2.4.8
478    - [OPTIMIZATION, BUGFIX] Use ls-qpack v0.10.5.
479
4802019-10-15
481    - 2.4.7
482    - Add echo client and server to the distibution.
483    - Add MD5 client and server to the distibution.
484    - Fix http_client: check command-line arguments better, prevent crash.
485    - Fix IETF conn: can_write_ack() should only care about APP PNS.
486    - Client: delay stream creation until handshake succeds.
487    - Reset HTTP stream whose write end is closed prematurely.
488    - Fix tickable(): mirror behavior of tick() wrt buffered packets.
489    - Log reason why engine is tickable.
490
4912019-10-11
492    - 2.4.6
493    - Minor code cleanup and logging improvements.
494    - Server and client programs: include library version (e.g. 2.4.6)
495      into `server' and `user-agent' headers.
496
4972019-10-08
498    - 2.4.5
499    - [OPTIMIZATION]: flush encoder stream only when necessary.
500    - [BUGFIX] Use ls-qpack v0.10.2 for new API -- and for a bug fix.
501    - [BUGFIX] Typo in IETF conn SETTINGS writer.
502    - Use latest BoringSSL.
503
5042019-10-08
505    - 2.4.4
506    - [API] Add lsquic_alpn2ver() to aid parsing Alt-Svc header.
507    - [BUGFIX] NULL dereference when H3 frame header would be split.
508    - [BUGFIX] Do not close fixed-size H3 frame prematurely.
509    - [BUGFIX] Allow PING frames in IETF mini conn.
510    - [BUGFIX] Mini conns: don't send any packets after receiving
511      CONNECTION_CLOSE.
512    - [BUGFIX] Client migration: reserve slot for DCID from transport params.
513    - [BUGFIX] Allow max_early_data_size=0 -- early_data might not be there.
514    - [BUGFIX] Use an invalid stream number to reset BPT cache (zero is now a
515      valid stream number).
516    - [SPEC] Use FINAL_SIZE_ERROR when FIN mismatch is detected.
517    - [OPTIMIZATION] Closed connection only gets one chance to send packets.
518    - [OPTIMIZATION] Flush headers stream before packetizing stream data.
519    - [OPTIMIZATION] process QPACK encoder STREAM frames immediately.
520    - Update ls-qpack to v0.10.1.
521
5222019-09-30
523    - 2.4.3
524    - Add GQUIC versions to the list of h3 ALPNs for Alt-Svc header.
525      For example, h3-Q043.  Chrome will switch to using this format at
526      some point in the future.
527    - [BUGFIX] Send correct value in max_streams_uni transport param
528    - [SPEC] Abort IETF QUIC connection if max_early_data_size is not set
529      to 0xFFFFFFFF
530
5312019-09-23
532    - 2.4.2
533    - [BUGFIX] H3 framing: fix zero-byte write when space is available
534    - [BUGFIX] Don't send STREAM frame when incoming unidirectgional stream
535      is closed
536    - [BUGFIX] Cancel all pending writes by stream reset by a GOAWAY
537    - [BUGFIX] Fix use-after-free in IETF full conn
538    - [OPTIMIZATION] Wait for session tickets for two seconds and then drop
539      SSL object and crypto streams.
540
5412019-09-18
542    - 2.4.0
543    - [FEATURE] QUIC and HTTP/3 Internet Draft 23 support
544
5452019-09-13
546    - 2.3.1
547    - [BUGFIX] Fix memory leaks
548    - [BUGFIX] Fix unit tests
549
5502019-09-12
551    - 2.3.0
552    - [FEATURE] BBR congestion control is on by default
553    - [BUGFIX] BBR app-limited logic
554    - [BUGFIX] Fix uninitialized warnings in IETF
555    - [BUGFIX] Update ls-qpack to v0.9.14
556    - [CLEANUP] Code cleanup
557
5582019-09-11
559    - 2.2.0
560    - [FEATURE] Server code is included in the library
561    - [FEATURE] IETF QUIC and HTTP/3 Support (ID-22)
562
5632019-05-13
564    - 1.21.2
565    - [OPTIMIZATION] HPACK: use history to improve compression performance
566
5672019-05-06
568    - 1.21.1
569    - [BUGFIX] If FIN or RST not received, don't delay stream destruction.
570    - [OPTIMIZATION] Speed up HPACK encoder by using same hash value to
571      search static and dynamic tables.
