/
Changes
520 lines (476 loc) · 36 KB
/
Changes
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
Revision history for H2O.
2.3.0-beta1 TBD
- [core] disable buffering of stdout, stderr #1347 (Yannick Koechlin)
- [access-log] log connections that closed prior to sending a response #1235 (Kazuho Oku)
- [expires] fix incorrect header emitted when units: month or year were used #1406 (Frederik Deweerdt)
- [fastcgi] never return 304 if the file is a dynamic handler #1385 (Kazuho Oku)
- [fastcgi] accept `default` as a keyword of the extensions attribute #1414 (Ichito Nagata)
- [http2] support `critical` attribute in preload link header #1436 (Kazuho Oku, Frederik Deweerdt)
- [http2] do not compress cookies less than 20 bytes long #1389 (Julien Benoist)
- [mime] add .mjs as javascript file type #1398 (Jxck)
- [mime] flush all existing mapping when file.mime.settypes is used #1416 (Ichito Nagata)
- [mruby] allow running asynchronous operations unbounded to the Rack request being processed #1173 (Ichito Nagata)
- [mruby] drop the link rel=preload header with a x-http2-push-only attribute #1310 (Frederik Deweerdt)
- [mruby] update mruby and modules #1320 #1338 #1413
- [mruby] implement sleep #1348 (Ichito Nagata)
- [mruby] implement Digest::SHA256 #1387 (Kazuho Oku)
- [mruby] expose `SERVER_PROTOCOL` #1353 (Frederik Deweerdt)
- [mruby] properly handle content-less response #1430 (Ichito Nagata)
- [mruby] add option to specify mrbgem dependencies out of tree #1446 (Satoshi Tagomori)
- [proxy] load balancing support (round-robin) #1277 (Justin Zhu)
- [proxy] cap the amount of request body being buffered #1357 (Frederik Deweerdt)
- [proxy] cap the amount of response body being buffered #1358 (Frederik Deweerdt)
- [proxy] do not drop the Date request header #1408 (Ichito Nagata)
- [proxy] introduce separate timeouts for connection establishment and first-byte #1402 (Frederik Deweerdt)
- [ssl] support redis as a data store for session cache / ticket #1087 (Ichito Nagata)
- [ssl] fix deadlock during lazy initialzation #1425 (Apollon Oikonomopoulos)
- [ssl] fix epoll-related crashes on OSCP updates #1427 (Apollon Oikonomopoulos)
- [ssl] avoid spurious session ticket renewals #1444 (Apollon Oikonomopoulos)
- [websocket] fix bug that might drop the first websocket frame #1276 (wuhanck)
- [libh2o] clear OpenSSL's error queue before using it #1448 (Apollon Oikonomopoulos)
- [doc] add documentation of `duration-stats` #1306 (Frederik Deweerdt)
- [misc] include process id in crash backtrace #1254 (Kazuho Oku)
- [misc] fix build issues on OpenIndiana #1300 (David Carlier)
- [misc] build on platforms without 64-bit atomics #1433 (Apollon Oikonomopoulos)
2.2.2 2017-04-23 03:24:00+0000
- [ssl] fix OCSP stapling error when LibreSSL is used #1275 (Ian Moone)
2.2.1 2017-04-22 22:43:00+0000
- [mruby] correct the line number reported on an exception #1239 #1251 (Ichito Nagata)
- [mruby] retain the order of request headers sharing a single name #1271 (Kazuho Oku)
- [ssl] fix assertion failure in `decode_ssl_input` #1264 (Kazuho Oku)
- [ssl] fix OCSP stapling error when OpenSSL 1.1.0 is used #1270 (Kazuho Oku)
- [libh2o] fix crash when abruptly closing an HTTP/2 connection on libuv #1250 (Kazuho Oku)
- [libh2o] fix memory leak of `_timestamp_cache` #1255 (Kazuho Oku)
- [doc] restore doc of `%{...}e` #1252 (Kazuho Oku)
- [doc] fix typo suggesting using `brotli` instead of `br` #1263 (Bogdan Khomutsky)
- [misc] fix undefined behaviors detected by ubsan #1246 (Frederik Deweerdt)
