File nghttp2.changes of Package nghttp2
-------------------------------------------------------------------
Mon Feb 15 08:29:25 UTC 2016 - pgajdos@suse.com
- updated to 1.7.1 to fix CVE-2016-1544 [bsc#966514]
-------------------------------------------------------------------
Thu Jan 28 13:43:54 UTC 2016 - pgajdos@suse.com
- updated to 1.7.0 [fate#320269]
-------------------------------------------------------------------
Thu Jan 21 08:26:19 UTC 2016 - pgajdos@suse.com
- fix typo in libnghttp2_asio1 description [bsc#962914]
-------------------------------------------------------------------
Tue Jan 19 13:38:15 UTC 2016 - pgajdos@suse.com
- remove jemalloc optional build dependency
- remove libspdy optional build dependency
-------------------------------------------------------------------
Wed Dec 23 17:48:47 UTC 2015 - mpluskal@suse.com
- Update to 1.6.0
* Fix heap-use-after-free bug when handling idle streams
* Strict error handling for frames which are not allowed after
closed (remote)
* Set max number of outgoing concurrent streams to 100 by
default
* Keep incoming streams only at server side
* Create stream object for pushed resource during
nghttp2_submit_push_promise()
* Add nghttp2_session_create_idle_stream() API
* Handle response in nghttp2_on_begin_frame_callback
* Add --lib-only configure option
* Compile with OpenSSL 1.1.0-pre1
* Fix build when OpenSSL 1.0.2 is not available (patch from
Sunpoet Po-Chuan Hsieh)
* asio: Add connect and read timeout to client API
* asio: Add TLS handshake and read timeout to server API
* asio: Added access to a requests remote endpoint (patch from
Andreas Pohl)
* asio: libnghttp2_asio: Added io_service accessors (patch from
Andreas Pohl)
* h2load: Add req/s min, max, mean and sd for clients
* h2load: Fix broken connection times
-------------------------------------------------------------------
Tue Dec 1 14:13:15 UTC 2015 - mpluskal@suse.com
- Update to 1.5.0
* Fix bug that nghttp2_session_find_stream(session, 0) returned
NULL
* Add nghttp2_session_change_stream_priority() to change stream
priority without sending PRIORITY frame
* Add nghttp2_session_check_server_session() API
* Consider to use CANCEL error code when closing streams with
GOAWAY
* Don't send push response if GOAWAY has been received
* Use error code CANCEL to reset pushed reserved stream from
remote
* Add nghttp2_session_upgrade2(), deprecate
nghttp2_session_upgrade()
* Workaround HTTP upgrade with HEAD request in
nghttp2_session_upgrade()
* Introduce NGHTTP2_NV_FLAG_NO_COPY_NAME and
NGHTTP2_NV_FLAG_NO_COPY_VALUE
* Add nghttp2_session_check_request_allowed() API function
* Switch to clang-format-3.6
* Update mruby to 1.2.0
* tests: fix broken linkage with --disable-static (Patch from
Kamil Dudka)
* python: Send RST_STREAM if remote side is not closed and
response finished
* asio: client: call on_error when connection is dropped
* asio: ALPN support
* h2load: Add --h1 option to force http/1.1 for both http and
https URI
* h2load: Fix crash when dealing with "connection: close" form
HTTP/1.1 server
* h2load: h2load goes into infinite loop when timing script file
starts with 0.0 in first line (Patch from Kit Chan)
* h2load: Override user-agent with -H option
* h2load: Print "space savings" to measure header compression
efficiency
* h2load: Stream error should be counted toward errored
* h2load: Show application protocol with OpenSSL < 1.0.2
* nghttpx: Don't send RST_STREAM to h2 backend if backend is
disconnected state
* nghttpx: Support server push from HTTP/2 backend
* nghttpx: Fix bug that causes connection failure with backend
proxy URI
* nghttpx: Use --backend-tls-sni-field to verify certificate
hostname
* nghttpx: Log :authority as $http_host if available
* nghttpd: Fix crash with CONNECT request
* nghttpd: Defered eviction of cached fd using timer
* nghttpd: Read /etc/mime.types to set content-type header field
* nghttp: Record request method to output it in har correctly
* nghttp: Use method given in -H with ":method" in HTTP Upgrade
- Drop nghttp2-1.4.0-fix-tests.patch (now in upstream)
-------------------------------------------------------------------
Mon Nov 16 17:21:15 UTC 2015 - mpluskal@suse.com
- Enable spdy and more example applications
-------------------------------------------------------------------
Sat Oct 31 10:21:56 UTC 2015 - sor.alexei@meowr.ru
- Update to 1.4.0:
* lib: Don't always expect dynamic table size update.