572
5732019-04-12
574    - 1.21.0
575    - [FEATURE] Add qlog log module.
576
5772019-04-01
578    - 1.20.0
579    - [FEATURE] Add support for Q046.
580
5812019-03-19
582    - 1.19.6
583    - [BUGFIX] Ensure that Largest Observed does not decrease in ACKs we
584      send.  ACK frames placed in packets in buffered queues (optimization
585      introduced in 1.17.15) can be preceded by an ACK frame generated later.
586      In this case, the older ACK frame should not be sent out, as Chromium-
587      based servers flags decrease in the ACK frame's Largest Observed value
588      as an error.
589
5902019-03-05
591    - 1.19.5
592    - [BUGFIX] Use correct public key from PUBS based on KEXS index.
593    - [BUGFIX] Check flags before dispatching writes, avoiding assert.
594    - [BUGFIX] Set :scheme to "https" (instead of "HTTP").
595
5962019-02-25
597    - 1.19.4
598    - [BUGFIX] Check buffer bounds when looking up version in 0-RTT blob.
599    - [BUGFIX] http_client: don't fetch 0-rtt info if handshake failed.
600    - Log number of pacer calls at DEBUG, rather than NOTICE, level.
601
6022019-02-18
603    - 1.19.3
604    - [BUGFIX] Q044: don't encode packet number in 6 bytes.  Six-byte
605      packet number encoding does not exist in Q044.  This fixes a
606      regression introduced in '[BUGFIX] Buffered packets can contain
607      ACK frames' -- we need to keep QUIC version in mind when selecting
608      the longest possible packet number encoding used for the buffered
609      packet that carries the ACK.
610    - [BUGFIX] Do not increase CWND when timeout occurs.
611    - http_client: support setting handshake timeout on command line.
612      Use -o handshake_to=timeout.
613    - http_client: use -k to connect UDP socket to pick up ICMP errors.
614    - http_client: allow pathless mode, when only handshake is performed
615      without issuing any requests.  This can be done by simply not
616      specifying a -p flag on the command line.
617
6182019-02-11
619    - 1.19.2
620    - [BUGFIX] Begin negotiation with version provided in 0-RTT info.
621    - [BUGFIX] Version checking in zero_rtt deserialize function.
622
6232019-02-04
624    - 1.19.1
625    - [BUGFIX] Fix Windows build.
626
6272019-02-04
628    - 1.19.0
629    - [FEATURE, API Change] 0-RTT support.  Add function to export 0-RTT
630      information; it can be supplied to a subsequent connect() call.
631    - [FEATURE] Add -0 flag to http_client to exercise 0-RTT support.
632    - [BUGFIX] Resuscitate the Windows build.
633    - [BUGFIX] Send HTTP settings (max header list size) if necessary.
634    - [BUGFIX] Buffered packets can contain ACK frames.
635    - [BUGFIX] Make packet writeable once all STREAM frames are elided.
636    - [BUGFIX] Fix potential null dereference when realloc fails.
637    - cmake: simplify build configuration.
638
6392019-01-28
640    - 1.18.0
641    - [API Change] Can specify clock granularity in engine settings.
642    - [BUGFIX] Pacer uses fixed clock granularity.  Since the change on
643      2018-04-09, it is not necessary to try to approximate the next tick
644      time in the pacer: it can use fix clock granularity specified by
645      the user.
646    - [BUGFIX] Do not tick constantly before handshake is done.
647    - [BUGFIX] Do not exit tick prematurely: reuse packet with ACK.  Even
648      if we cannot allocate *more* packets, we could still be able to write
649      to one already allocated.
650    - [BUGFIX] Do not schedule pacer if there are no lost packets.
651
6522019-01-17
653    - 1.17.15
654    - [BUGFIX] http_client: make sure only one read per on_read() callback
655      is performed in the header conversion bypass (-B) mode.
656    - http_client: with -E, assign random priority when stream is created.
657    - [OPTIMIZATION] On immediate write, place an ACK frame into the first
658      buffered packet if an ACK is queued.  This reduces the number of
659      standalone ACK packets.
660    - [OPTIMIZATION] Allow placing more than one STREAM frame from the same
661      stream into an outgoing packet.  This change minimizes the number of
662      buffered packets required to store several small HTTP messages by
663      virtue of allowing more than one STREAM frame from HEADERS stream in
664      the same packet.