2.2.0 2017-04-05 02:18:00+0000
- [core] add `crash-handler.wait-pipe-close` parameter #1092 (Frederik Deweerdt)
- [core] introduce an option to bypass the `server` header sent from upstream #1226 (Frederik Deweerdt)
- [core] apply global- and host-level configuration to requests not applicable to any of the path-level configurations #1231 (Kazuho Oku)
- [access-log] add `%{remote}p` for logging the remote port #1166 (Kazuho Oku)
- [access-log] add support for JSON-style escapes and null #1208 (Kazuho Oku)
- [access-log] add specifier for logging per-request environment variables #1221 (Yannick Koechlin)
- [access-log] add support for `<`, `>` modifiers for logging either the original or the final response #1238 (Kazuho Oku)
- [access-log] do not emit request-total-time twice #1017 (Kazuho Oku)
- [fastcgi] fix a bug that closes the FastCGI listener socket during startup #1203 (Frederik Deweerdt)
- [file] add directive for serving gzipped files, decompressing them on-the-fly #1140 (Ichito Nagata)
- [headers] fix buffer overrun during startup #1180 (Frederik Deweerdt)
- [http1][proxy] preserve the cases of characters used in header names #1194 (Frederik Deweerdt)
- [http1][proxy] fix undefined behavior in HTTP/1 parser #1189 (Frederik Deweerdt)
- [http1] stop reading from socket after sending 400 to avoid the risk of assertion failure #1223 (Frederik Deweerdt)
- [http2] recognize `x-http2-push-only` attribute on `link` header #1169 (Frederik Deweerdt)
- [http2] add optional timeout for closing connections upon graceful shutdown #1108 (Frederik Deweerdt)
- [http2] do not ack an acked PING frame #1175 (Moto Ishisawa)
- [http2] reject requests exceeding the maximum allowed size more efficiently #1183 (Frederik Deweerdt)
- [mruby] remove dependenty to mkmf #1197 (Yuki Kurihara)
- [mruby] correct the line number reported on an exception #1239 (Ichito Nagata)
- [proxy] add directives for tweaking headers sent to upstream #1126 (Justin Zhu)
- [proxy] retain case-sensitivity of unix socket paths #1131 (Frederik Deweerdt)
- [proxy] add directive for controlling the `via` request header #1225 (Frederik Deweerdt)
- [ssl] add directive for logging session ID #1164 (Yannick Koechlin)
- [ssl] add support for TLS 1.3 draft-18 #1204 (Kazuho Oku)
- [ssl] stop evicting session entries in memcached when they are removed from internal cache #1185 (Ichito Nagata)
- [ssl] fix crash when a secp384r1, secp521r1 certificate is used with TLS 1.3 #1214 (Kazuho Oku)
- [ssl] fix build failure with OpenSSL 1.1.0 #1216 (Kazuho Oku)
- [ssl] add doc for `handshake-timeout` #1233 (Kazuho Oku)
- [status] fix race condition during start-up #1242 (Frederik Deweerdt)
- [libh2o] implement `h2o_evloop_destroy` #1200 (kazan417)
- [misc] add test code for fuzzing #1174 #1182 #1191 #1192 (Frederik Deweerdt, Jonathan Foote)
- [misc] fix issues reported by Coverity #1168 #1172 #1179 (Harrison Bowden, Frederik Deweerdt)
2.1.0 2017-01-17 23:43:27+0000
- [core] TCP latency optimization #873 #1076 (Kazuho Oku)
- [core] provide tag to include other YAML files from the configuration file #1022 (Ichito Nagata)
- [core] accept sequence of mappings for path-level configuration #1042 (Ichito Nagata)
- [core] fix broken support for TCP Fast Open in OS X #1065 (Ichito Nagata)
- [access-log] provide directive to emit request-level errors #1075 (Kazuho Oku)
- [access-log] emit values of all `set-cookie` headers concatenated #1161 (Kazuho Oku)
- [fastcgi] fix connection failure when `fastcgi.spawn` is used with an uid #1119 (Kazuho Oku)