* lib: Shrink to the minimum table size seen in local SETTINGS.
* lib: Add new error code NGHTTP2_ERR_PAUSE to send_data_callback.
* lib: Avoid excessive WINDOW_UPDATE queuing.
* lib: Return fatal error if flooding is detected to close
session immediately.
* lib: Return type of nghttp2_submit_trailer is int.
* lib: Don't send WINDOW_UPDATE with 0 increment.
* lib: Fix bug that headers in CONTINUATION were ignored after
HEADERS with padding.
* package: Use -fvisibility=hidden for internal functions.
* package: Show more information in configure summary.
* package: Add PIDFile directive to systemd service.
* package: Fix daemon upgrade when running under systemd.
* app: Compile with BoringSSL.
* nghttp: Allow multiple -c option occurrence, and take min and
last value.
* nghttpd: Fix leak when server failed to listen to given port.
* nghttpx: Add TLS dynamic record size behaviour command line
options.
* nghttpx: Reduce default timeouts for read sockets to 1m.
* nghttpx: Fix bug that PUT is replaced with POST.
* nghttpx: Change mruby script handling.
* nghttpx: Added support for RFC 7413 (TCP Fast Open) on nghttpx
proxy listening connections.
* nghttpx: Add neverbleed support.
* h2load: Don't DOS our server!
* h2load: Use duration syntax for timeouts.
* h2load: Support subsecond rate period.
* h2load: Simplify rate mode.
* h2load: Add option for user-definable rate period.
* h2load: Reuse SSL/TLS session.
* h2load: Reconnect server on connection: close.
* h2load: Don't exit in the case of no ALPN protocol overlap.
* integration: Update go's http2 package URI.
- Add missing baselibs.conf.
- Add nghttp2-1.4.0-fix-tests.patch from commit 4825009.
- Small spec cleanup.
-------------------------------------------------------------------
Sun Sep 27 12:38:17 UTC 2015 - mpluskal@suse.com
- Update to 1.3.4
* Make traditional init script fail if new config file is broken
(Patch from Janusz Dziemidowicz)
* nghttpx-logrotate: Don't use killall since we have multiple
processes
* nghttpx: Fix improper signal handling
- Changes for 1.3.3
* Fix bug in padding handling of DATA frame
* Use hash table for dynamic table lookup
* More warning flags for --enable-werror
* Update mruby
* h2load: HTTP/1.1 support (Patch from Lucas Pardue)
* nghttpx: Do not try to set TCP_NODELAY when frontend is an
UNIX socket (Patch from Janusz Dziemidowicz)
* nghttpx: Chown UNIX domain socket to user specified as --user
* nghttpx: Split monolithic one process into control and worker
processes
* nghttpx: Handle SSL/TLS data following PROXY protocol line
- Changes for 1.3.2
* Check header block limit after new stream is opened
* nghttp: Show error if HEADERS frame cannot be sent for
whatever reason
* nghttpx: Fix assertion failure on TLS handshake
* nghttpx: Add x-http2-push header field for pushed resource
* nghttpx: Fix compile error with --disable-threads
-------------------------------------------------------------------
Mon Sep 14 13:33:16 UTC 2015 - mpluskal@suse.com
- Update to 1.3.1
* Avoid usage of typeof and replace __builtin_offsetof with
offsetof
* Honor stream->weight even if stream->last_writelen is 0
* Compile third-party libraries if hpack-tools is enabled
* nghttpx-init: Start nghttpx with --daemon
* Bundle sphinxcontrib.rubydomain https://bitbucket.org/birkenfeld/sphinx-contrib/src/default/rubydomain/
* Bundle mruby
* h2load: Record TTFB on first byte of response body, rather
than first socket read
* h2load: Improve checking for timing script input, prevent
false positive in certain situations
* nghttpx: Implement PROXY protocol version 1
(--accept-proxy-protocol option)
* nghttpx: Allow link header server push for HTTP/2 backend
