unit.git, branch 1.24.0 Universal Web Application Server Generated Dockerfiles for Unit 1.24.0. 2021-05-27T13:07:15+00:00 Valentin Bartenev vbart@nginx.com 2021-05-27T13:07:15+00:00 25d8e102b0b3ca6cfa15b752397566fdbe2f7eaa 






Added version 1.24.0 CHANGES.
2021-05-27T13:06:01+00:00

Valentin Bartenev
vbart@nginx.com

2021-05-27T13:06:01+00:00

340955a75f333a0ccfe8b1d212640a2e0ac3b3e3












Reordered changes for 1.24.0 by significance (subjective).
2021-05-27T13:05:42+00:00

Valentin Bartenev
vbart@nginx.com

2021-05-27T13:05:42+00:00

ff15f258390b36d4cccded8576b49e281722495c












Grammar fixes and improvements in changes.xml.
2021-05-27T12:53:58+00:00

Artem Konev
artem.konev@nginx.com

2021-05-27T12:53:58+00:00

3b0fa832a39955c8a642188b29ab7456129a1b41












Tests: added tests for TLS "conf_commands" option.
2021-05-27T12:30:51+00:00

Andrei Zeliankou
zelenkov@nginx.com

2021-05-27T12:30:51+00:00

f91fe4ce9e9c819f1e86ab1018223e38a34fb07d












Packages: added Ubuntu 21.04 "hirsute" support.
2021-05-27T10:12:52+00:00

Andrei Belov
defan@nginx.com

2021-05-27T10:12:52+00:00

e00ad18d8082f9db5c49c220d796c78beab53cae












Tests: added TLS test without close notify.
2021-05-26T20:47:12+00:00

Andrei Zeliankou
zelenkov@nginx.com

2021-05-26T20:47:12+00:00

753ce145f7cfbfffab34d18ff74236f09e471f18












Enabling SSL_CTX configuration by using SSL_CONF_cmd().
2021-05-26T18:19:47+00:00

Andrey Suvorov
a.suvorov@f5.com

2021-05-26T18:19:47+00:00

3f7ccf142ff4d1a11b807a344bcb1e3cb6c3284b

To perform various configuration operations on SSL_CTX, OpenSSL provides
SSL_CONF_cmd().  Specifically, to configure ciphers for a listener,
"CipherString" and "Ciphersuites" file commands are used:
https://www.openssl.org/docs/man1.1.1/man3/SSL_CONF_cmd.html


This feature can be configured in the "tls/conf_commands" section.





To perform various configuration operations on SSL_CTX, OpenSSL provides
SSL_CONF_cmd().  Specifically, to configure ciphers for a listener,
"CipherString" and "Ciphersuites" file commands are used:
https://www.openssl.org/docs/man1.1.1/man3/SSL_CONF_cmd.html


This feature can be configured in the "tls/conf_commands" section.







Fixing crash during TLS connection shutdown.
2021-05-26T18:11:58+00:00

Andrey Suvorov
a.suvorov@f5.com

2021-05-26T18:11:58+00:00

3efffddd95e564fe10f59e1de45afc2b551a5cba

A crash was caused by an incorrect timer handler nxt_h1p_idle_timeout() if
SSL_shutdown() returned SSL_ERROR_WANT_READ/SSL_ERROR_WANT_WRITE.

The flag SSL_RECEIVED_SHUTDOWN is used to avoid getting SSL_ERROR_WANT_READ, so
the server won't wait for a close notification from a client.

For SSL_ERROR_WANT_WRITE, a correct timer handler is set up.





A crash was caused by an incorrect timer handler nxt_h1p_idle_timeout() if
SSL_shutdown() returned SSL_ERROR_WANT_READ/SSL_ERROR_WANT_WRITE.

The flag SSL_RECEIVED_SHUTDOWN is used to avoid getting SSL_ERROR_WANT_READ, so
the server won't wait for a close notification from a client.

For SSL_ERROR_WANT_WRITE, a correct timer handler is set up.







Static: handled unknown MIME types when MIME-filtering active.
2021-05-26T16:48:11+00:00

Oisin Canty
o.canty@f5.com

2021-05-26T16:48:11+00:00

d67a0c871157454d591fa1d2a8b2d831b32e4040