> On 15 Aug 2023, at 20:44, Maxim Dounin <mdounin@mdounin.ru> wrote:
>
> Hello!
>
> On Tue, Aug 15, 2023 at 07:48:05PM +0400, Sergey Kandaurov wrote:
>
>>
>>> On 15 Aug 2023, at 19:32, Maxim Dounin <mdounin@mdounin.ru> wrote:
>>>
>>> Hello!
>>>
>>>
>>> Changes with nginx 1.25.2 15 Aug 2023
>>>
>>> *) Feature: path MTU discovery when using HTTP/3.
>>>
>>> *) Change: now nginx uses appname "nginx" when loading OpenSSL
>>> configuration.
>>>
>>> *) Change: now nginx does not try to load OpenSSL configuration if the
>>> --with-openssl option was used to built OpenSSL and the OPENSSL_CONF
>>> environment variable is not set.
>>>
>>> *) Bugfix: in the $body_bytes_sent variable when using HTTP/3.
>>>
>>
>> There were bugfixes in QUIC, which may deserve a separate line.
>
> Added "Bugfix: in HTTP/3" to cover anything not specifically
> mentioned, thnx.
>
>> Also I'd add TLS_AES_128_CCM_SHA256 cipher suite support in QUIC,
>> and a switch to using AEAD-encrypted QUIC address validation tokens,
>> which essentially provides now authenticated encryption.
>
> Agreed about TLS_AES_128_CCM_SHA256, added.
>
> Not sure AEAD worth mentioning though, it's more an internal
> change hardly visible to users.
Agreed, thanks.
>
> Updated:
>
>
> Changes with nginx 1.25.2 15 Aug 2023
>
> *) Feature: path MTU discovery when using HTTP/3.
>
> *) Feature: TLS_AES_128_CCM_SHA256 cipher suite support when using
> HTTP/3.
>
> *) Change: now nginx uses appname "nginx" when loading OpenSSL
> configuration.
>
> *) Change: now nginx does not try to load OpenSSL configuration if the
> --with-openssl option was used to built OpenSSL and the OPENSSL_CONF
> environment variable is not set.
>
> *) Bugfix: in the $body_bytes_sent variable when using HTTP/3.
>
> *) Bugfix: in HTTP/3.
>
>
> Изменения в nginx 1.25.2 15.08.2023
>
> *) Добавление: path MTU discovery при использовании HTTP/3.
>
> *) Добавление: поддержка шифра TLS_AES_128_CCM_SHA256 при использовании
> HTTP/3.
>
> *) Изменение: теперь при загрузке конфигурации OpenSSL nginx использует
> appname "nginx".
>
> *) Изменение: теперь nginx не пытается загружать конфигурацию OpenSSL,
> если для сборки OpenSSL использовался параметр --with-openssl и
> переменная окружения OPENSSL_CONF не установлена.
>
> *) Исправление: в переменной $body_bytes_sent при использовании HTTP/3.
>
> *) Исправление: в HTTP/3.
>
Looks good.
--
Sergey Kandaurov
_______________________________________________
nginx-devel mailing list
nginx-devel@nginx.org
https://mailman.nginx.org/mailman/listinfo/nginx-devel