- [file] more pre-defined MIME types #1103 (Joe Duarte)
- [http2][proxy] recognize link rel=preload headers in interim response as a trigger to push resources #916 (Kazuho Oku)
- [http1][http2] validate characters used in the headers #974 #1044 (Frederik Deweerdt, Kazuho Oku)
- [http1][http2] notify error downstream when an error occurred while generating a response #1031 (Frederik Deweerdt)
- [http1][http2] fix resource leak upon upgrade failure to HTTP/2 #1161 (Frederik Deweerdt)
- [http2] add `http2-push-preload` directive to turn off H2 push being initiated by link rel=preload header #929 (Kazuho Oku)
- [http2] add support for `cache-digest` header #967 #988 (Kazuho Oku)
- [http2] drop `host` header in HTTP/2 layer #973 #998 (Frederik Deweerdt, Kazuho Oku)
- [http2] don't use etag for calculating casper cookie #986 (Kazuho Oku)
- [http2] add support for H2 debug state #1019 (Ichito Nagata)
- [mruby] add dos_detector mruby handler #1013 (Ichito Nagata)
- [mruby] add DSL for access control lists (acl) #1016 (Ichito Nagata)
- [mruby] share mruby state and constants between handlers #1032 (Ichito Nagata)
- [mruby] add library for address-block-based access control #1038 (Ichito Nagata)
- [proxy] add an option to connect to upstream using PROXY protocol #930 (Kazuho Oku)
- [proxy] don't escape `:` in URI path #977 (Frederik Deweerdt)
- [proxy] preserve received URLs as much as possible #985 #1071 (Frederik Deweerdt)
- [proxy] add an option to prevent emiting x-forwarded-* headers #999 (Frederik Deweerdt)
- [proxy] cache TLS session used for upstream connections #1053 (Ichito Nagata)
- [proxy] turn on/off on-the-fly compression based on the `x-compress-hint` header #1085 (Frederik Deweerdt)
- [ssl] set add_lock callback to prevent unnecessary lock-add-unlock #983 (Roberto Guimaraes)
- [ssl] add support for OpenSSL 1.1.0 #1064 (Kazuho Oku)
- [status] collect and report HTTP statistics #893 (Frederik Deweerdt)
- [status] report additional stats when jemalloc is used #1017 (Frederik Deweerdt)
- [throttle] add new handler for throttling the response bandwidth #917 (Justin Zhu)
- [libh2o] provide `h2o_rand` that calls the appropriate random function depending on the OS #927 (David CARLIER)
- [libh2o] do not require use of picohttpparser.h when using the HTTP/1 client #946 (Kazuho Oku)
- [libh2o] install library files to the correct location #1116 (Frederik Deweerdt)
- [misc] provide `crash-handler` directive to customize crash logging #935 (Frederik Deweerdt)
- [misc] guess the default location of h2o.conf #969 (Davsid Carlier)
- [misc] allow to disable libuv even when it is found #995 (Frederik Deweerdt)
- [misc] add font/woff2 to the default mime-type mapping #1066 (Andy Davies)
- [misc] mark JavaScript and JSON files as compressible by default #1067 (Kazuho Oku)
2.0.6 2017-01-05 05:31:00+0000
- [compress] fix the compression quality being ignored #1154 (Yannick Koechlin)
- [mruby] stop GIT access during build #1149 (parly)
2.0.5 2016-12-21 06:00:00+0000
- [security fix] fix use-after-free vulnerability CVE-2016-7835 #1144 (Frederik Deweerdt, Kazuho Oku)
- [core] fix busy loop after receiving SIGTERM (linux) #1100 (Kazuho Oku, Frederik Deweerdt)
- [core] don't try to register kevent changes more than once (*BSD, OS X) #1113 (Ichito Nagata)
- [compress] set `vary: accept-encoding` upon negotiation failure of the compression method #1083 (Frederik Deweerdt)
- [file] add missing `</ul>` #1106 (Kazuho Oku)
- [http2] fix a bug that left connections open #1090 (Kazuho Oku)
