Hello community,
here is the log from the commit of package nginx for openSUSE:Factory checked
in at 2018-03-29 11:57:28
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/nginx (Old)
and /work/SRC/openSUSE:Factory/.nginx.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "nginx"
Thu Mar 29 11:57:28 2018 rev:21 rq:592007 version:1.13.9
Changes:
--------
--- /work/SRC/openSUSE:Factory/nginx/nginx.changes 2018-02-22
15:01:29.188075054 +0100
+++ /work/SRC/openSUSE:Factory/.nginx.new/nginx.changes 2018-03-29
11:57:32.542190193 +0200
@@ -1,0 +2,5 @@
+Wed Mar 28 11:18:44 UTC 2018 - acherni...@suse.com
+
+- Recommend to use TLSv1.2 by default (boo#1086855)
+
+-------------------------------------------------------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ nginx-1.6.1-default_config.patch ++++++
--- /var/tmp/diff_new_pack.yekqkv/_old 2018-03-29 11:57:33.350161028 +0200
+++ /var/tmp/diff_new_pack.yekqkv/_new 2018-03-29 11:57:33.350161028 +0200
@@ -1,7 +1,5 @@
-Index: conf/nginx.conf
-===================================================================
---- conf/nginx.conf.orig
-+++ conf/nginx.conf
+--- conf/nginx.conf.orig 2018-03-28 11:56:48.834012377 +0200
++++ conf/nginx.conf 2018-03-28 13:16:09.978372767 +0200
@@ -1,16 +1,28 @@
-#user nobody;
@@ -36,7 +34,7 @@
}
-@@ -22,7 +34,7 @@ http {
+@@ -22,7 +34,7 @@
# '$status $body_bytes_sent "$http_referer" '
# '"$http_user_agent" "$http_x_forwarded_for"';
@@ -45,7 +43,7 @@
sendfile on;
#tcp_nopush on;
-@@ -32,16 +44,18 @@ http {
+@@ -32,16 +44,18 @@
#gzip on;
@@ -66,7 +64,7 @@
index index.html index.htm;
}
-@@ -51,7 +65,7 @@ http {
+@@ -51,7 +65,7 @@
#
error_page 500 502 503 504 /50x.html;
location = /50x.html {
@@ -75,7 +73,7 @@
}
# proxy the PHP scripts to Apache listening on 127.0.0.1:80
-@@ -63,7 +77,7 @@ http {
+@@ -63,7 +77,7 @@
# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
#
#location ~ \.php$ {
@@ -84,7 +82,7 @@
# fastcgi_pass 127.0.0.1:9000;
# fastcgi_index index.php;
# fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name;
-@@ -87,7 +101,7 @@ http {
+@@ -87,7 +101,7 @@
# server_name somename alias another.alias;
# location / {
@@ -93,7 +91,18 @@
# index index.html index.htm;
# }
#}
-@@ -109,9 +123,11 @@ http {
+@@ -101,6 +115,10 @@
+
+ # ssl_certificate cert.pem;
+ # ssl_certificate_key cert.key;
++
++ # Allow TLS version 1.2 only, which is a recommended default these days
++ # by international information security standards.
++ # ssl_protocols TLSv1.2;
+
+ # ssl_session_cache shared:SSL:1m;
+ # ssl_session_timeout 5m;
+@@ -109,9 +127,11 @@
# ssl_prefer_server_ciphers on;
# location / {
