Thibault Charbonnier
cc79822109
tests: sanity.t: renamed to t/000-sanity.t and added '.' in lib path.
5 years ago
Thibault Charbonnier
4995101388
tests: sanity.t: fixed (again) test cases failing due to the last few commits.
...
This failure was first fixed in
1f3cf84a8a
, but mistakenly reverted in
395bed2b14
, causing Travis-CI to fail on
this test again.
5 years ago
Yichun Zhang (agentzh)
3fd0e186bf
tests: fixed tests for updated components.
5 years ago
Yichun Zhang (agentzh)
19ca6c4e2d
upgraded LuaJIT to 2.1-20190912.
5 years ago
Yichun Zhang (agentzh)
395bed2b14
bugfix: windows: make clean: we did not clear many windows-specific files.
5 years ago
Yichun Zhang (agentzh)
a717ebd523
build-win32: more love.
5 years ago
Yichun Zhang (agentzh)
3b1b2374c0
windows: upgraded pcre to 8.43 and openssl to 1.1.0k.
5 years ago
Yichun Zhang (agentzh)
f5d359f8f0
dist-check: set LC_ALL=C env.
5 years ago
James Le Cuirot
45a454beec
tweak: removed unused 'misc/unwind-generic.h' header file.
5 years ago
Thibault Charbonnier
59e4ef5c23
bugfix: applied the patch for security advisory to NGINX cores < 1.14.1 and < 1.15.6 (CVE-2019-9511 CVE-2019-9513 CVE-2019-9516).
5 years ago
Thibault Charbonnier
80ba3892c6
bugfix: applied the patch for security advisory to NGINX cores < 1.14.1 and < 1.15.6 (CVE-2018-16843 CVE-2018-16844).
5 years ago
Datong Sun
d5f48a8b75
bugfix: applied the patch for security advisory to NGINX cores < 1.14.1 and < 1.15.6 (CVE-2018-16845).
...
Signed-off-by: Thibault Charbonnier <thibaultcha@me.com>
5 years ago
spacewander
cf7516fcbc
optimize: added an NGINX core patch to ensure unused listening fds are closed when 'reuseport' is used.
...
When `reuseport` is enabled in the `listen` directive, Nginx will create
a listening fd for each worker process in the master process.
These fds will be inherited by the worker processes, but most of them
are unused. For example, considering we have 32 listening ip:port
configurations and 64 worker processes, each worker process will inherit
2048 (32 * 64) listening fds, but only 32 fds are used. By closing the
unused fds, this change could save up to 2016 (32 * 63) fds in a worker
process.
It doesn't affect the listening socket, since there is only one used fd
which associates to the socket with or without this change.
Co-authored-by: Thibault Charbonnier <thibaultcha@me.com>
5 years ago
Thibault Charbonnier
46237a9c22
travis: added OpenSSL 1.1.1c to the tests matrix.
5 years ago
spacewander
34918a30c3
bugfix: support yielding in 'certificate_by_lua_*' when 'ssl_early_data' is on.
...
Signed-off-by: Thibault Charbonnier <thibaultcha@me.com>
5 years ago
spacewander
2e480157a3
feature: supported OpenSSL 1.1.1 by upgrading the OpenSSL patch.
...
Previously, we used the OpenSSL 1.1.1 ClientHello callback to do ssl
session fetching non-blockingly. However, this way cannot handle an edge
case: the ssl session resumption via session ticket might fail, and the
client fallbacks to session ID resumption. The ClientHello callback is
run too early to know if the client will fallback to use session ID
resumption.
Therefore, we have to take back the OpenSSL sess_set_get_cb_yield patch
and upgrade it to adapt OpenSSL 1.1.1.
Thanks Yongjian Xu and crasyangel for their help.
See 08e9e50
.
Signed-off-by: Thibault Charbonnier <thibaultcha@me.com>
5 years ago
Thibault Charbonnier
a51fa56086
change: renamed the 'ssl_pending_session' patch to 'ssl_sess_cb_yield' for NGINX cores 1.17.1 and above.
...
Its naming is now aligned with the `ssl_cert_cb_yield` patch.
See 08e9e50
for details on why this renaming was reverted for the 1.15.8
version of this patch.
5 years ago
Thibault Charbonnier
cef09e553f
upgraded the nginx core to 1.17.1.
5 years ago
Thibault Charbonnier
08e9e50782
Revert "feature: updated the NGINX patches for async SSL session fetching to support OpenSSL 1.1.1."
...
This reverts commit 9e834398de
.
Support for OpenSSL 1.1.1 will come with the 1.17.1 series of NGINX
patches. Since no other 1.15.8.* releases are planned, we are reverting
the state of the 1.15.8 patches to that of the 1.15.8.1 release.
