SHA256
1
0
forked from pool/nghttp2
nghttp2/nghttp2.changes
2016-01-29 09:07:25 +00:00

581 lines
24 KiB
Plaintext
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

-------------------------------------------------------------------
Thu Jan 28 14:43:56 UTC 2016 - rguenther@suse.com
- Add nghttp2-c++14.patch to properly guard make_unique templates.
[bsc#964140]
-------------------------------------------------------------------
Tue Jan 26 20:02:00 UTC 2016 - mpluskal@suse.com
- Update to 1.7.0
* Reset (RST_STREAM) stream if flow control window gets overflow
* Validate :authroity, host, and :scheme value more strictly
* Check request/response submission error based side of session
* Strict outgoing idle stream detection
* Return error from nghttp2_submit_{headers,request} when self
dependency is made
* Add -ldl to APPLDFLAGS for static openssl linking
* asio: Stop acceptor on server::http2::stop
* asio: Rename http2::get_io_services() as http2::io_services()
* h2load: Support UNIX domain socket
* h2load: Improve readability of traffic numbers
* h2load: Remove "auto" for -m option
* h2load: Show progress in rate mode
* h2load: Perform sampling for request and connection timings to
reduce memory consumption
* nghttpd: Add --no-content-length option to omit content-length
in response
* nghttpx: Interleave pushed streams with the associated stream
if pushed streams are javascript and CSS resources
* nghttpx: The initial value of request/response buffer is
increased to 128K
* nghttpx: Fix bug that --listener-disable-timeout option is not
used
* nghttpx: Don't emit :authority if request does not contain
authority information
* nghttpx: Add clarification of quotes in configuration file
* nghttpx: Don't allow certain characters in host and :scheme
header field
* nghttpx: Add RFC 7239 Forwarded header field support
* nghttpx: Fix crash when running on IPv6 only (Patch from Vernon
Tang)
* nghttpx: Take into account of trailers when applying
max_header_fields
* nghttpx: Don't apply max_header_fields and header_field_buffer
limit to response
* nghttpx: Strict validation for header fields given in
configuration
* nghttpx: header value should not be lower-cased (Patch from
ayanamist)
-------------------------------------------------------------------
Thu Jan 21 08:28:51 UTC 2016 - pgajdos@suse.com
- fixed typo in libnghttp2_asio1 [bsc#962914]
-------------------------------------------------------------------
Wed Dec 23 17:48:47 UTC 2015 - mpluskal@suse.com
- Update to 1.6.0
* Fix heap-use-after-free bug when handling idle streams
* Strict error handling for frames which are not allowed after
closed (remote)
* Set max number of outgoing concurrent streams to 100 by
default
* Keep incoming streams only at server side
* Create stream object for pushed resource during
nghttp2_submit_push_promise()
* Add nghttp2_session_create_idle_stream() API
* Handle response in nghttp2_on_begin_frame_callback
* Add --lib-only configure option
* Compile with OpenSSL 1.1.0-pre1
* Fix build when OpenSSL 1.0.2 is not available (patch from
Sunpoet Po-Chuan Hsieh)
* asio: Add connect and read timeout to client API
* asio: Add TLS handshake and read timeout to server API
* asio: Added access to a requests remote endpoint (patch from
Andreas Pohl)
* asio: libnghttp2_asio: Added io_service accessors (patch from
Andreas Pohl)
* h2load: Add req/s min, max, mean and sd for clients
* h2load: Fix broken connection times
-------------------------------------------------------------------
Tue Dec 1 14:13:15 UTC 2015 - mpluskal@suse.com
- Update to 1.5.0
* Fix bug that nghttp2_session_find_stream(session, 0) returned
NULL
* Add nghttp2_session_change_stream_priority() to change stream
priority without sending PRIORITY frame
* Add nghttp2_session_check_server_session() API
* Consider to use CANCEL error code when closing streams with
GOAWAY
