nginx.git, branch release-1.22.0 nginx nginx-1.22.0-RELEASE 2022-05-23T23:59:18+00:00 Maxim Dounin mdounin@mdounin.ru 2022-05-23T23:59:18+00:00 057157dcdd47fbb690498a0feada5f28758ab236 






Updated OpenSSL and zlib used for win32 builds.
2022-05-23T23:51:49+00:00

Maxim Dounin
mdounin@mdounin.ru

2022-05-23T23:51:49+00:00

dcfc010f1c7be5158d6d3086af43c5579a8cbeca












Year 2022.
2022-02-04T10:29:31+00:00

Sergey Kandaurov
pluknet@nginx.com

2022-02-04T10:29:31+00:00

223e566d479d0d07d44a93ded17228c71e804805












Stable branch.
2022-05-23T23:55:29+00:00

Maxim Dounin
mdounin@mdounin.ru

2022-05-23T23:55:29+00:00

81ef8fb34093b67552d15e0a8d7da5df2b44886b












release-1.21.6 tag
2022-01-25T15:03:52+00:00

Maxim Dounin
mdounin@mdounin.ru

2022-01-25T15:03:52+00:00

60ca13f98846bb1140359972d42276db88f4a409












nginx-1.21.6-RELEASE
2022-01-25T15:03:51+00:00

Maxim Dounin
mdounin@mdounin.ru

2022-01-25T15:03:51+00:00

97a111c0c0a40ecaa7771ecec66b8ed37b0350d5












SSL: always renewing tickets with TLSv1.3 (ticket #1892).
2022-01-24T14:18:50+00:00

Maxim Dounin
mdounin@mdounin.ru

2022-01-24T14:18:50+00:00

0a407d7df825689a47ecdea4ae4cd6b2a894cb53

Chrome only uses TLS session tickets once with TLS 1.3, likely following
RFC 8446 Appendix C.4 recommendation.  With OpenSSL, this works fine with
built-in session tickets, since these are explicitly renewed in case of
TLS 1.3 on each session reuse, but results in only two connections being
reused after an initial handshake when using ssl_session_ticket_key.

Fix is to always renew TLS session tickets in case of TLS 1.3 when using
ssl_session_ticket_key, similarly to how it is done by OpenSSL internally.





Chrome only uses TLS session tickets once with TLS 1.3, likely following
RFC 8446 Appendix C.4 recommendation.  With OpenSSL, this works fine with
built-in session tickets, since these are explicitly renewed in case of
TLS 1.3 on each session reuse, but results in only two connections being
reused after an initial handshake when using ssl_session_ticket_key.

Fix is to always renew TLS session tickets in case of TLS 1.3 when using
ssl_session_ticket_key, similarly to how it is done by OpenSSL internally.







Contrib: vim syntax adjusted to save cpoptions (ticket #2276).
2022-01-21T21:28:51+00:00

Maxim Dounin
mdounin@mdounin.ru

2022-01-21T21:28:51+00:00

7ba3063952f53b710d092f00881ccc2996c3b5fc

Line continuation as used in the syntax file might be broken if "compatible"
is set or "C" is added to cpoptions.  Fix is to set the "cpoptions" option
to vim default value at script start and restore it later, see
":help use-cpo-save".





Line continuation as used in the syntax file might be broken if "compatible"
is set or "C" is added to cpoptions.  Fix is to set the "cpoptions" option
to vim default value at script start and restore it later, see
":help use-cpo-save".







Core: simplify reader lock release.
2022-01-20T01:37:34+00:00

Pavel Pautov
p.pautov@f5.com

2022-01-20T01:37:34+00:00

950390108cbb8431845635176c36466653b05487












SSL: free pkey on SSL_CTX_set0_tmp_dh_pkey() failure.
2022-01-17T14:05:12+00:00

Sergey Kandaurov
pluknet@nginx.com

2022-01-17T14:05:12+00:00

429150c1fa78317bdb19de380ce709651dbc042c

The behaviour was changed in OpenSSL 3.0.1:
https://git.openssl.org/?p=openssl.git;a=commitdiff;h=bf17b7b





The behaviour was changed in OpenSSL 3.0.1:
https://git.openssl.org/?p=openssl.git;a=commitdiff;h=bf17b7b