- [http2] ignore PRIORITY frames that reference closed pushed streams #1105 (Frederik Deweerdt)
- [http2] add `Secure` attribute to the casper cookie #1134 (Kazuho Oku)
- [http2] permit use of HEADERS with a smaller stream ID than a preceding PRIORITY #1136 (Frederik Deweerdt, Kazuho Oku)
- [mruby] update mruby to HEAD #1135 (Kazuho Oku)
- [proxy] set `content-length: 0` when receiving a zero-byte POST or PUT #1080 (Frederik Deweerdt)
- [ssl] update libressl to 2.4.4 #1127 (Kazuho Oku)
- [ssl] erase OCSP stapling data when the stapling updater returns a permanent failure #1117 (Kazuho Oku)
2.0.4 2016-09-14 08:00:00+0000
- [security fix][core] fix DoS attack vector CVE-2016-4864 #1077 (Frederik Deweerdt, Kazuho Oku)
- [libh2o] fix crash on connect timeout #960 (disigma)
2.0.3 2016-09-07 22:03:00+0000
- [file] don't use `readdir_r` on Linux, Solaris #1046 #1052 (Frederik Deweerdt, Kazuho Oku)
- [http2] fix negative error code sent when cancelling a pushed stream #1039 (Frederik Deweerdt)
- [http2] fix a bug that may cause a stream to stall #1040 (Frederik Deweerdt)
- [http2] fix a bug that reset the stream when receiving HEADERS after PRIORITY #1043 (Frederik Deweerdt)
- [mruby] fix mruby handler becoming unusable after failed connection in http_request on FreeBSD #1062 (Kazuho Oku)
2.0.2 2016-08-01 20:36:00+0000
- [fastcgi] setenv should displace HTTP headers #996 (Kazuho Oku)
- [http2] fix buffer overrun #972 (Frederik Deweerdt)
- [misc] fix build error when libuv is not found #1008 (nextgenthemes)
- [misc] fix assertion failure when YAML alias and merge is used in certain way #1011 (Kazuho Oku)
2.0.1 2016-06-23 22:00:00+0000
- [fastcgi] fix internal server error when PHP returns a huge header #958 (Kazuho Oku)
- [http2] recognize link header containing multiple links #950 (Frederik Deweerdt)
- [libh2o] fix resource leaks upon startup failure #936 (David CARLIER)
- [libh2o] do not require linking to libbrotli externally #941 (Kazuho Oku)
2.0.0 2016-06-01 01:55:00+0000
- [core][breaking change] do not automatically append `/` to path-level configuration #820 (Kazuho Oku)
- [core] support `<<` in configuration file #786 (Kazuho Oku)
- [core] configurable server: header #877 (Frederik Deweerdt)
- [core] add directive for customizing the path of temporary buffer files #911 (Kazuho Oku)
- [core] fix crash when receiving SIGTERM during start-up #878 (Frederik Deweerdt)
- [core] spawn the configured number of DNS client threads #880 (Sean McArthur)
- [access-log] add directive for logging protocol-specific values #801 (Kazuho Oku)
- [access-log][fastcgi][mruby] per-request environment variables #868 (Kazuho Oku)
- [access-log] fix memory leak during start-up #864 (Frederik Deweerdt)
- [compress] on-the-fly compression using brotli, as well as directives to tune the compression parameters #802, #924 (Kazuho Oku, Frederik Deweerdt)
- [compress][expires] refrain from setting redundant `cache-control` tokens #846 (Kazuho Oku)
- [file] `file.file` directive for mapping specific file #822 (Kazuho Oku)
- [file] `send-compress` directive (renamed from `send-gzip`) to support pre-compressed files using brotli #802 (Kazuho Oku)
- [file] cache open failures #836 (Kazuho Oku)
- [http2] support for nopush attribute in the link rel=preload header #863 (Satoh Hiroh)
- [http2] support for push after delegation #866 (Kazuho Oku)
- [http2] ignore push indications made by a pushed response #897 (Kazuho Oku)
- [http2] accept `capacity-bits` attribute of the `http2-casper` configuration directive #882 (Satoh Hiroh)
