### Networking

- Class TWebFile now supports proxies. Set the proxy URL either via static method:

         TWebFile::SetProxy(const char *url);

  or via the shell variable http_proxy, like is used for e.g. wget.
- Class TWebFile now supports the basic authentication (AuthType Basic) scheme. The user name and password can be specified in the URL like this:

         http://username:mypasswd@pcsalo.cern.ch/files/aap.root

### XROOTD

- New version 20090610-0430

- Improvements

- Add the possibility of using the xrd command line from batch scripts
- Add support for Adler32 checksum calculation of a local unix file (including stdin) and file on a remote xrootd data server.
- Add support for the so-called Xtreme copy, allowing xrdcp to read multiple chunks from several servers, in parallel.
- Add possibility to use a different version of a given C++ compiler or linker (--with-cxx=..., etc)
- Increase flexibility in configuring openssl and openafs support
- In GSI authentication, automatize the loading of CRL; the information about the URI is looked for either in the dedicated extension on the CA certificate or from the file "<CA hash>.crl_url" and the file automatically downloaded and transformed in PEM format

- Fixes

- Server side

- Fix wrong reporting of the refresh option for Locate

- Fix incorrect propagation of selected nodes

- Prevent potential long duration loop (15 mins) after client disconnections

- Avoid potential deadlocks when trying to remove a node from a cluster

- Correct matching of incoming connection with previously dropped connection

- Correct export of cluster identification

- Correctly propagate information about files that could not be staged

- Prevent endsess deadlock when parallel streams stall due to large WAN RTT
- Fix infinite wait for primary login that will never happen if you are a manager without a meta-manager
- Prevent annoying (but not deadly) infinite loop should a server go offline that is subject to a locate request display.

- Client side

- Better handling of errno, especially for parallel streams

- Allow the client to cycle through all the remaining valid security protocols in the list of protocols returned by the server

- Make the readahead strategy more conservative

- Fix a rare race condition happening when destroying instances with outstanding open requests

- Enforce cache coherency in the case of reads+writes in the same file

- Correctly guess the filesize of a file opened for writing in sync mode

- Make server host name check more flexible for GSI authentication
- Fix some relevant issues with cache handling on the client, including a rare but fatal bug in determining the cache holes list and the end of a cache lookup
- More complete detection of async read errors

- General

- Fix problem in handling the return code of X509_REQ_verify in XrdCryptosslX509Req.cc
- Avoid SEGV when doing an lsd admin command with authenticated xrootd clients
- Close race conditions that allowed a supervisor/manager to subscribe without declaring a data port. Initialize nostage state in XrdCmsState to prevent erroneous state declaration during initialization.
- Fix a problem with the subject name of proxies of level > 1; this was creating a failure when a Globus application was trying to use the proxy certificate
- Fix a problem with cache refreshing in XrdSutCache affecting automatic reloading of password files
- For now, turn off IPV6 processing as it seems to create several problems.
- Fix a few issues with the available releases of gcc 4.4
- Fix a few issues with the 'icc' compiler
- Fix several issues in GSI and PWD authentication modules

- New features

- New File Residency Manager (frm), replacement for the MPS scripts
- Scripts are now provided to

- automatically donwload a CRL certificate (utils/getCRLcert)

- install the recommended verion of OpenSSL and build it with the options optimal for usage in XROOTD/SCALLA (utils/installOpenSSL.sh)

- install the recommended verion of OpenAFS and build it with the options optimal for usage in XROOTD/SCALLA (utils/installOpenAFS.sh)

- Miscellanea

- TokenAuthz and CS2 modules are no longer part of the main built; they have to be built externally