* Don't send push response if GOAWAY has been received
* Use error code CANCEL to reset pushed reserved stream from
remote
* Add nghttp2_session_upgrade2(), deprecate
nghttp2_session_upgrade()
* Workaround HTTP upgrade with HEAD request in
nghttp2_session_upgrade()
* Introduce NGHTTP2_NV_FLAG_NO_COPY_NAME and
NGHTTP2_NV_FLAG_NO_COPY_VALUE
* Add nghttp2_session_check_request_allowed() API function
* Switch to clang-format-3.6
* Update mruby to 1.2.0
* tests: fix broken linkage with --disable-static (Patch from
Kamil Dudka)
* python: Send RST_STREAM if remote side is not closed and
response finished
* asio: client: call on_error when connection is dropped
* asio: ALPN support
* h2load: Add --h1 option to force http/1.1 for both http and
https URI
* h2load: Fix crash when dealing with "connection: close" form
HTTP/1.1 server
* h2load: h2load goes into infinite loop when timing script file
starts with 0.0 in first line (Patch from Kit Chan)
* h2load: Override user-agent with -H option
* h2load: Print "space savings" to measure header compression
efficiency
* h2load: Stream error should be counted toward errored
* h2load: Show application protocol with OpenSSL < 1.0.2
* nghttpx: Don't send RST_STREAM to h2 backend if backend is
disconnected state
* nghttpx: Support server push from HTTP/2 backend
* nghttpx: Fix bug that causes connection failure with backend
proxy URI
* nghttpx: Use --backend-tls-sni-field to verify certificate
hostname
* nghttpx: Log :authority as $http_host if available
* nghttpd: Fix crash with CONNECT request
* nghttpd: Defered eviction of cached fd using timer
* nghttpd: Read /etc/mime.types to set content-type header field
* nghttp: Record request method to output it in har correctly
* nghttp: Use method given in -H with ":method" in HTTP Upgrade
- Drop nghttp2-1.4.0-fix-tests.patch (now in upstream)
-------------------------------------------------------------------
Mon Nov 16 17:21:15 UTC 2015 - mpluskal@suse.com
- Enable spdy and more example applications
-------------------------------------------------------------------
Sat Oct 31 10:21:56 UTC 2015 - sor.alexei@meowr.ru
- Update to 1.4.0:
* lib: Don't always expect dynamic table size update.
* lib: Shrink to the minimum table size seen in local SETTINGS.
* lib: Add new error code NGHTTP2_ERR_PAUSE to send_data_callback.
* lib: Avoid excessive WINDOW_UPDATE queuing.
* lib: Return fatal error if flooding is detected to close
session immediately.
* lib: Return type of nghttp2_submit_trailer is int.
* lib: Don't send WINDOW_UPDATE with 0 increment.
* lib: Fix bug that headers in CONTINUATION were ignored after
HEADERS with padding.
* package: Use -fvisibility=hidden for internal functions.
* package: Show more information in configure summary.
* package: Add PIDFile directive to systemd service.
* package: Fix daemon upgrade when running under systemd.
* app: Compile with BoringSSL.
* nghttp: Allow multiple -c option occurrence, and take min and
last value.
* nghttpd: Fix leak when server failed to listen to given port.
* nghttpx: Add TLS dynamic record size behaviour command line
options.
* nghttpx: Reduce default timeouts for read sockets to 1m.
* nghttpx: Fix bug that PUT is replaced with POST.
* nghttpx: Change mruby script handling.
* nghttpx: Added support for RFC 7413 (TCP Fast Open) on nghttpx
proxy listening connections.
* nghttpx: Add neverbleed support.
* h2load: Don't DOS our server!
* h2load: Use duration syntax for timeouts.
* h2load: Support subsecond rate period.
* h2load: Simplify rate mode.
* h2load: Add option for user-definable rate period.
* h2load: Reuse SSL/TLS session.
* h2load: Reconnect server on connection: close.
* h2load: Don't exit in the case of no ALPN protocol overlap.
* integration: Update go's http2 package URI.
- Add missing baselibs.conf.
- Add nghttp2-1.4.0-fix-tests.patch from commit 4825009.
- Small spec cleanup.
