
Load CA certs from system store on Windows / OpenSSL.Sanitize suspicious path components instead of rejecting them.Parse session-id header case-insensitively.Add labels support to libtransmission and transmission-remote.
Update the resume file before running scripts. Change torrent location even if no data move is needed. Maintain a "session ID" file (in temporary directory) to better detect whether session is local or remote return the ID as part of "session-get" response. Improve completion scripts execution and error handling add support for. Don't switch trackers while announcing (leads to crash). Abort handshake if establishing DH shared secret fails (leads to crash). Improve ToS handling on IPv6 connections. Add TCP_FASTOPEN support (should result in slight speedup). Announce INT64_MAX as size left if the value is unknown (helps with e.g. Add Peer ID for Xfplay, PicoTorrent, Free Download Manager, Folx, Baidu Netdisk torrent clients. Set idle seed limit range to 1.40320 (4 weeks tops) in all clients. Limit the number of incorrect authentication attempts in embedded web server to 100 to prevent brute-force attacks. Handle "fields" argument in "session-get" RPC request if "fields" array is present in arguments, only return session fields specified otherwise return all the fields as before. Go back to using hash as base name for resume and torrent files (those stored in configuration directory).
Change TR_CURL_SSL_VERIFY to TR_CURL_SSL_NO_VERIFY and enable verification by default.Allow the RPC server to listen on an IPv6 address.Note: Now requires OS X 10.10 or later All Platforms