as well
* nghttpx: Don't initiate push if client disabled push
* nghttpx: Allow absolute URI in Link header field for push
* nghttpx: Fix crash with multi workers and QUIT signal
* nghttpx: Add mruby support which is disabled by default
(use --with-mruby configure option to enable it)
* nghttpx: Drop connection before TLS finish if h2 requirement
is not fulfilled
- Fix typo in previous changelog entry
-------------------------------------------------------------------
Tue Sep 1 06:59:43 UTC 2015 - mpluskal@suse.com
- Update to 1.3.1
* Limit the number of incoming reserved (remote) streams
* Add stream public API
* Rewrite priority tree handling
* Fix parallel make distcheck
* Define it and itprep recursive target if
AM_EXTRA_RECURSIVE_TARGETS is defined
* fetch-ocsp-response: Handle spurious openssl exist status 0
* nghttpx: Use nghttp2::ssl::DEFAULT_CIPHER_LIST for backend TLS
connection
* nghttpx: Don't allow blacked listed cipher suites for HTTP/2
connection
* nghttpx: better handle /dev/stderr and /dev/stdout (Patch from
Tomasz Buchert)
* nghttpd: GOAWAY if SSL/TLS requirements for HTTP/2 are not met
* nghttpd: Return date header field for 304
* nghttpd: Support HEAD request
* h2load: Add Timing-script and base URI support (Patch from
Lucas Pardue)
* h2load: Add timeout options (Patch from Nora)
- Fix typo in changelog
-------------------------------------------------------------------
Mon Aug 17 10:51:27 UTC 2015 - mpluskal@suse.com
- Update to 1.2.1
* doc: Reword the HPACK tutorial (Patch from Tom Harwood)
* nghttpx: Fix stability issues
* h2load: Fix crash if -r > -n
-------------------------------------------------------------------
Mon Aug 10 14:10:20 UTC 2015 - mpluskal@suse.com
- Update to 1.2.0
* Fix crash if response or data is submitted to closing stream
* Header table size UINT32_MAX must be accepted
* Use PROTOCOL_ERROR against DATA sent to idle stream
* Allow multiple in-flight SETTINGS
* Strictly check occurrence of dynamic table size update
* Fix configure warning that 'missing' is missing or too old
* Fix rm: cannot remove ‘*.rst’: No such file or directory when
"make clean" (Patch from Alexis La Goutte)
* doc: Reword some of the server and client tutorial (Patch
from Tom Harwood)
* src: Remove monotonic_clock replacement macro for gcc-4.6
* nghttpx: Add TLS ticket key sharing among nghttpx instances
using memcached
* nghttpx: Add shared session cache using memcached
* nghttpx: Set SSL/TLS session timeout to 12 hours
* nghttpx: Enable session resumption on HTTP/2 backend
* nghttpx: Don't rewrite host header field by default
* nghttpx: Generate new ticket key every 1hr and its life time
is now 12hrs
* nghttpx: Don't reuse backend connection if it is not clean
* nghttpx: Add AES-256-CBC encryption for TLS session ticket
* nghttpd: Fix the bug that 304 response has non-empty body
* h2load: Add -r and -C options to h2load (Patch from
Nora Shoemaker)
- Changes for 1.1.2
* Fix linker error with libnghttp2_asio
* Allow custom installation location for Python bindings
- Drop no longer needed missing_nghttp2_timegm.patch
-------------------------------------------------------------------
Thu Jul 16 06:58:40 UTC 2015 - mpluskal@suse.com
- Update to 1.1.1
* nghttpx: Fix various stability issues and memory leak bug
- Changes for 1.1.0
* Fix DATA is not consumed if nghttp2_http_on_data_chunk failed
* nghttp2_submit_response and nghttp2_submit_headers may return
* NGHTTP2_ERR_DATA_EXIST
* msvc build fixes and enchantments (Patch from Gabi Davar)
* Compile with IRIX gcc-4.7 (Patch from Klaus Ziegler)
* nghttp: Add --max-concurrent-streams option