5 years ago
Thibault Charbonnier
b04577cd47
feature: Makefile: added a 'clean' target to remove build artifacts.
5 years ago
Thibault Charbonnier
836c8792d2
tests: sanity.t: fixed test cases failing due to the last few commits.
5 years ago
Yichun Zhang (agentzh)
3b6d9a5318
upgraded LuaJIT to 2.1-20190626.
5 years ago
Yichun Zhang (agentzh)
e6188369cd
upgraded lua-resty-string to 0.12rc1.
6 years ago
Yichun Zhang (agentzh)
fdf142aabe
upgraded resty-cli to 0.25rc2.
6 years ago
spacewander
9e834398de
feature: updated the NGINX patches for async SSL session fetching to support OpenSSL 1.1.1.
...
The patch was also renamed from `ssl_pending_session.patch` to
`ssl_sess_cb_yield.patch` (similarly to the existing
`ssl_cert_cb_yield.patch` one).
Signed-off-by: Thibault Charbonnier <thibaultcha@me.com>
6 years ago
Thibault Charbonnier
547fdd5fb2
bugfix: Config.pm: fixed an issue when generating t/sanity.t_.
6 years ago
Thibault Charbonnier
1f3cf84a8a
tests: sanity.t: fixed test cases failing due to the last few commits and renamed another test case.
6 years ago
Yichun Zhang (agentzh)
bbef48d25b
upgraded LuaJIT to 2.1-20190530.
6 years ago
Yichun Zhang (agentzh)
45997fc5fe
upgraded resty-cli to 0.25rc1.
6 years ago
Yichun Zhang (agentzh)
cc9787a290
feature: ./configure: added new option --with-luajit-ldflags=OPTS for specifying custom luajit linker flags.
6 years ago
Yichun Zhang (agentzh)
2b40d7b8ee
bumped version to 1.15.8.1.
6 years ago
Yichun Zhang (agentzh)
bf2e5697e1
bugfix: win32/win64: the error log buffer size was merely 2048 bytes (now updated to 4096 bytes).
...
applied the win32_max_err_str patch for the nginx core.
6 years ago
Yichun Zhang (agentzh)
540567e42c
bumped version to 1.15.8.1 RC2.
6 years ago
Thibault Charbonnier
a32ca0dbbe
upgraded LuaJIT to 2.1-20190507.
6 years ago
Thibault Charbonnier
62d31e53de
bumped ngx_http_lua to 0.10.15, ngx_stream_lua to 0.0.7, and lua-resty-core to 0.1.17.
6 years ago
Thibault Charbonnier
023b9d4f88
tests: updated sanity test suite to reflect recent changes in bumped components.
6 years ago
Thibault Charbonnier
8954793847
bumped resty-cli to v0.24rc1.
6 years ago
Thibault Charbonnier
0b5ebedd47
bumped ngx_http_lua to 0.10.15rc1, ngx_stream_lua to 0.0.7rc1, and lua-resty-core to 0.1.17rc1.
6 years ago
Thibault Charbonnier
7e897a8b2b
upgraded LuaJIT to 2.1-20190329.
6 years ago
Yichun Zhang (agentzh)
99d72856a7
upgraded LuaJIT to 2.1-20190302.
6 years ago
Yichun Zhang (agentzh)
ed32897702
bugfix: added an openssl patch to fix the parallel build regression in openssl 1.1.0j.
6 years ago
Yichun Zhang (agentzh)
083403fb43
win32: upgraded openssl to 1.1.0j.
6 years ago
Yichun Zhang (agentzh)
eff3e0d7db
bumped version to 1.15.8.1 RC1.
6 years ago
Thibault Charbonnier
88e214aad2
bumped LuaJIT to 2.1-20190228.
6 years ago
Thibault Charbonnier
ec8f1b0753
bumped lua-resty-upstream-healthcheck to 0.06.
6 years ago
Thibault Charbonnier
191ca1fdec
bumped resty-cli to 0.23.
6 years ago
Yichun Zhang (agentzh)
e2ca65128f
tests: updated tests to reflect recent changes.
6 years ago
Yichun Zhang (agentzh)
76cd3954e3
upgraded resty-cli to 0.23rc2.
6 years ago
Thibault Charbonnier
f238a7542a
bumped ngx_lua, ngx_stream_lua, and lua-resty-core to formal releases.
6 years ago
Thibault Charbonnier
95cfc25189
bumped resty-cli, lua-cjson, lua-resty-redis, lua-resty-limit-traffic, lua-resty-websocket, lua-resty-lock, and lua-resty-lrucache to formal release tags.
6 years ago