665    - [OPTIMIZATION] Flush headers when writing to buffered packets.  This
666      causes the headers to be written to the same buffered packet queue,
667      thereby improving packet utilization, especially for small HTTP
668      messages.
669
6702019-01-16
671    - 1.17.14
672    - [FEATURE] http_client can now collect stats: time to connect, TTFB,
673      time to download, requests per seconds, and bandwidth.  See -t flag.
674    - [BUGFIX] http_client: -B, -K, and -r can be used at the same time.
675    - [BUGFIX] http_client: do not display cert chain before each request.
676      Now this is only done once per connection, if the handshake is
677      successful and -a option is given.
678    - [BUGFIX] Do not wait to dispatch on_close() after reading.  If a
679      stream is scheduled to be closed after on_read() callback returns,
680      close it immediately instead of waiting until the end of the tick.
681      If client creates new request from on_close() event, they will be
682      processed in the same tick instead of waiting for the next one.
683    - [BUGFIX] HEADERS stream is critical: always treat it with highest
684      priority.
685
6862019-01-10
687    - 1.17.12
688    - [FEATURE] http_client can now issue parallel requests in the context
689      of a single connection.  See -w option.
690
6912019-01-03
692    - 1.17.11
693    - Fix strict aliasing warning in optimized compilation.
694
6952018-12-27
696    - 1.17.10
697    - Fix the example program to be able to use parallel connections
698      again.  (See the -n argument.)
699
7002018-12-18
701    - 1.17.9
702    - [BUGFIX] Engine: reduce minimum batch size from 256 to 4
703
7042018-12-10
705    - 1.17.8
706    - [BUGFIX] Fix compilation on FreeBSD and 32-bit Linux
707
7082018-12-03
709    - 1.17.7
710    - [BUGFIX] Do not unset PING alarm before ringing expired alarms.
711      This prevented PING from ever being sent.
712
7132018-11-29
714    - 1.17.6
715    - Add failsafe: resume sending packets after some time
716
717      The change puts a 1-second limit on the amount of time the engine
718      will not send packets after some packets are delayed.  This makes
719      the library robust in case the user does not unblock the engine
720      explicitly using lsquic_engine_send_unsent_packets() call.
721
722    - [BUGFIX] Handle corner cases in send controller when packets are
723      a) delayed or b) dropped during repackaging.
724    - [BUGFIX] Memory leak: destroy buffered packets during controller
725      cleanup.
726
7272018-11-16
728    - 1.17.3
729    - [BUGFIX] Do not send STOP_WAITING frames when using Q044
730
7312018-10-19
732    - 1.17.2
733    - [BUGFIX] Memory leak in test_frame_rw unit test.
734    - [BUGFIX] Parsing packets with short IETF header: do not overwrite
735      flags.  (Only a problem in unit tests -- benign otherwise.)
736
7372018-10-16
738    - 1.17.0
739    - [API Change] Packet out Memory Interface (PMI) update:
740      - Split PMI pool return into pmi_release and pmi_return
741      - PMI callbacks take peer_ctx and is_ipv6 arguments
742    - [BUGFIX] Fix use-after-free when certificate is updated
743    - Silence gcc warning in optimized mode by performing useless
744      initialization
745    - cmake: use the standard variable CMAKE_BUILD_TYPE instead of
746      DEVEL_MODE
747
7482018-10-03
749    - 1.16.0
750    - [API Change] Add lsquic_conn_n_avail_streams()
751    - [BUGFIX] only dispatch crypto stream read events if WANT_READ is on
752
7532018-09-27
754    - 1.15.0
755    - [API Change] Add LSCONN_ST_PEER_GOING_AWAY to the list of conn statuses
756    - [BUGFIX] free uncompressed headers correctly when error occurs
757
7582018-09-12
759    - 1.14.3
760    - [BUGFIX] Do not abort conn on STREAM frame for a reset stream
761    - [BUGFIX] Drop packets that would become empty due to repackaging.
762      Packets on the scheduled queue may be marked for repackaging.
763      Frames such as ACK frame that are never resent are removed from
764      repackaged packets.  We must check that the newly repackaged packet
765      would not be empty.  If it would be, it is destroyed instead and
766      the next packet on the scheduled queue is used.  Note that this
767      change only affects the logic to return the next packet to be sent.
768      Lost packets that are being rescheduled are already processed in
769      this fashion.
770    - Byteswap CID before logging it - this makes it match Chrome CIDs.
771      (Except Q035, which is the last little-endian GQUIC version we
772      support.)
773
7742018-09-06
775    - 1.14.0
776    - [API Change] Disable packet sending if full batch cannot be sent
777      If lsquic_packets_out_f() cannot send the whole batch, disable
778      packet sending until lsquic_engine_send_unsent_packets() is called.
779    - [BUGFIX] Handle case when STREAM frame does not fit.
780    - [BUGFIX] Always allow incoming STREAM frames to overlap.  Peers
781      may send overlapping STREAM frames even if using versions older
782      than Q043.
783    - Custom header set fixes:
784      - set "FIN reached" flag when custom header with FIN flag is
785        claimed;
786      - do not return custom header set for a reset stream.
787
7882018-08-27
789
790    - 1.13.0
791    - [FEATURE, API Change] Add ability to create custom header set
792      objects via callbacks.  This avoids reading and re-parsing
793      headers from the stream.
794
7952018-08-27
796
797    - 1.12.4
798    - Fix memory leak when engine is destroyed
799    - Fix memory leak in http_client
800    - Fix gcc warning in unit tests
801
8022018-08-22
803
804    - 1.12.3
805    - [BUGFIX] Fix duplicate STREAM frame detection
806
8072018-08-20
808
809    - 1.12.2
810    - [BUGFIX] Update count of scheduled bytes when adjusting size of
811      an already-scheduled packet.
812    - Emit info instead of warning messages when stream is used in
813      unexpected ways.
814
8152018-08-17
816
817    - 1.12.0
818    - [FEATURE, API Change] Add support for certificate verification
819
8202018-08-16
821
822    - 1.11.1
823    - [BUGFIX] Fix STOP_WAITING frame processing in the new Q044 code
824
8252018-08-15
826
827    - 1.11.0
828    - [FEATURE] Add support for Q044.
829
8302018-08-09
831
832    - 1.10.2
833    - [BUGFIX] Don't go over limit when creating delayed streams
834
8352018-07-10
836
837    - 1.10.1
838    - [BUGFIX]  process connections after each batch of packets is read
839      This avoids a problem of accumulating a very large list of packets
840      (possible when speeds are high and socket's receive buffer is large)
841      and processing it all at once.
842    - If glibc is older than 2.17, link with rt.  This is necessary for
843      clock_getres(2).
844    - Add version macros to lsquic.h; remove unnecessary includes.
845
8462018-06-13
847
848    - [BUGFIX] allow multiple parallel connections by default
849
850      Use the original method of tracking connections by CIDs by default.
851      If zero-sized CID support is turned on, connections are tracked by
852      the address.  A new connection is not created if another connection
853      is using the same network address
854
8552018-05-30
856
857    - [FEATURE, API CHANGE] Support zero-sized CIDs in received packets
858
8592018-05-24
860
861    - Close connection properly when packet encryption fails
862
8632018-05-23
864
865    - [BUGFIX] Do not produce packet sequence gaps due to delayed packets
866
8672018-05-21
868
869    - [API Change] Add optional callback to call when handshake is done
870    - [API Change, BUGFIX] After send failure, wait until transport available
871
8722018-05-18
873
874    - [API] Expose useful lsquic_ver2str[] in lsquic.h
875    - [BUGFIX] Do not produce packet sequence gaps due to STREAM frame elision
876    - Improve checks of number of incoming streams limit and associated
877      error reporting.
878    - [BUGFIX] Command-line option `-6` now works correctly.
879
8802018-05-16
881
882    - [FEATURE] DNS resolution
883    - [BUGFIX] Frame insertion mis-ID as overlap instead of dup
884    - http_client: fix priority range generated by -E flag
885
8862018-05-09
887
888    - [FEATURE] Add support for Q043.
889    - Support for versions Q037, Q038, Q041, and Q042 has been removed.
890    - Fix typo in debug message.
891    - Fix code indentation.
892    - Add /* fallthru */ comment to stop newer gcc from complaining.
893    - Logger: fix compilation of optimized Windows build.
894
8952018-05-04
896
897    - [FEATURE] Add support for Q042.