* nghttp: Add comment on HAR on pushed objects (Patch from
acesso)
* nghttpx: Add --include option to read additional configuration
from given file
* nghttpx: Add backend routing based on request host and path by
extending -b option
* nghttpx: Allow log variable to be enclosed by curly braces for
disambiguation
* nghttpx: Add log variables related to SSL/TLS connection
* h2load: Add --ciphers option
- Add patches
* missing_nghttp2_timegm.patch to fix building of asio library
* nghttp2-remove-python-build.patch to fix python bindings
installation when autotools are used
-------------------------------------------------------------------
Tue Jun 30 11:54:06 UTC 2015 - mpluskal@suse.com
- Update to 1.0.5
* Add STREAM_DEP_DEBUG macro switch to enable runtime validation
of depedency tree
* Fix another bug in priority handling; sibling's item is not
queued when ancestor's item is detached
* nghttpx: Fix crash with --http2-bridge and both frontend and
backend TLS
-------------------------------------------------------------------
Wed Jun 24 10:52:12 UTC 2015 - mpluskal@suse.com
- Update to 1.0.4
* Fix assertion failure in stream_update_dep_on_detach_item
(GH-264)
- Changes for 1.0.3
* Fix bug that idle self-depending PRIORITY is not handled
gracefully
* Optimize dependency based priority code to Firefox style tree
* enable third-party for asio_lib too (Patch from Mike
Frysinger)
* fetch-ocsp-response: Support LibreSSL, and include port in
ocsp_host
* src: Support compile with LibreSSL
* nghttpx: Fix bug that x-forwarded-proto header field does not
reflect frontend scheme on HTTP/2 backend
* nghttpx: Validate :path on SPDY frontend
-------------------------------------------------------------------
Tue Jun 16 08:27:32 UTC 2015 - mpluskal@suse.com
- Update to 1.0.2
* Fix bug that data are not consumed for connection in race
condition (GH-253)
* Define NGHTTP2_EXTERN to __declspec(dllimport) when using
nghttp2 for Windows build
* Translate fetch-ocsp-response into Python
* libevent-client: Fix bug that path is broken if URI does not
contain path part
* python: Call on_close callback when connection is lost for
server session
* python: Expose client certificate, if available (Patch from
Fabian Wiesel)
* python: Catch and log failure to set TCP_NODELAY (Patch from
Fabian Wiesel)
* nghttpx: Add --add-request-header option
* nghttpx: Make WebSocket upgrade work
* nghttpx: Fix bug that END_STREAM is not set in backend for
POST with Upgrade
* nghttpx: Don't send "Expect" header field twice
-------------------------------------------------------------------
Mon May 25 15:13:45 UTC 2015 - mpluskal@suse.com
- Update to 1.0.1
* Include stdint.h instead of inttypes.h when compiled with MSVC
< 2013
* Fix invalid memory free on out-of-memory handling
* integration: Use our own copy of golang spdy package
* android: Don't link zlib bundled with android NDK
* Dockerfile.android: Update NDK ver, and ubuntu; build and link
zlib
* src, examples: Fix up OpenSSL initialization
* nghttpx: Allow HTTP Upgrade from POST request if response
header has not been sent to the client
* nghttpx: Fix bug that PUSH_PROMISE is sent after associated
response HEADERS
* nghttpd: Close connection after settings timeout and GOAWAY
was sent
* h2load: Fix bug that NPN fails if ALPN is enabled
-------------------------------------------------------------------
Thu May 21 06:50:36 UTC 2015 - mpluskal@suse.com
- Update to 1.0.0
* v1.0.0 introduced backward incompatible changes from 0.7
series. Read https://nghttp2.org/documentation/package_README.html#migration-from-v0-7-15-or-earlier
to migrate from older version to this latest version.