- [http2] avoid memcpy during HPACK huffman encoding #749 (Kazuho Oku)
- [http2] fix potential stall when http2-max-concurrent-requests-per-connection is set to a small number #912 (Kazuho Oku)
- [http2] refuse push a single resource more than once #903 (Kazuho Oku)
- [http2] fix assertion failure when receiving more data than expected during upgrade #922 (Frederik Deweerdt)
- [mruby] add $H2O_ROOT/share/h2o/mruby to the default load path #851 (Kazuho Oku)
- [proxy] add support for HTTPS #875 (Kazuho Oku)
- [proxy] add an configuration option to pass through `x-forwarded-proto` request header #883 (Kazuho Oku)
- [proxy] log error when upstream connection is unexpectedly closed #895 (Frederik Deweerdt)
- [ssl] update libressl to 2.2.7 #898 (Kazuho Oku)
- [ssl] support ECDH curves other than P-256 #841 (Kazuho Oku)
- [ssl] add support for text-based memcache protocol #854 (Kazuho Oku)
- [ssl] fix memory leak when using TLS resumption with the memcached backend #856 (Kazuho Oku)
- [ssl] fix "undefined subroutine" error in the OCSP updater #872 (Masayuki Matsuki)
- [ssl] cap the number of OCSP updaters running concurrently #891 (Kazuho Oku)
- [ssl] fix use-after-free when using session resumption with memcached backend #923 (Frederik Deweerdt)
- [libh2o] add API for obtaining the socket descriptor #886 (Frederik Deweerdt)
- [libh2o] add API to selectively disable automated I/O on reads and writes #890 (Frederik Deweerdt)
- [libh2o] bugfix: h2o_mem_swap swaps only the first 256 bytes #924 (Frederik Deweerdt)
- [status] introduce the status handler #848 (Kazuho Oku)
- [misc] install examples #850 (James Rouzier)
1.7.3 2016-05-26 02:32:00+0000
- [security fix][http2] fix use-after-free on premature connection close (CVE-2016-4817) #920 (Frederik Deweerdt)
- [core] fix SIGBUS when temporary disk space is full #910 (Kazuho Oku)
- [mruby] do not drop `link` header #913 (Kazuho Oku)
- [mruby] fix memory leak during initialization #906 (Frederik Deweerdt)
- [mruby] fix race condition in mruby regex handler #908 (Kazuho Oku)
- [libh2o] fix crash in h2o_url_stringify #918 (Kazuho OKu)
1.7.2 2016-05-09 03:12:00+0000
- [core] fix crash when receiving SIGTERM during start-up #878 (Frederik Deweerdt)
- [core] spawn the configured number of DNS client threads #880 (Sean McArthur)
- [http2] accept `capacity-bits` attribute of the `http2-casper` configuration directive #882 (Satoh Hiroh)
- [ssl] update libressl to 2.2.7 #898 (Kazuho Oku)
- [ssl] fix memory leak when using TLS resumption with the memcached backend #856 (Kazuho Oku)
- [ssl] fix "undefined subroutine" error in the OCSP updater #872 (Masayuki Matsuki)
1.7.1 2016-03-07 06:50:00+0000
- [core] fix incorrect line no. reported in case of YAML syntax error #785 (Kazuho Oku)
- [core] fix build issue / memory leak when the poll backend is used #777 #787 (devlearner)
- [core] when building, repect `EXTRA_LIBS` passed from command line #793 (Kazuho Oku)
- [core] fix memory leaks during start-up #792 (Domingo Alvarez Duarte)
- [core] fix stability issue when receiving a signal #799 (Kazuho Oku)
- [fastcgi] fix off-by-one buffer overflow #762 (Domingo Alvarez Duarte)
- [fastcgi][mruby] install missing script files #791 #798 (AIZAWA Hina)
- [mruby] truncate body to the size specified by `content-length` #778 (Kazuho Oku)
- [mruby] fix error when reading a ruby script >= 64K #824 (Domingo Alvarez Duarte)
- [proxy] fix I/O error when transferring files over 2GB on FreeBSD / OS X #821 #834 (Kazuho Oku)
