Cap spawn at max
Typo
Remove duplicate test (list-delete) was duplicate test of update-remove-list
Clear the error buffer after loading dictionaries
Anything which eventually has the value it got interpreted by pairparsevalue, or doesn't pass the length of the string around must not pre-unescape the string

This broke pretty much all escape sequences in preprocess, sql, ldap and radclient. Arguably as conffile.c is the only place which needs this, it should probably be the thing doing the unescaping.

No, I don't buy that things should be prefixed with \\, that's shit. The server should be able to reingest what it spits out in detail files and there's no way that worked in the current server with octal escape sequences.
Update ChangeLog
Use talloc for row memory
More SSL initialisation
Move PQ ssl init to instantiation function, just in case it needs to be done before we spawn threads
Spawn connections "in_use" or not.

No more double uses of the connections
Simplified sanity checks
Disabled debug checks
note recent changes
Various minor PG fixes
Cleanup connection properly on error
Minor fixes
Don't leak the results of open_querys
Revert "Minor fixes"
Print message before connecting
Added TLS-Client-Cert-Subject-Alt-Name-Upn and TLS-Client-Cert-Subject-Alt-Name-Dns attributes (intended for use with EAP-TLS and checking certificates)