-------------------------------------------------------------------
Sun Sep 27 12:38:17 UTC 2015 - mpluskal@suse.com
- Update to 1.3.4
* Make traditional init script fail if new config file is broken
(Patch from Janusz Dziemidowicz)
* nghttpx-logrotate: Don't use killall since we have multiple
processes
* nghttpx: Fix improper signal handling
- Changes for 1.3.3
* Fix bug in padding handling of DATA frame
* Use hash table for dynamic table lookup
* More warning flags for --enable-werror
* Update mruby
* h2load: HTTP/1.1 support (Patch from Lucas Pardue)
* nghttpx: Do not try to set TCP_NODELAY when frontend is an
UNIX socket (Patch from Janusz Dziemidowicz)
* nghttpx: Chown UNIX domain socket to user specified as --user
* nghttpx: Split monolithic one process into control and worker
processes
* nghttpx: Handle SSL/TLS data following PROXY protocol line
- Changes for 1.3.2
* Check header block limit after new stream is opened
* nghttp: Show error if HEADERS frame cannot be sent for
whatever reason
* nghttpx: Fix assertion failure on TLS handshake
* nghttpx: Add x-http2-push header field for pushed resource
* nghttpx: Fix compile error with --disable-threads
-------------------------------------------------------------------
Mon Sep 14 13:33:16 UTC 2015 - mpluskal@suse.com
- Update to 1.3.1
* Avoid usage of typeof and replace __builtin_offsetof with
offsetof
* Honor stream->weight even if stream->last_writelen is 0
* Compile third-party libraries if hpack-tools is enabled
* nghttpx-init: Start nghttpx with --daemon
* Bundle sphinxcontrib.rubydomain https://bitbucket.org/birkenfeld/sphinx-contrib/src/default/rubydomain/
* Bundle mruby
* h2load: Record TTFB on first byte of response body, rather
than first socket read
* h2load: Improve checking for timing script input, prevent
false positive in certain situations
* nghttpx: Implement PROXY protocol version 1
(--accept-proxy-protocol option)
* nghttpx: Allow link header server push for HTTP/2 backend
as well
* nghttpx: Don't initiate push if client disabled push
* nghttpx: Allow absolute URI in Link header field for push
* nghttpx: Fix crash with multi workers and QUIT signal
* nghttpx: Add mruby support which is disabled by default
(use --with-mruby configure option to enable it)
* nghttpx: Drop connection before TLS finish if h2 requirement
is not fulfilled
- Fix typo in previous changelog entry
-------------------------------------------------------------------
Tue Sep 1 06:59:43 UTC 2015 - mpluskal@suse.com
- Update to 1.3.1
* Limit the number of incoming reserved (remote) streams
* Add stream public API
* Rewrite priority tree handling
* Fix parallel make distcheck
* Define it and itprep recursive target if
AM_EXTRA_RECURSIVE_TARGETS is defined
* fetch-ocsp-response: Handle spurious openssl exist status 0
* nghttpx: Use nghttp2::ssl::DEFAULT_CIPHER_LIST for backend TLS
connection
* nghttpx: Don't allow blacked listed cipher suites for HTTP/2
connection
* nghttpx: better handle /dev/stderr and /dev/stdout (Patch from
Tomasz Buchert)
* nghttpd: GOAWAY if SSL/TLS requirements for HTTP/2 are not met
* nghttpd: Return date header field for 304
* nghttpd: Support HEAD request
* h2load: Add Timing-script and base URI support (Patch from
Lucas Pardue)
* h2load: Add timeout options (Patch from Nora)
- Fix typo in changelog
-------------------------------------------------------------------
Mon Aug 17 10:51:27 UTC 2015 - mpluskal@suse.com
- Update to 1.2.1
* doc: Reword the HPACK tutorial (Patch from Tom Harwood)
* nghttpx: Fix stability issues
* h2load: Fix crash if -r > -n
-------------------------------------------------------------------
Mon Aug 10 14:10:20 UTC 2015 - mpluskal@suse.com
- Update to 1.2.0
* Fix crash if response or data is submitted to closing stream
* Header table size UINT32_MAX must be accepted
* Use PROTOCOL_ERROR against DATA sent to idle stream
* Allow multiple in-flight SETTINGS
* Strictly check occurrence of dynamic table size update
* Fix configure warning that 'missing' is missing or too old
* Fix rm: cannot remove *.rst: No such file or directory when
"make clean" (Patch from Alexis La Goutte)
* doc: Reword some of the server and client tutorial (Patch
from Tom Harwood)
* src: Remove monotonic_clock replacement macro for gcc-4.6
* nghttpx: Add TLS ticket key sharing among nghttpx instances
using memcached
* nghttpx: Add shared session cache using memcached
* nghttpx: Set SSL/TLS session timeout to 12 hours
* nghttpx: Enable session resumption on HTTP/2 backend
* nghttpx: Don't rewrite host header field by default
* nghttpx: Generate new ticket key every 1hr and its life time
