Patches

Nginx

nginx.patch

• Add HTTP2 HPACK Encoding Support.
• Add Dynamic TLS Record support.

Test pass: 1.17.10

nginx_with_quic.patch

• Add HTTP3(QUIC) Support.
  • For OCSP stapling, maybe you need this.
• Add HTTP2 HPACK Encoding Support.
• Add Dynamic TLS Record support.

Test pass: 1.17.10 with cloudflare/quiche 1c5fe75

use_openssl_md5_sha1.patch

• Use the OpenSSL library instead of the Nginx original function.
• Repack it because "patch unexpectedly ends in middle of line".
  • Thanks @CarterLi

Test pass: 1.17.10

Enable_BoringSSL_OCSP.patch

• For BoringSSL support OCSP stapling.
  • Using "ssl_stapling_file" to support.
  • Only "ssl_stapling_file" with single cert is supported.
  • Auto-rebuild OCSP stapling file with shell and atd(at cron), you can read this article(Maybe you need a translation tool).
  • Thanks @CarterLi.

Test pass: 1.17.10

nginx_with_spdy.patch (Deprecated)

• Add SPDY Support.
• Add HTTP2 HPACK Encoding Support.
• Add Dynamic TLS Record support.

Test pass: 1.17.9

nginx_with_spdy_quic.patch (Deprecated)

• Add SPDY Support.
• Add HTTP3(QUIC) Support.
• Add HTTP2 HPACK Encoding Support.
• Add Dynamic TLS Record support.

Test pass: 1.17.9 with cloudflare/quiche 9a8b3b

nginx_strict-sni.patch (Deprecated)

• Enable Strict-SNI, Protect your site ip without exposing your certificate (From here)
  • Strict SNI requires at least two ssl server (fake) settings (server { listen 443 ssl }).
  • It does not matter what kind of certificate or duplicate.

Test pass: 1.15.5

Other

dropbox_fs_fix.patch

• For Dropbox Linux users. This patch could let official python script auto-load libdropbox_fs_fix.so library before start dropboxd.
  • Using Dropbox filesystem fix for Linux Repo and make libdropbox_fs_fix.so.
  • After compiled, copy libdropbox_fs_fix.so to $HOME/.dropbox-dist/libdropbox_fs_fix.so.
  • Download Dropbox official python script, put it with patch file together.
  • Patch, enjoy.

Test pass: 2019.02.14 version

Links

让Nginx使用BoringSSL时支持OCSP Stapling

博客终止使用TLS 1.0和TLS 1.1协议

小试HTTP3

我的Nginx编译之旅

解决Dropbox Linux客户端因文件系统导致无法同步问题

kn007的个人博客