Welcome! Log In Create A New Profile

Advanced

Re: nginx 1.25.2 changes draft

Sergey Kandaurov
August 15, 2023 12:50PM
> On 15 Aug 2023, at 20:44, Maxim Dounin <mdounin@mdounin.ru> wrote:
>
> Hello!
>
> On Tue, Aug 15, 2023 at 07:48:05PM +0400, Sergey Kandaurov wrote:
>
>>
>>> On 15 Aug 2023, at 19:32, Maxim Dounin <mdounin@mdounin.ru> wrote:
>>>
>>> Hello!
>>>
>>>
>>> Changes with nginx 1.25.2 15 Aug 2023
>>>
>>> *) Feature: path MTU discovery when using HTTP/3.
>>>
>>> *) Change: now nginx uses appname "nginx" when loading OpenSSL
>>> configuration.
>>>
>>> *) Change: now nginx does not try to load OpenSSL configuration if the
>>> --with-openssl option was used to built OpenSSL and the OPENSSL_CONF
>>> environment variable is not set.
>>>
>>> *) Bugfix: in the $body_bytes_sent variable when using HTTP/3.
>>>
>>
>> There were bugfixes in QUIC, which may deserve a separate line.
>
> Added "Bugfix: in HTTP/3" to cover anything not specifically
> mentioned, thnx.
>
>> Also I'd add TLS_AES_128_CCM_SHA256 cipher suite support in QUIC,
>> and a switch to using AEAD-encrypted QUIC address validation tokens,
>> which essentially provides now authenticated encryption.
>
> Agreed about TLS_AES_128_CCM_SHA256, added.
>
> Not sure AEAD worth mentioning though, it's more an internal
> change hardly visible to users.

Agreed, thanks.

>
> Updated:
>
>
> Changes with nginx 1.25.2 15 Aug 2023
>
> *) Feature: path MTU discovery when using HTTP/3.
>
> *) Feature: TLS_AES_128_CCM_SHA256 cipher suite support when using
> HTTP/3.
>
> *) Change: now nginx uses appname "nginx" when loading OpenSSL
> configuration.
>
> *) Change: now nginx does not try to load OpenSSL configuration if the
> --with-openssl option was used to built OpenSSL and the OPENSSL_CONF
> environment variable is not set.
>
> *) Bugfix: in the $body_bytes_sent variable when using HTTP/3.
>
> *) Bugfix: in HTTP/3.
>
>
> Изменения в nginx 1.25.2 15.08.2023
>
> *) Добавление: path MTU discovery при использовании HTTP/3.
>
> *) Добавление: поддержка шифра TLS_AES_128_CCM_SHA256 при использовании
> HTTP/3.
>
> *) Изменение: теперь при загрузке конфигурации OpenSSL nginx использует
> appname "nginx".
>
> *) Изменение: теперь nginx не пытается загружать конфигурацию OpenSSL,
> если для сборки OpenSSL использовался параметр --with-openssl и
> переменная окружения OPENSSL_CONF не установлена.
>
> *) Исправление: в переменной $body_bytes_sent при использовании HTTP/3.
>
> *) Исправление: в HTTP/3.
>

Looks good.

--
Sergey Kandaurov
_______________________________________________
nginx-devel mailing list
nginx-devel@nginx.org
https://mailman.nginx.org/mailman/listinfo/nginx-devel
Subject Author Views Posted

nginx 1.25.2 changes draft

Maxim Dounin 221 August 15, 2023 11:34AM

Re: nginx 1.25.2 changes draft

Roman Arutyunyan 68 August 15, 2023 11:48AM

Re: nginx 1.25.2 changes draft

Sergey Kandaurov 69 August 15, 2023 11:50AM

Re: nginx 1.25.2 changes draft

Maxim Dounin 80 August 15, 2023 12:46PM

Re: nginx 1.25.2 changes draft

Sergey Kandaurov 67 August 15, 2023 12:50PM

Re: nginx 1.25.2 changes draft

Maxim Dounin 91 August 15, 2023 01:14PM

Re: nginx 1.25.2 changes draft

Sergey Kandaurov 68 August 15, 2023 12:00PM

Re: nginx 1.25.2 changes draft

Maxim Dounin 73 August 15, 2023 12:10PM



Sorry, you do not have permission to post/reply in this forum.

Online Users

Guests: 100
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready