Merge 11-Dev back into master

[cmcfarlen]

No description provided.

[bryancall]

The AuTest 0of4 failure is caused by ats_replay.test.ext still referencing the old ssl_multicert_config attribute after the ssl_multicert.config → ssl_multicert.yaml migration (#12755).

The chunked_encoding test's large_chunked.replay.yaml uses ATSReplayTest with enable_tls: true, which hits line 62 of ats_replay.test.ext:

AttributeError: 'Disk' object has no attribute 'ssl_multicert_config'. Did you mean: 'ssl_multicert_yaml'?

On 11-Dev, the TLS block was already removed from ats_replay.test.ext, but the merge result picks up master's version which still has the old code. The fix is to update the TLS section in ats_replay.test.ext to use ssl_multicert_yaml:

--- a/tests/gold_tests/autest-site/ats_replay.test.ext
+++ b/tests/gold_tests/autest-site/ats_replay.test.ext
@@ -43,11 +43,11 @@
     # TLS configs
     enable_tls = process_config.get('enable_tls', False)
     if enable_tls:
-        # Configure ssl_multicert.config if specified.
-        ssl_multicert_config = ats_config.get('ssl_multicert_config', [])
+        # Configure ssl_multicert.yaml if specified.
+        ssl_multicert_yaml = ats_config.get('ssl_multicert_yaml', [])
 
-        # setup default cert and key ssl_multicert_config is empty
-        if ssl_multicert_config == []:
+        # setup default cert and key if ssl_multicert_yaml is empty
+        if ssl_multicert_yaml == []:
             ts.addDefaultSSLFiles()
 
             ts.Disk.records_config.update(
@@ -56,10 +56,15 @@
                     'proxy.config.ssl.server.private_key.path': ts.Variables.SSLDir,
                 })
 
-            ssl_multicert_config = ["dest_ip=* ssl_cert_name=server.pem ssl_key_name=server.key"]
+            ssl_multicert_yaml = [
+                "ssl_multicert:",
+                "  - ssl_cert_name: server.pem",
+                "    ssl_key_name: server.key",
+                '    dest_ip: "*"',
+            ]
 
-        for line in ssl_multicert_config:
-            ts.Disk.ssl_multicert_config.AddLine(line)
+        for line in ssl_multicert_yaml:
+            ts.Disk.ssl_multicert_yaml.AddLine(line)

Verified in the Fedora 42 CI Docker image — chunked_encoding and cache-auth both pass with this fix.