- Changes for 0.7.15
* Hopefully, this is the last release for 0.7.x series.
Development continues in 1.x series.
* Access violation in buffers (GH-232) (Patch from Etienne Cimon)
* Retry finding jemalloc lib by je_malloc_stats_print (GH-233)
* inflatehd: Fix crash if 'wire' value is not string (GH-235)
* nghttpx: Revert 585af93 to fix crash with TLS (GH-234)
* nghttpd: Add --echo-upload option to send back request body
-------------------------------------------------------------------
Wed May 13 13:07:14 UTC 2015 - mpluskal@suse.com
- Update to 0.7.14
* Fix global-buffer-overflow in HPACK code
* Fix doc for nghttp2_select_next_protocol
* Fix bug that promised stream was not reset on decompression
error
* Add systemd and upstart configuration file for nghttpx
(Patch from Zhuoyun Wei)
* Improve nghttpx logrotate configuration file (Patch from
Zhuoyun Wei)
* Update sphinx_rtd_theme
* h2load: Update h2load to give connect time and ttfb stats
(Patch from ericcarlschwartz)
* nghttpd: Add -m, --max-concurrent-streams option
* nghttpx: Log absolute URI for HTTP/2 or client proxy request
* nghttpx: Add --header-field-buffer and --max-header-fields
options
* nghttp: Fix assertion error if very large value is given to -t
-------------------------------------------------------------------
Fri May 1 13:47:12 UTC 2015 - mpluskal@suse.com
- Update to 0.7.13
* Fix bug that promised stream was not reset by returning
NGHTTP2_ERR_TEMPORAL_CALLBACK_FAILURE from
nghttp2_on_header_callback. Instead, associated stream was reset.
* Allow NGHTTP2_ERR_TEMPORAL_CALLBACK_FAILURE from
nghttp2_on_begin_headers_callback
* h2load: Effectively disable flow control by setting large
window size
* asio: Graceful shutdown and joinable server (Patch from
Xiaoguang Sun)
-------------------------------------------------------------------
Mon Apr 20 08:40:33 UTC 2015 - mpluskal@suse.com
- Update to 0.7.12
* Fix bug that nghttp2_session_set_next_stream_id accepts invalid
stream_id
* HPACK: Rewrite static header table handling
* HPACK: Never index authorization and small cookie header field
* Don't install libnghttp2_asio headers if they are disabled
* doc: Specify program directive so that hyperlink to option is
correctly pointed to the intended location
* asio: client: Call error_cb on error occurred in do_read and
do_write (Fixes GH-207)
* nghttp: Add --no-push option to disable server push
* nghttp: Show stream ID in statistics output
* nghttp: Remove --dep-idle option
* nghttp: Use same priority anchor nodes as Firefox does
* nghttpx: Don't push resource if link header has non empty
loadpolicy
* nghttpx: Add logging for somewhat important events (logs,
tickets, and ocsp)
* nghttpx: Set Downstream to stream user data on HTTP Upgrade
to h2
-------------------------------------------------------------------
Sun Apr 12 17:38:36 UTC 2015 - mpluskal@suse.com
- Update to 0.7.11
* nghttpx: Fix waitpid race condition in ocsp response update
* nghttp: Consider user-provided :authority header field for SNI
as well as host header field
- Changes for 0.7.10
* Make sure that nghttp2 license is MIT license
* Add nghttp2_session_consume_{connection,stream} to consume
bytes independent
* Add nghttp2_send_data_callback to send DATA payload without
copying "static inline" fix for build with VS2013 (Patch from
Remo E)
* Update lib/Makefile.msvc (Patch from Remo E)
* Remove dependency on libws2_32 on Windows build
