/ Register

Learn about Centmin Mod LEMP Stack today
Register Now

Nginx [nginx-announce] nginx-1.13.1

Discussion in 'Nginx and PHP-FPM news & discussions' started by eva2000, May 31, 2017.

Tags:
Previous Thread Next Thread
Loading...
  1. May 31, 2017 #1
    eva2000

    eva2000 Administrator Staff Member

    36,905
    8,074
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +12,436
    Local Time:
    11:22 AM
    Nginx 1.15.x
    MariaDB 5.5/10.x
    Changes with nginx 1.13.1 30 May 2017

    *) Feature: now a hostname can be used as the "set_real_ip_from"
    directive parameter.

    *) Feature: vim syntax highlighting scripts improvements.

    *) Feature: the "worker_cpu_affinity" directive now works on DragonFly
    BSD.
    Thanks to Sepherosa Ziehau.

    *) Bugfix: SSL renegotiation on backend connections did not work when
    using OpenSSL before 1.1.0.

    *) Workaround: nginx could not be built with Oracle Developer Studio
    12.5.

    *) Workaround: now cache manager ignores long locked cache entries when
    cleaning cache based on the "max_size" parameter.

    *) Bugfix: client SSL connections were immediately closed if deferred
    accept and the "proxy_protocol" parameter of the "listen" directive
    were used.

    *) Bugfix: in the "proxy_cache_background_update" directive.

    *) Workaround: now the "tcp_nodelay" directive sets the TCP_NODELAY
    option before an SSL handshake.


    --
    Maxim Dounin
    http://nginx.org/
    _______________________________________________
    nginx-announce mailing list
    [email protected]
    http://mailman.nginx.org/mailman/listinfo/nginx-announce

    Continue reading...
     
    • Informative Informative x 3
  2. May 31, 2017 #2
    eva2000

    eva2000 Administrator Staff Member

    36,905
    8,074
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +12,436
    Local Time:
    11:22 AM
    Nginx 1.15.x
    MariaDB 5.5/10.x
     
  3. May 31, 2017 #3
    Sunka

    Sunka Well-Known Member

    1,025
    284
    83
    Oct 31, 2015
    Rijeka, Croatia
    Ratings:
    +462
    Local Time:
    2:22 AM
    Nginx 1.15.0
    MariaDB 10.2.15
     
    • Like Like x 1
  4. May 31, 2017 #4
    ahmed

    ahmed Member

    243
    19
    18
    Feb 21, 2017
    Ratings:
    +26
    Local Time:
    3:22 AM
    are we now done with TLS 1.3?
     
  5. May 31, 2017 #5
    ahmed

    ahmed Member

    243
    19
    18
    Feb 21, 2017
    Ratings:
    +26
    Local Time:
    3:22 AM
    in centmin conf, can we put OpenSSL so the installer can pick the latest version instead of specifying the exact version number?

    OPENSSL_VERSION='1.1.0f'
     
    Last edited: May 31, 2017
  6. May 31, 2017 #6
    ahmed

    ahmed Member

    243
    19
    18
    Feb 21, 2017
    Ratings:
    +26
    Local Time:
    3:22 AM
    mine is
    Code:
    nginx -V
nginx version: nginx/1.13.1
built by gcc 6.2.1 20160916 (Red Hat 6.2.1-3) (GCC)
built with OpenSSL 1.1.0f  25 May 2017
TLS SNI support enabled
configure arguments: --with-ld-opt='-ljemalloc -Wl,-z,relro -Wl,-rpath,/usr/local/lib' --with-cc-opt='-m64 -march=native -DTCP_FASTOPEN=23 -g -O3 -fstack-protector-strong -fuse-ld=gold --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wno-deprecated-declarations -gsplit-dwarf' --sbin-path=/usr/local/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --with-compat --with-http_stub_status_module --with-http_secure_link_module --with-libatomic --with-http_gzip_static_module --add-dynamic-module=../ngx_brotli --with-http_sub_module --with-http_addition_module --with-http_image_filter_module=dynamic --with-http_geoip_module --with-stream_geoip_module --with-stream_realip_module --with-stream_ssl_preread_module --with-threads --with-stream=dynamic --with-stream_ssl_module --with-http_realip_module --add-dynamic-module=../ngx-fancyindex-0.4.0 --add-module=../ngx_cache_purge-2.3 --add-module=../ngx_devel_kit-0.3.0 --add-module=../set-misc-nginx-module-0.31 --add-module=../echo-nginx-module-0.60 --add-module=../redis2-nginx-module-0.14 --add-module=../ngx_http_redis-0.3.7 --add-module=../memc-nginx-module-0.18 --add-module=../srcache-nginx-module-0.31 --add-module=../headers-more-nginx-module-0.32 --with-pcre=../pcre-8.40 --with-pcre-jit --with-zlib=../zlib-1.2.11 --with-http_ssl_module --with-http_v2_module --with-openssl=../openssl-1.1.0f
     
    Last edited: May 31, 2017
    • Like Like x 1
  7. May 31, 2017 #7
    eva2000

    eva2000 Administrator Staff Member

    36,905
    8,074
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +12,436
    Local Time:
    11:22 AM
    Nginx 1.15.x
    MariaDB 5.5/10.x
    openssl 1.1.1 TLS v1.3 doesn't get official release until TLS 1.3 spec is finalised see https://community.centminmod.com/th...n-nginx-master-branch.11424/page-2#post-49509
    centmin mod 123.09beta01 already supports testing openssl 1.1.1 dev with TLS v1.3 draft-18 which is what web browsers support but openssl 1.1.1 dev is on TLS v1.3 draft-20 and counting
    nope, need specify a version number so you have finer grain control over versions
     
    • Like Like x 1
Previous Thread Next Thread
Loading...
..

.