nginx.git, branch release-1.19.0

nginx-1.19.0-RELEASE

2020-05-26T15:00:20+00:00

Updated OpenSSL used for win32 builds.

2020-05-25T19:10:37+00:00

HTTP/2: invalid connection preface logging (ticket #1981).

2020-05-25T15:33:42+00:00

Previously, invalid connection preface errors were only logged at debug
level, providing no visible feedback, in particular, when a plain text
HTTP/2 listening socket is erroneously used for HTTP/1.x connections.
Now these are explicitly logged at the info level, much like other
client-related errors.

Fixed format specifiers.

2020-05-23T12:53:08+00:00

OCSP: certificate status cache.

2020-05-22T14:25:27+00:00

When enabled, certificate status is stored in cache and is used to validate
the certificate in future requests.

New directive ssl_ocsp_cache is added to configure the cache.

SSL: client certificate validation with OCSP (ticket #1534).

2020-05-22T14:30:12+00:00

OCSP validation for client certificates is enabled by the "ssl_ocsp" directive.
OCSP responder can be optionally specified by "ssl_ocsp_responder".

When session is reused, peer chain is not available for validation.
If the verified chain contains certificates from the peer chain not available
at the server, validation will fail.

OCSP stapling: iterate over all responder addresses.

2020-05-22T17:35:05+00:00

Previously only the first responder address was used per each stapling update.
Now, in case of a network or parsing error, next address is used.

This also fixes the issue with unsupported responder address families
(ticket #1330).

OCSP stapling: keep extra chain in the staple object.

2020-05-17T11:24:35+00:00

OCSP stapling: moved response verification to a separate function.

2020-05-06T18:44:14+00:00

Upstream: jump out of loop after matching the status code.

2020-05-13T14:02:47+00:00