Hi folks!

I am happy to announce the new formal release, 1.7.4.1, of the OpenResty bundle:

http://openresty.org/#Download

The highlights of this release are

1) the new "resty" command-line utility,

2) SSL/TLS cosocket support in ngx_lua (with SNI support and
client-side session reuse support as well), and

3) SSL/TLS support in our nonblocking MySQL driver in pure Lua,
lua-resty-mysql.

(The highlight for the previous formal release was the full-duplex
cosocket support ;))

Special thanks go to all our contributors for making this happen!

Below is the complete change log for this release, as compared to the
last formal release, 1.7.2.1:

* upgraded the Nginx core to 1.7.4.

* see the changes here: http://nginx.org/en/CHANGES

* feature: added a new command-line utility, "resty", to run Lua
code or Lua files (for OpenResty) directly from the
command-line. it is installed into the "<prefix>/bin" directory.
prodded by Vitaly Kosenko. This tool is currently experimental.

* bugfix: "./configure": we might misuse the homebrew version of
LuaJIT on Mac OS X when the user specified the
"--with-ld-opt="-L/usr/local/lib"" option. thanks Aapo
Talvensaari for the report.

* bugfix: "util/install": remove the target file before
overwriting to prevent running processes (if any) from crashing.

* bugfix: "./configure": call "sh" explicitly for nginx's
"./configure" script to prevent potential file permission
issues.

* optimize: now we use the C compiler option "-O2" for everything
by default (we used to use "-O1" which is too conservative).

* upgraded the ngx_postgres module to 1.0rc4.

* bugfix: segmentation fault might happen in
"ngx_destroy_pool" when debug logging was enabled in the
nginx build. thanks buddy-ekb for the report.

* upgraded the ngx_echo module to 0.56.

* bugfix: our "create_loc_conf" callback did not return NULL
on error. thanks Markus Linnala for the patch.

* bugfix: reading $echo_client_request_headers would return
garbled data when LF instead of CRLF is used as the line
terminator in the original header.

* bugfix: reading $echo_client_request_headers could lead to
buffer overflow due to misuse of "r->header_end" while
modules like ngx_fastcgi and ngx_proxy can change
"r->header_end" to point to buffers of their own.

* upgraded the ngx_form_input module to 0.10.

* bugfix: "pcre_exec -2" error might happen when the standard
"if" directive is used to test the empty value nginx
variables set by this module with a regex. (Jiale)

* bugfix: we incorrectly overrode "r->read_event_handler" with
"ngx_http_request_empty_handler" in our "post read" callback
for client request body reading, which could waste CPU time
in level-triggered event models like poll and select. thanks
chen for the catch.

* upgraded the ngx_set_misc module 0.26.

* change: set_escape_uri: use uppercase hexadecimal digits for
percent-encoding as per RFC 3986. thanks splitice for the
original patch.

* bugfix: our "create_loc_conf" callback did not return NULL
on error. thanks Markus Linnala for the patch.

* bugfix: fixed source and test files' permission. they should
not be executable at all. thanks Christos Kontas for the
report.

* upgraded LuaJIT to v2.1-20140805:
https://github.com/openresty/luajit2/tags

* imported Mike Pall's latest bug fixes:

* FFI: Fix "__index"/"__newindex" metamethod resolution
for ctypes.

* Invalidate backpropagation cache after DCE.

* upgraded the ngx_lua module to 0.9.12.

* feature: implemented the SSL/TLS cosocket API.

* added new method sslhandshake() to the stream-typed
cosocket objects.

* added new configuration directives
lua_ssl_trusted_certificate, lua_ssl_verify_depth,
lua_ssl_crl, lua_ssl_protocols, and lua_ssl_ciphers.
thanks aviramc for the original patch.

* feature: the standard coroutine API is now enabled in the
context of header_filter_by_lua* and body_filter_by_lua*.
thanks ngo for the request.

* feature: for content/rewrite/access_by_lua_file directives,
we now return 404 status code instead of 500 in case that
the specified .lua file cannot be opened. thanks Sam Lee for
the suggestion.

* feature: added pure C API function for FFI-based
implementation of reading ngx.header.HEADER.

* feature: now we also explicitly check the Lua ABI/language
version in our feature test of the "./configure" phase for a
usable Lua lib.

* feature: added pure C API functions for FFI-based
implementations of ngx.worker.pid() and
ngx.worker.exiting().

* bugfix: ngx.req.raw_header() could lead to buffer overflow
and the "userdata length overflow" error due to misuse of
"r->header_end" while modules like ngx_fastcgi and ngx_proxy
can change "r->header_end" to point to buffers of their own.
thanks sadmedved for the report.

* bugfix: ngx.req.raw_header() would return garbled data when
LF instead of CRLF is used as the line terminator in the
original header.

* bugfix: body_filter_by_lua*: reading "ngx.arg[1]" after
clearing "ngx.arg[1]" (by assigning nil or "") could lead to
segmentation faults. this regression had appeared in
v0.9.10. thanks Jason Stangroome for the report.

* bugfix: init_worker_by_lua* would conflict with some other
nginx C modules (like ngx_proxy) when their "merge_loc_conf"
callbacks (or alike) produce side-effects in "cf->cycle".
thanks Ruoshan Huang for the report.

* bugfix: stream-typed cosocket might read uninitialized
memory bytes when logging errors due to sending to or
receiving from a closed socket.

* bugfix: the stream-typed and datagram-typed cosockets'
resolver handler did not handle some special errors
correctly.