898    - Remove comment: MSPC is obsolete (no code changes)
899    - Prog: use lsquic_str2ver() when processing -o version flag
900    - Remove unused CTIM and SRBF transport parameters
901    - Disable QUIC versions Q037 and Q038 by default
902    - Fix Windows compilation by including compat header file in
903      lshpack.c
904    - Address warnings produced by newer versions of gcc
905    - Future-proof: turn off -Werror
906
9072018-05-02
908
909    - [BUGFIX] Make lsquic_conn_quic_version() available
910    - Switch to using ls-hpack 1.1
911    - [BUGFIX] Do not ignore stream resets after receiving FIN
912
9132018-04-27
914
915    - HPACK: do not allow header block to end with table size update.
916
9172018-04-25
918
919    - [BUGFIX] Do not create gap in sent packnos when squeezing delayed
920      packets.
921    - [BUGFIX] sendctl checks for all unacked bytes, not just retx bytes.
922    - [BUGFIX] connections with blocked scheduled packets are not tickable
923      for sending.
924    - [BUGFIX] Conn is tickable if it wants to send a connection-level
925      frame.
926
9272018-04-23
928
929    - Fix busy loop: tickable must make progress.  When connection is
930      self-reporting as tickable, it must make progress when ticked.  There
931      are two issues:
932        1. If there are buffered packets, the connection is only tickable if
933           they can be sent out.
934        2. A connection is tickable if there are streams on the servicing
935           queue.  When the tick occurs, we must service the stream
936           independent of whether any packets are sent.
937    - Fix assertion in pacer which can be incorrect under some
938      conditions.
939    - cmake: do not turn on address sanitizer if in Travis.
940
9412018-04-20
942
943    - [BUGFIX] Fix bug in lsquic_engine_connect() exposed by yesterday's
944      changes.
945
9462018-04-19
947
948    - [BUGFIX] Add connection to Tickable Queue on stream write
949    - cmake: use MSVC variable instead of trying to detect
950    - engine: improve connection incref/decref logging
951    - stream: don't ignore errors that may occur on triggered flush
952    - connection: remove obsolete method
953    - engine: indicate connection as tickable if previous call went
954      over threshold
955
9562018-04-09
957
958    [API Change, OPTIMIZATION] Only process conns that need to be processed
959
960    The API is simplified: do not expose the user code to several
961    queues.  A "connection queue" is now an internal concept.
962    The user processes connections using the single function
963    lsquic_engine_process_conns().  When this function is called,
964    only those connections are processed that need to be processed.
965    A connection needs to be processed when:
966
967        1. New incoming packets have been fed to the connection.
968        2. User wants to read from a stream that is readable.
969        3. User wants to write to a stream that is writeable.
970        4. There are buffered packets that can be sent out.  (This
971           means that the user wrote to a stream outside of the
972           lsquic library callback.)
973        5. A control frame (such as BLOCKED) needs to be sent out.
974        6. A stream needs to be serviced or delayed stream needs to
975           be created.
976        7. An alarm rings.
977        8. Pacer timer expires.
978
979    To achieve this, the library places the connections into two
980    priority queues (min heaps):
981
982        1. Tickable Queue; and
983        2. Advisory Tick Time queue (ATTQ).
984
985    Each time lsquic_engine_process_conns() is called, the Tickable
986    Queue is emptied.  After the connections have been ticked, they are
987    queried again: if a connection is not being closed, it is placed
988    either in the Tickable Queue if it is ready to be ticked again or
989    it is placed in the Advisory Tick Time Queue.  It is assumed that
990    a connection always has at least one timer set (the idle alarm).
991
992    The connections in the Tickable Queue are arranged in the least
993    recently ticked order.  This lets connections that have been quiet
994    longer to get their packets scheduled first.
995
996    This change means that the library no longer needs to be ticked
997    periodically.  The user code can query the library when is the
998    next tick event and schedule it exactly.  When connections are
999    processed, only the tickable connections are processed, not *all*
1000    the connections.  When there are no tick events, it means that no
1001    timer event is necessary -- only the file descriptor READ event
1002    is active.
1003
1004    The following are improvements and simplifications that have
1005    been triggered:
1006
1007        - Queue of connections with incoming packets is gone.
1008        - "Pending Read/Write Events" Queue is gone (along with its
1009          history and progress checks).  This queue has become the
1010          Tickable Queue.
1011        - The connection hash no longer needs to track the connection
1012          insertion order.