is now 12hrs
* nghttpx: Don't reuse backend connection if it is not clean
* nghttpx: Add AES-256-CBC encryption for TLS session ticket
* nghttpd: Fix the bug that 304 response has non-empty body
* h2load: Add -r and -C options to h2load (Patch from
Nora Shoemaker)
- Changes for 1.1.2
* Fix linker error with libnghttp2_asio
* Allow custom installation location for Python bindings
- Drop no longer needed missing_nghttp2_timegm.patch
-------------------------------------------------------------------
Thu Jul 16 06:58:40 UTC 2015 - mpluskal@suse.com
- Update to 1.1.1
* nghttpx: Fix various stability issues and memory leak bug
- Changes for 1.1.0
* Fix DATA is not consumed if nghttp2_http_on_data_chunk failed
* nghttp2_submit_response and nghttp2_submit_headers may return
* NGHTTP2_ERR_DATA_EXIST
* msvc build fixes and enchantments (Patch from Gabi Davar)
* Compile with IRIX gcc-4.7 (Patch from Klaus Ziegler)
* nghttp: Add --max-concurrent-streams option
* nghttp: Add comment on HAR on pushed objects (Patch from
acesso)
* nghttpx: Add --include option to read additional configuration
from given file
* nghttpx: Add backend routing based on request host and path by
extending -b option
* nghttpx: Allow log variable to be enclosed by curly braces for
disambiguation
* nghttpx: Add log variables related to SSL/TLS connection
* h2load: Add --ciphers option
- Add patches
* missing_nghttp2_timegm.patch to fix building of asio library
* nghttp2-remove-python-build.patch to fix python bindings
installation when autotools are used
-------------------------------------------------------------------
Tue Jun 30 11:54:06 UTC 2015 - mpluskal@suse.com
- Update to 1.0.5
* Add STREAM_DEP_DEBUG macro switch to enable runtime validation
of depedency tree
* Fix another bug in priority handling; sibling's item is not
queued when ancestor's item is detached
* nghttpx: Fix crash with --http2-bridge and both frontend and
backend TLS
-------------------------------------------------------------------
Wed Jun 24 10:52:12 UTC 2015 - mpluskal@suse.com
- Update to 1.0.4
* Fix assertion failure in stream_update_dep_on_detach_item
(GH-264)
- Changes for 1.0.3
* Fix bug that idle self-depending PRIORITY is not handled
gracefully
* Optimize dependency based priority code to Firefox style tree
* enable third-party for asio_lib too (Patch from Mike
Frysinger)
* fetch-ocsp-response: Support LibreSSL, and include port in
ocsp_host
* src: Support compile with LibreSSL
* nghttpx: Fix bug that x-forwarded-proto header field does not
reflect frontend scheme on HTTP/2 backend
* nghttpx: Validate :path on SPDY frontend
-------------------------------------------------------------------
Tue Jun 16 08:27:32 UTC 2015 - mpluskal@suse.com
- Update to 1.0.2
* Fix bug that data are not consumed for connection in race
condition (GH-253)
* Define NGHTTP2_EXTERN to __declspec(dllimport) when using
nghttp2 for Windows build
* Translate fetch-ocsp-response into Python
* libevent-client: Fix bug that path is broken if URI does not
contain path part
* python: Call on_close callback when connection is lost for
server session
* python: Expose client certificate, if available (Patch from
Fabian Wiesel)
* python: Catch and log failure to set TCP_NODELAY (Patch from
Fabian Wiesel)
* nghttpx: Add --add-request-header option
* nghttpx: Make WebSocket upgrade work
* nghttpx: Fix bug that END_STREAM is not set in backend for
POST with Upgrade
* nghttpx: Don't send "Expect" header field twice
-------------------------------------------------------------------
Mon May 25 15:13:45 UTC 2015 - mpluskal@suse.com
- Update to 1.0.1
* Include stdint.h instead of inttypes.h when compiled with MSVC
< 2013
* Fix invalid memory free on out-of-memory handling
* integration: Use our own copy of golang spdy package
* android: Don't link zlib bundled with android NDK
* Dockerfile.android: Update NDK ver, and ubuntu; build and link
zlib
* src, examples: Fix up OpenSSL initialization
* nghttpx: Allow HTTP Upgrade from POST request if response
header has not been sent to the client
* nghttpx: Fix bug that PUSH_PROMISE is sent after associated
response HEADERS
* nghttpd: Close connection after settings timeout and GOAWAY
was sent
* h2load: Fix bug that NPN fails if ALPN is enabled
-------------------------------------------------------------------
Thu May 21 06:50:36 UTC 2015 - mpluskal@suse.com
- Update to 1.0.0
* v1.0.0 introduced backward incompatible changes from 0.7
series. Read https://nghttp2.org/documentation/package_README.html#migration-from-v0-7-15-or-earlier
to migrate from older version to this latest version.
- Changes for 0.7.15
* Hopefully, this is the last release for 0.7.x series.
Development continues in 1.x series.
* Access violation in buffers (GH-232) (Patch from Etienne Cimon)
* Retry finding jemalloc lib by je_malloc_stats_print (GH-233)
* inflatehd: Fix crash if 'wire' value is not string (GH-235)
* nghttpx: Revert 585af93 to fix crash with TLS (GH-234)
* nghttpd: Add --echo-upload option to send back request body
-------------------------------------------------------------------
Wed May 13 13:07:14 UTC 2015 - mpluskal@suse.com
- Update to 0.7.14
* Fix global-buffer-overflow in HPACK code
* Fix doc for nghttp2_select_next_protocol
* Fix bug that promised stream was not reset on decompression
error
* Add systemd and upstart configuration file for nghttpx
(Patch from Zhuoyun Wei)
* Improve nghttpx logrotate configuration file (Patch from
Zhuoyun Wei)
* Update sphinx_rtd_theme
* h2load: Update h2load to give connect time and ttfb stats
(Patch from ericcarlschwartz)
* nghttpd: Add -m, --max-concurrent-streams option
* nghttpx: Log absolute URI for HTTP/2 or client proxy request
* nghttpx: Add --header-field-buffer and --max-header-fields
options
* nghttp: Fix assertion error if very large value is given to -t
-------------------------------------------------------------------
Fri May 1 13:47:12 UTC 2015 - mpluskal@suse.com
- Update to 0.7.13
* Fix bug that promised stream was not reset by returning
NGHTTP2_ERR_TEMPORAL_CALLBACK_FAILURE from
nghttp2_on_header_callback. Instead, associated stream was reset.
* Allow NGHTTP2_ERR_TEMPORAL_CALLBACK_FAILURE from
nghttp2_on_begin_headers_callback
* h2load: Effectively disable flow control by setting large
window size
* asio: Graceful shutdown and joinable server (Patch from
Xiaoguang Sun)
-------------------------------------------------------------------
Mon Apr 20 08:40:33 UTC 2015 - mpluskal@suse.com
- Update to 0.7.12
* Fix bug that nghttp2_session_set_next_stream_id accepts invalid
stream_id
* HPACK: Rewrite static header table handling
* HPACK: Never index authorization and small cookie header field
* Don't install libnghttp2_asio headers if they are disabled
* doc: Specify program directive so that hyperlink to option is
correctly pointed to the intended location
* asio: client: Call error_cb on error occurred in do_read and
do_write (Fixes GH-207)
* nghttp: Add --no-push option to disable server push
* nghttp: Show stream ID in statistics output
* nghttp: Remove --dep-idle option
* nghttp: Use same priority anchor nodes as Firefox does
* nghttpx: Don't push resource if link header has non empty
loadpolicy
* nghttpx: Add logging for somewhat important events (logs,
tickets, and ocsp)
* nghttpx: Set Downstream to stream user data on HTTP Upgrade
to h2
-------------------------------------------------------------------
Sun Apr 12 17:38:36 UTC 2015 - mpluskal@suse.com
- Update to 0.7.11
* nghttpx: Fix waitpid race condition in ocsp response update
* nghttp: Consider user-provided :authority header field for SNI
as well as host header field
- Changes for 0.7.10
* Make sure that nghttp2 license is MIT license
* Add nghttp2_session_consume_{connection,stream} to consume
bytes independent
* Add nghttp2_send_data_callback to send DATA payload without
copying "static inline" fix for build with VS2013 (Patch from
Remo E)
* Update lib/Makefile.msvc (Patch from Remo E)
* Remove dependency on libws2_32 on Windows build
* Define NGHTTP2_EXTERN macro to export function for Windows
build
* doc: Generate API doc per function
* python: Add async body generation support
* python: Fix pseudo-header field ordering bug
* nghttpx: Redirect stderr to errorlog file
* nghttpx: Fix bug that data buffered in SSL object are not
read
* nghttpx: Remove --tls-ctx-per-worker option
* nghttpx: Add OCSP stapling feature
-------------------------------------------------------------------
Sat Apr 4 16:55:55 UTC 2015 - mpluskal@suse.com
- Enable python bindings
- Update to 0.7.9
* Implements h2-14 protocol (http://tools.ietf.org/html/draft-ietf-httpbis-http2-14)
* Implements HPACK 09 (http://tools.ietf.org/html/draft-ietf-httpbis-header-compression-09)
* h2load: Fix crash if -t > -c
* h2load: Add -d option to upload data to server
* nghttpx: Forward only "trailers" keyword in te when forwarding HTTP/2 backend
* nghttpx: Fix PUSH_PROMISE header field corruption [GH-194]
* nghttpx: Fix te header field is duplicated when forwarding HTTP/2 backend
* nghttp, nghttpd: Add --hexdump option to hexdump incoming traffic.
* examples: Place AM_CPPFLAGS first to use in-package header files first [GH-192]
- Changes for 0.7.8
* Implements h2-14 protocol (http://tools.ietf.org/html/draft-ietf-httpbis-http2-14)
* Implements HPACK 09 (http://tools.ietf.org/html/draft-ietf-httpbis-header-compression-09)
* Validate :path header field for http or https URI scheme
* NULL-terminate header field name and value presented by callback
* README.rst: Cleaned up the grammar a bit (Patch from Ross Smith II)
* h2load: fix for segfault by reserving correct worker count (Patch from Stefan Eissing)
-------------------------------------------------------------------
Wed Mar 18 21:29:49 UTC 2015 - jengelh@inai.de
- Avoid shipping documentation redundantly. Set RPM groups.
-------------------------------------------------------------------
Fri Mar 6 18:19:47 UTC 2015 - mpluskal@suse.com
- Fix rpm group
-------------------------------------------------------------------
Tue Mar 3 22:15:13 UTC 2015 - mpluskal@suse.com
- Update to 0.7.5
* Implements h2-14 protocol
(http://tools.ietf.org/html/draft-ietf-httpbis-http2-14)
* Implements HPACK 09
(http://tools.ietf.org/html/draft-ietf-httpbis-header-compression-09)
* Validate HTTP semantics by default
* Add nghttp2_option_set_no_http_messaging() API function
* Update http-parser
* nghttp, nghttpd, nghttpx: Use "sensitive" to indicate
"never indexed" header field
* nghttp, nghttpd, nghttpx, h2load: Select/announce h2 in
ALPN/NPN
* nghttp: Fix unaligned field output in --stat
* nghttp: Fix -H does not work with -u upgrade request
* nghttp: Update resource timing terminology according to
Resource Timing TR
* nghttpd: Add -a option which takes an address parameter that
allows nghttpd to bind to a non-default address. Patch
from Brian Card
* nghttpx: Use omit minor version in case of HTTP/2 in via
header and access log
* nghttpx: Support UNIX domain socket on both frontend and backend
* nghttpx: Fix crash in http/1 backend when backend returns more
bytes than CL
* nghttpx: Cast configuration value to rlim_t to avoid compile
error on 32bit
* nghttpx: Fix 1 second delay in HTTP/2 backend connection
* nghttpx: Fix request re-submission bug in HTTP/2 backend
* asio-sv2: Fix compile error with OS X
-------------------------------------------------------------------
Sun Feb 15 11:00:12 UTC 2015 - mpluskal@suse.com
- Initial packaging of 0.7.4