release 2.4.16.9

Bugfixes

• cookie: use case insensitive hostname/domain comparison in oidc_check_cookie_domain
• authz: remove the Location header from HTML based step up authentication responses as it may conflict with its HTTP 200 status code and confuse middle boxes
• metrics: avoid double-free on shutdown by not calling pthread_exit; fixes #1207; thanks @studersi

Features

• metrics: write cached metrics into shared memory before exiting

Commercial

• binary packages for various other platforms such as Microsoft Windows 64bit/32bit, Red Hat Enterprise Linux 6/7, older Ubuntu and Debian distro's, Oracle HTTP Server 11.1/12.1/12.2, IBM HTTP Server 8/9, and IBM AIX 7.x are available under a commercial agreement via sales@openidc.com
• support for Redis/Valkey over TLS, Redis/Valkey (TLS) Sentinel, and Redis/Valkey (TLS) Cluster is available under a commercial license via sales@openidc.com