* Define NGHTTP2_EXTERN macro to export function for Windows
build
* doc: Generate API doc per function
* python: Add async body generation support
* python: Fix pseudo-header field ordering bug
* nghttpx: Redirect stderr to errorlog file
* nghttpx: Fix bug that data buffered in SSL object are not
read
* nghttpx: Remove --tls-ctx-per-worker option
* nghttpx: Add OCSP stapling feature
-------------------------------------------------------------------
Sat Apr 4 16:55:55 UTC 2015 - mpluskal@suse.com
- Enable python bindings
- Update to 0.7.9
* Implements h2-14 protocol (http://tools.ietf.org/html/draft-ietf-httpbis-http2-14)
* Implements HPACK 09 (http://tools.ietf.org/html/draft-ietf-httpbis-header-compression-09)
* h2load: Fix crash if -t > -c
* h2load: Add -d option to upload data to server
* nghttpx: Forward only "trailers" keyword in te when forwarding HTTP/2 backend
* nghttpx: Fix PUSH_PROMISE header field corruption [GH-194]
* nghttpx: Fix te header field is duplicated when forwarding HTTP/2 backend
* nghttp, nghttpd: Add --hexdump option to hexdump incoming traffic.
* examples: Place AM_CPPFLAGS first to use in-package header files first [GH-192]
- Changes for 0.7.8
* Implements h2-14 protocol (http://tools.ietf.org/html/draft-ietf-httpbis-http2-14)
* Implements HPACK 09 (http://tools.ietf.org/html/draft-ietf-httpbis-header-compression-09)
* Validate :path header field for http or https URI scheme
* NULL-terminate header field name and value presented by callback
* README.rst: Cleaned up the grammar a bit (Patch from Ross Smith II)
* h2load: fix for segfault by reserving correct worker count (Patch from Stefan Eissing)
-------------------------------------------------------------------
Wed Mar 18 21:29:49 UTC 2015 - jengelh@inai.de
- Avoid shipping documentation redundantly. Set RPM groups.
-------------------------------------------------------------------
Fri Mar 6 18:19:47 UTC 2015 - mpluskal@suse.com
- Fix rpm group
-------------------------------------------------------------------
Tue Mar 3 22:15:13 UTC 2015 - mpluskal@suse.com
- Update to 0.7.5
* Implements h2-14 protocol
(http://tools.ietf.org/html/draft-ietf-httpbis-http2-14)
* Implements HPACK 09
(http://tools.ietf.org/html/draft-ietf-httpbis-header-compression-09)
* Validate HTTP semantics by default
* Add nghttp2_option_set_no_http_messaging() API function
* Update http-parser
* nghttp, nghttpd, nghttpx: Use "sensitive" to indicate
"never indexed" header field
* nghttp, nghttpd, nghttpx, h2load: Select/announce h2 in
ALPN/NPN
* nghttp: Fix unaligned field output in --stat
* nghttp: Fix -H does not work with -u upgrade request
* nghttp: Update resource timing terminology according to
Resource Timing TR
* nghttpd: Add -a option which takes an address parameter that
allows nghttpd to bind to a non-default address. Patch
from Brian Card
* nghttpx: Use omit minor version in case of HTTP/2 in via
header and access log
* nghttpx: Support UNIX domain socket on both frontend and backend
* nghttpx: Fix crash in http/1 backend when backend returns more
bytes than CL
* nghttpx: Cast configuration value to rlim_t to avoid compile
error on 32bit
* nghttpx: Fix 1 second delay in HTTP/2 backend connection
* nghttpx: Fix request re-submission bug in HTTP/2 backend
* asio-sv2: Fix compile error with OS X
-------------------------------------------------------------------
Sun Feb 15 11:00:12 UTC 2015 - mpluskal@suse.com
- Initial packaging of 0.7.4
