stunnel-5.71

Makefile.am

@@ -21,7 +21,7 @@ EXTRA_DIST = .travis.yml makedh.sh $(doc_DATA)
 distcleancheck_listfiles = find . -type f -exec sh -c 'test -f $(srcdir)/{} || echo {}' ';'
 
 distclean-local:
-	rm -rf autom4te.cache
+	rm -rf autom4te.cache version.txt
 
 sign:
 	cp -f $(distdir).tar.gz $(distdir)-win64-installer.exe $(distdir)-android.zip ../dist

Makefile.in

@@ -879,7 +879,7 @@ libtool: $(LIBTOOL_DEPS)
 	$(SHELL) ./config.status libtool
 
 distclean-local:
-	rm -rf autom4te.cache
+	rm -rf autom4te.cache version.txt
 
 sign:
 	cp -f $(distdir).tar.gz $(distdir)-win64-installer.exe $(distdir)-android.zip ../dist

NEWS.md

@@ -1,6 +1,23 @@
 # stunnel change log
 
 
+### Version 5.71, 2023.09.19, urgency: MEDIUM
+* Security bugfixes
+  - OpenSSL DLLs updated to version 3.1.3.
+* Bugfixes
+  - Fixed the console output of tstunnel.exe.
+* Features sponsored by SAE IT-systems
+  - OCSP stapling is requested and verified in the client mode.
+  - Using "verifyChain" automatically enables OCSP
+    stapling in the client mode.
+  - OCSP stapling is always available in the server mode.
+  - An inconclusive OCSP verification breaks TLS negotiation.
+    This can be disabled with "OCSPrequire = no".
+  - Added the "TIMEOUTocsp" option to control the maximum
+    time allowed for connecting an OCSP responder.
+* Features
+  - Added support for Red Hat OpenSSL 3.x patches.
+
 ### Version 5.70, 2023.07.12, urgency: HIGH
 * Security bugfixes
   - OpenSSL DLLs updated to version 3.0.9.

TODO.md

@@ -22,6 +22,8 @@ A sponsor could allocate my time to get them faster.
 * MSI installer for Windows.
 * Add 'leastconn' failover strategy to order defined 'connect' targets
   by the number of active connections.
+* MariaDB (formerly MySQL) protocol negotiation:
+  [MariaDB Handshake Protocol](https://mariadb.com/kb/en/connection/)
 
 ### Low priority features
 These features will unlikely ever be supported.