Welcome to Centmin Mod Community
Register Now

Master Branch update Nginx dynamic TLS & HPACK patch support in 123.09beta01

Discussion in 'Centmin Mod Github Commits' started by eva2000, Feb 1, 2022.

  1. eva2000

    eva2000 Administrator Staff Member

    59,371
    12,513
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,149
    Local Time:
    8:52 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    update Nginx dynamic TLS & HPACK patch support in 123.09beta01

    - Update optional HTTP/2 HPACK full encoding & TLS dynamic record size patch support for Nginx 1.21.5 and 1.21.6
    - Added 2 variables to control the max Nginx version supported for patching to control any future breakage in Nginx new versions

    NGINX_HPACK_ALLOWED_VER='1021006' # Max allowed Nginx version for Nginx HTTP/2 HPACK full encoding patch support
    NGINX_DYNAMICTLS_ALLOWED_VER='1021006' # Max allowed Nginx version for Nginx Dynamic TLS patch support


    These 2 variables can also be set in persistent config file /etc/centminmod/custom_config.inc to override the defaults to enable newer Nginx versions to at least try to patch HTTP/2 HPACK and TLS dynamic record size patches. i.e. setting below will allow Nginx 1.21.7 to try patching

    NGINX_HPACK_ALLOWED_VER='1021007' # Max allowed Nginx version for Nginx HTTP/2 HPACK full encoding patch support
    NGINX_DYNAMICTLS_ALLOWED_VER='1021007' # Max allowed Nginx version for Nginx Dynamic TLS patch support

    Though if Nginx 1.21.7 has breaking code changes that break patch support, the Nginx will fail to patch and Nginx server may not start properly. Hence, why optional HTTP/2 HPACK full encoding & TLS dynamic record size patch support is always incrementally tested and enabled with each Nginx version. You can use these 2 new variables to control this before Centmin Mod's official updates.

    Continue reading...

    Centmin Mod Github Master branch

    Master branch is where most recent commits are made as at May 24, 2015.