1013
10142018-04-02
1015
1016    - [FEATURE] Windows support
1017
1018    - Reduce stack use -- outgoing packet batch is now allocated on the heap.
1019
10202018-03-09
1021
1022    - [OPTIMIZATION] Merge series of ACKs if possible
1023
1024      Parsed single-range ACK frames (that is the majority of frames) are
1025      saved in the connection and their processing is deferred until the
1026      connection is ticked.  If several ACKs come in a series between
1027      adjacent ticks, we check whether the latest ACK is a strict superset
1028      of the saved ACK.  If it is, the older ACK is not processed.
1029
1030      If ACK frames can be merged, they are merged and only one of them is
1031      either processed or saved.
1032
1033    - [OPTIMIZATION] Speed up ACK verification by simplifying send history.
1034
1035      Never generate a gap in the sent packet number sequence.  This reduces
1036      the send history to a single number instead of potentially a series of
1037      packet ranges and thereby speeds up ACK verification.
1038
1039      By default, detecting a gap in the send history is not fatal: only a
1040      single warning is generated per connection.  The connection can continue
1041      to operate even if the ACK verification code is not able to detect some
1042      inconsistencies.
1043
1044    - [OPTIMIZATION] Rearrange the lsquic_send_ctl struct
1045
1046      The first part of struct lsquic_send_ctl now consists of members that
1047      are used in lsquic_send_ctl_got_ack() (in the absense of packet loss,
1048      which is the normal case).  To speed up reads and writes, we no longer
1049      try to save space by using 8- and 16-bit integers.  Use regular integer
1050      width for everything.
1051
1052    - [OPTIMIZATION] Cache size of sent packet.
1053
1054    - [OPTIMIZATION] Keep track of the largest ACKed in packet_out
1055
1056      Instead of parsing our own ACK frames when packet has been acked,
1057      use the value saved in the packet_out structure when the ACK frame
1058      was generated.
1059
1060    - [OPTIMIZATION] Take RTT sampling conditional out of ACK loop
1061
1062    - [OPTIMIZATION] ACK processing: only call clock_gettime() if needed
1063
1064    - [OPTIMIZATION] Several code-level optimizations to ACK processing.
1065
1066    - Fix: http_client: fix -I flag; switch assert() to abort()
1067
10682018-02-26
1069    - [API Change] lsquic_engine_connect() returns pointer to the connection
1070      object.
1071    - [API Change] Add lsquic_conn_get_engine() to get engine object from
1072      connection object.
1073    - [API Change] Add lsquic_conn_status() to query connection status.
1074    - [API Change] Add add lsquic_conn_set_ctx().
1075    - [API Change] Add new timestamp format, e.g. 2017-03-21 13:43:46.671345
1076    - [OPTIMIZATION] Process handshake STREAM frames as soon as packet
1077      arrives.
1078    - [OPTIMIZATION] Do not compile expensive send controller sanity check
1079      by default.
1080    - [OPTIMIZATION] Add fast path to gquic_be_gen_reg_pkt_header.
1081    - [OPTIMIZATION] Only make squeeze function call if necessary.
1082    - [OPTIMIZATION] Speed up Q039 ACK frame parsing.
1083    - [OPTIMIZATION] Fit most used elements of packet_out into first 64 bytes.
1084    - [OPTIMIZATION] Keep track of scheduled bytes instead of calculating.
1085    - [OPTIMIZATION] Prefetch next unacked packet when processing ACK.
1086    - [OPTIMIZATION] Leverage fact that ACK ranges and unacked list are.
1087      ordered.
1088    - [OPTIMIZATION] Reduce function pointer use for STREAM frame generation
1089    - Fix: reset incoming streams that arrive after we send GOAWAY.
1090    - Fix: delay client on_new_conn() call until connection is fully set up.
1091    - Fixes to buffered packets logic: splitting, STREAM frame elision.
1092    - Fix: do not dispatch on_write callback if no packets are available.
1093    - Fix WINDOW_UPDATE send and resend logic.
1094    - Fix STREAM frame extension code.
1095    - Fix: Drop unflushed data when stream is reset.
1096    - Switch to tracking CWND using bytes rather than packets.
1097    - Fix TCP friendly adjustment in cubic.
1098    - Fix: do not generate invalid STOP_WAITING frames during high packet
1099      loss.
1100    - Pacer fixes.
