nginx.git/src/http, branch release-1.7.0

Upstream: for ssl name, non-aligned memory allocation is enough.

2014-04-22T14:56:49+00:00

SPDY: avoid sending RST_STREAM on WINDOW_UPDATE with unknown SID.

2014-04-21T15:21:17+00:00

There's a race condition between closing a stream by one endpoint
and sending a WINDOW_UPDATE frame by another.  So it would be better
to just skip such frames for unknown streams, like is already done
for the DATA frames.

SPDY: Stream-ID restrictions according to specification.

2014-04-21T14:59:53+00:00

Upstream: uwsgi_ssl_name, uwsgi_ssl_verify, and so on.

2014-04-18T16:13:32+00:00

Just a merge of proxy_ssl_name, proxy_ssl_verify commits into uwsgi module,
code is identical.

Upstream: proxy_ssl_verify and friends.

2014-04-18T16:13:30+00:00

Upstream: proxy_ssl_name and proxy_ssl_server_name directives.

2014-04-18T16:13:28+00:00

These directives allow to switch on Server Name Indication (SNI) while
connecting to upstream servers.

By default, proxy_ssl_server_name is currently off (that is, no SNI) and
proxy_ssl_name is set to a host used in the proxy_pass directive.

Upstream: plugged potential memory leak on reload.

2014-04-18T16:13:24+00:00

The SSL_CTX_set_cipher_list() may fail if there are no valid ciphers
specified in proxy_ssl_ciphers / uwsgi_ssl_ciphers, resulting in
SSL context leak.

In theory, ngx_pool_cleanup_add() may fail too, but this case is
intentionally left out for now as it's almost impossible and proper fix
will require changes to http ssl and mail ssl code as well.

SSL: $ssl_server_name variable.

2014-04-18T16:13:21+00:00

Access log: the "if" parameter of the "access_log" directive.

2014-04-15T17:32:56+00:00

The parameter value specifies a condition under which the request is logged.

SPDY: fixed typo in log message.

2014-04-16T07:40:42+00:00