* bugfix: ngx.resp.get_headers(): sometimes we might omit the
builtin-headers Content-Type, Content-Length, Connection,
and Transfer-Encoding. thanks Jon Keys for the report.

* bugfix: ngx.req.socket(true): it incrrectly returned the
error "chunked request bodies not supported yet" for raw
request sockets with chunked request bodies. thanks Xiaofei
Yang for the report.

* bugfix: we did not check allocation failures while compiling
the pattern for tcpsock:receiveuntil(). thanks Tatsuhiko
Kubo for the patch.

* bugfix: we did not use "lua_checkstack()" to prevent Lua
stack overflow in our own C-land Lua backtrace generator.

* bugfix: fixed an incorrect error message. thanks aviramc for
the patch.

* bugfix: for statically linked LuaJIT, we need to pass "-ldl"
to the linker. thanks cf2012 for the report.

* bugfix: the tcp_nodelay directive configuration was not
honored by upstream TCP cosockets, which could lead to extra
delays for small messages. thanks Shun Zhang for reporting
this issue.

* bugfix: fixed build failures with OpenSSL older than 0.9.8f.
thanks FFCZ for the report.

* bugfix: compilation failed with nginx 1.3.6 or older. this
regression had appeared in the v0.9.11 release.

* bugfix: compilation failed with nginx 0.9.x.

* bugfix: our "create_loc_conf" callback did not return NULL
on error.

* bugfix: added allocation failure check for
"ngx_array_init()" on the C land. thanks Tatsuhiko Kubo for
the patch.

* optimize: we now cache the userdata metatable (for the
"__gc" metamethod) in the lua registry for both the
stream-typed datagram-typed cosockets.

* optimize: reading ngx.header.HEADER: eliminated dynamic
allocations and data copying when there is no need to
ransform "_" to "-" in the header name.

* change: ngx.escape_uri() now uses uppercase hexadecimal
digits for percent-encoding according to the recommendation
in RFC 3986. thanks Piotr Sikora for the suggestion.

* change: use the type "ngx_http_lua_ffi_str_t" instead of
"ngx_str_t" in the pure C API function
"ngx_http_lua_ffi_req_get_headers".

* change: renamed the C macro "NGX_HTTP_LUA_NO_FFI_API" to
"NGX_LUA_NO_FFI_API".

* style: various coding style fixes and minor optimizations
from Tatsuhiko Kubo.

* doc: documented the behavior of init_by_lua* when
lua_code_cache is off.

* doc: fixed a wrong statement regarding "require()" in the
"Lua Variable Scope" section. thanks Hungpu DU for the
report.

* doc: more clarification in the docs for the "res.truncated"
flag returned by ngx.location.capture(). thanks Jon Keys for
asking.

* doc: added missing method name "get_keys" under
"ngx.shared.DICT" and also fixed the method order. thanks
George Bashi for the patch.

* doc: markdown: fixed the "Back to TOC" links for the
sections ("Nginx API for Lua" and "Directives") with inlined
TOC. thanks Pierre-Yves Gérardy and Simon Eskildsen for the
reports.

* doc: improved the wording in the "Lua Coroutine
Yielding/Resuming" section. thanks Hungpu DU for the report.

* doc: improved the wording of the documentation for
ngx.req.clear_header() to prevent ambiguity. thanks
Christophe-Marie Duquesne for the report.

* upgraded the lua-resty-core library to 0.0.9.

* feature: implemented the reading part of ngx.header.HEADER
with FFI.

* feature: implemented ngx.worker.pid() and
ngx.worker.exiting() with FFI.

* upgraded the lua-resty-upstream-healthcheck library to 0.03.

* optimize: timers in different nginx worker processes can go
out of phase as time goes, resulting in duplicate test
requests from different workers in the same check interval.
thanks fancyrabbit for the report and fix.

* upgraded the lua-resty-websocket library to 0.04.

* feature: resty.websocket.client: added support for the
"origin" option to specify the value of the "Origin" request
header. thanks woo for the original patch.

* bugfix: resty.websocket.client: connection pooling was
broken due to duplicate websocket handshakes. thanks woo for
the patch.

* bugfix: fixed the "Sec-WebSocket-Protocol" header when the
secondary protocols are specified. thanks woo for the
report.

* doc: typo fixes from Laurent Arnoud.

* upgraded the lua-resty-dns library to 0.13.

* bugfix: we did not parse the character-strings in the "TXT"
record data. thanks Kevin Ingersoll for the report.

* upgraded the lua-resty-mysql library to 0.15.

* feature: added new boolean-value options "ssl" and
"ssl_verify" to the connect() method connecting to MySQL via
SSL.

* upgraded the lua-cjson library to 2.1.0.2.

* bugfix: the Makefile had a bug that overwrites the existing
"cjson.so" file in place which could cause already running
processes with this ".so" file loaded to crash. thanks
ywsample for the report.

The HTML version of the change log with lots of helpful hyper-links
can be browsed here:

http://openresty.org/#ChangeLog1007004

OpenResty (aka. ngx_openresty) is a full-fledged web application
server by bundling the standard Nginx core, lots of 3rd-party Nginx
modules and Lua libraries, as well as most of their external
dependencies. See OpenResty's homepage for details:

http://openresty.org/

We have run extensive testing on our Amazon EC2 test cluster and
ensured that all the components (including the Nginx core) play well
together. The latest test report can always be found here:

http://qa.openresty.org

Have fun!
-agentzh

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx