> On 15 Aug 2023, at 20:44, Maxim Dounin <mdou...@mdounin.ru> wrote: > > Hello! > > On Tue, Aug 15, 2023 at 07:48:05PM +0400, Sergey Kandaurov wrote: > >> >>> On 15 Aug 2023, at 19:32, Maxim Dounin <mdou...@mdounin.ru> wrote: >>> >>> Hello! >>> >>> >>> Changes with nginx 1.25.2 15 Aug 2023 >>> >>> *) Feature: path MTU discovery when using HTTP/3. >>> >>> *) Change: now nginx uses appname "nginx" when loading OpenSSL >>> configuration. >>> >>> *) Change: now nginx does not try to load OpenSSL configuration if the >>> --with-openssl option was used to built OpenSSL and the OPENSSL_CONF >>> environment variable is not set. >>> >>> *) Bugfix: in the $body_bytes_sent variable when using HTTP/3. >>> >> >> There were bugfixes in QUIC, which may deserve a separate line. > > Added "Bugfix: in HTTP/3" to cover anything not specifically > mentioned, thnx. > >> Also I'd add TLS_AES_128_CCM_SHA256 cipher suite support in QUIC, >> and a switch to using AEAD-encrypted QUIC address validation tokens, >> which essentially provides now authenticated encryption. > > Agreed about TLS_AES_128_CCM_SHA256, added. > > Not sure AEAD worth mentioning though, it's more an internal > change hardly visible to users.
Agreed, thanks. > > Updated: > > > Changes with nginx 1.25.2 15 Aug 2023 > > *) Feature: path MTU discovery when using HTTP/3. > > *) Feature: TLS_AES_128_CCM_SHA256 cipher suite support when using > HTTP/3. > > *) Change: now nginx uses appname "nginx" when loading OpenSSL > configuration. > > *) Change: now nginx does not try to load OpenSSL configuration if the > --with-openssl option was used to built OpenSSL and the OPENSSL_CONF > environment variable is not set. > > *) Bugfix: in the $body_bytes_sent variable when using HTTP/3. > > *) Bugfix: in HTTP/3. > > > Изменения в nginx 1.25.2 15.08.2023 > > *) Добавление: path MTU discovery при использовании HTTP/3. > > *) Добавление: поддержка шифра TLS_AES_128_CCM_SHA256 при использовании > HTTP/3. > > *) Изменение: теперь при загрузке конфигурации OpenSSL nginx использует > appname "nginx". > > *) Изменение: теперь nginx не пытается загружать конфигурацию OpenSSL, > если для сборки OpenSSL использовался параметр --with-openssl и > переменная окружения OPENSSL_CONF не установлена. > > *) Исправление: в переменной $body_bytes_sent при использовании HTTP/3. > > *) Исправление: в HTTP/3. > Looks good. -- Sergey Kandaurov _______________________________________________ nginx-devel mailing list nginx-devel@nginx.org https://mailman.nginx.org/mailman/listinfo/nginx-devel