1101
11022017-12-18
1103
1104    - Fix: better follow cubic curve after idle period
1105    - Fix: add missing parts to outgoing packet splitting code
1106    - Fix: compilation using gcc 4.8.4
1107
11082017-10-31
1109
1110    - Add APIs.txt -- describes LSQUIC APIs
1111
11122017-10-31
1113
1114    - [API Change] Sendfile-like functionality is gone.  The stream no
1115      longer opens files and deals with file descriptors.  (Among other
1116      things, this makes the code more portable.)  Three writing functions
1117      are provided:
1118
1119        lsquic_stream_write
1120        lsquic_stream_writev
1121        lsquic_stream_writef    (NEW)
1122
1123      lsquic_stream_writef() is given an abstract reader that has function
1124      pointers for size() and read() functions which the user can implement.
1125      This is the most flexible way.  lsquic_stream_write() and
1126      lsquic_stream_writev() are now both implemented as wrappers around
1127      lsquic_stream_writef().
1128
1129    - [OPTIMIZATION] When writing to stream, be it within or without the
1130      on_write() callback, place data directly into packet buffer,
1131      bypassing auxiliary data structures.  This reduces amount of memory
1132      required, for the amount of data that can be written is limited
1133      by the congestion window.
1134
1135      To support writes outside the on_write() callback, we keep N
1136      outgoing packet buffers per connection which can be written to
1137      by any stream.  One half of these are reserved for the highest
1138      priority stream(s), the other half for all other streams.  This way,
1139      low-priority streams cannot write instead of high-priority streams
1140      and, on the other hand, low-priority streams get a chance to send
1141      their packets out.
1142
1143      The algorithm is as follows:
1144
1145      - When user writes to stream outside of the callback:
1146        - If this is the highest priority stream, place it onto the
1147          reserved N/2 queue or fail.
1148            (The actual size of this queue is dynamic -- MAX(N/2, CWND) --
1149             rather than N/2, allowing high-priority streams to write as
1150             much as can be sent.)
1151        - If the stream is not the highest priority, try to place the
1152          data onto the reserved N/2 queue or fail.
1153      - When tick occurs *and* more packets can be scheduled:
1154        - Transfer packets from the high N/2 queue to the scheduled
1155          queue.
1156        - If more scheduling is allowed:
1157          - Call on_write callbacks for highest-priority streams,
1158            placing resulting packets directly onto the scheduled queue.
1159        - If more scheduling is allowed:
1160          - Transfer packets from the low N/2 queue to the scheduled
1161            queue.
1162        - If more scheduling is allowed:
1163          - Call on_write callbacks for non-highest-priority streams,
1164            placing resulting packets directly onto the scheduled queue
1165
1166      The number N is currently 20, but it could be varied based on
1167      resource usage.
1168
1169    - If stream is created due to incoming headers, make headers readable
1170      from on_new.
1171
1172    - Outgoing packets are no longer marked non-writeable to prevent placing
1173      more than one STREAM frame from the same stream into a single packet.
1174      This property is maintained via code flow and an explicit check.
1175      Packets for stream data are allocated using a special function.
1176
1177    - STREAM frame elision is cheaper, as we only perform it if a reset
1178      stream has outgoing packets referencing it.
1179
1180    - lsquic_packet_out_t is smaller, as stream_rec elements are now
1181      inside a union.
1182
11832017-10-12
1184
1185    - Do not send RST_STREAM when stream is closed for reading
1186    - Raise maximum header size from 4K to 64K
1187    - Check header name and value lengths against maximum imposed by HPACK
1188    - Fix NULL dereference in stream flow controller
1189
11902017-10-09
1191
1192    - Hide handshake implementation behind a set of function pointers
1193    - Use monotonically increasing clock
1194    - Make sure that retx delay is not larger than the max of 60 seconds
1195
11962017-09-29
1197
1198    - A few fixes to code and README
1199
12002017-09-28
1201
1202    - Add support for Q041; drop support for Q040
1203
12042017-09-27
1205
1206    - Fix CMakeLists.txt: BoringSSL include and lib was mixed up
1207
12082017-09-26
1209
1210    - Add support for Mac OS
1211    - Add support for Raspberry Pi
1212    - Fix BoringSSL compilation: include <openssl/hmac.h> explicitly
1213
12142017-09-22
1215
1216    - Initial release
1217