- [ssl] bugfix: use of session ticket not disabled even when configured to #819 #835 (Kazuho Oku)
- [libh2o] provide pkg-config .pc files #743 (OGINO Masanori)
- [libh2o] include version numbers in the .so filename #794 (Matt Clarkson)
- [doc] refine documentation #601 #746 #748 #766 #781 #811
1.7.0 2016-02-05 02:03:00+0000
- [core] support for wildcard hostnames #634 (Kazuho Oku)
- [core][file] preserve query paramaters upon redirection to a directory #690 (Tatsuhiro Tsujikawa)
- [core] use uppercase letters in URI-escape sequence #695 (Kazuho Oku)
- [core] forbid duplicates in `hosts` section #709 (Kazuho Oku)
- [fastcgi] add support for CGI #618 (Kazuho Oku)
- [fastcgi] drop transfer-encoding header #641 (Kazuho Oku)
- [file] fix a bug that caused `file.mime.addtypes` to fail setting the attributes of a content-type #731 (Kazuho Oku)
- [http2] fix broken `PUSH_PROMISE` frames being sent under high pressure #734 #737 (Kazuho Oku)
- [mruby] provide `env["rack.input"]` #515 #638 #644 (Masayoshi Takahashi, Kazuho Oku)
- [mruby] HTTP client API #637 #643 (Kazuho Oku)
- [mruby] dump the ruby source on error #631 (Kazuho Oku)
- [mruby] provide access to `$H2O_ROOT` #629 (Kazuho Oku)
- [mruby] change mrb_int to 64-bit on 64-bit systems #639 (Kazuho Oku)
- [mruby] concatenate request headers having same name #666 (Kazuho Oku)
- [mruby] bundle mruby-errno, mruby-file-stat #675 (Kazuho Oku)
- [mruby] refrain from building mruby handler by default if mkmf (part of ruby dev files) is not found #710 (Kazuho Oku)
- [proxy] detect upstream close of pooled socket before reuse #679 (Kazuho Oku)
- [reproxy] add support for relative URI #712 (Kazuho Oku)
- [ssl] turn on neverbleed by default #633 (Kazuho Oku)
- [libh2o] fix memory leaks during destruction #724 (greatwar)
- [libh2o] simplify vector operations #715 #735 (Domingo Alvarez Duarte)
- [misc] support basic authentication using .htpasswd #624 (Kazuho Oku)
- [misc] fix build error when an older version of H2O is installed aside an external dependency #718 #722 #736 (Kazuho Oku)
1.6.3 2016-01-26 07:46:00+0000
- [fastcgi][proxy] fix double-free issue during configuration phase #723 (Kazuho Oku)
- [proxy] fix response getting truncated when neither content-length nor transfer-encoding is used #725 (Kazuho Oku)
- [websocket] fix crash when access-log is enabled #698 (Shota Fukumori)
1.6.2 2016-01-13 06:24:00+0000
- [security fix][redirect] uri-escape the user-supplied portion of the redirect path (CVE-2016-1133) #682 #684 (Kazuho Oku)
- [core] fix error when trying to set multiple error documents using one `error-doc` directive #676 (Yamagishi Kazutoshi)
- [file] fix a bug that incorrectly returns 403 when a file is requested with a trailing slash #686 (Yamagishi Kazutoshi)
- [http2] fix HPACK encoder error (and crash) when trying to encode a token wo. hpack index #640 (Kazuho Oku)
- [libh2o] fix race condition during multithread receiver (un)registration #659 (Chul-Woong Yang)
- [libh2o] fix memory leak on dispose #683 (Kazuho Oku)
1.6.1 2015-12-18 05:05:00+0000
- [misc] fix build error on armv8a #628 (Kazuho Oku)
- [misc] fix build error when libuv < 1.0.0 is installed #630 (Kazuho Oku)
1.6.0 2015-12-04 05:47:00+0000
- [core] customized error pages #606 (Kazuho Oku)
- [core] fix busy loop when receiving RST packet under certain conditions #603 (Kazuho Oku)
- [access-log] collect and log various timings #583 (Kazuho Oku)
- [access-log] support '%A' and '%p' #585 (Kazuho Oku)
- [access-log] support '%{...}t' compatibile with Apache HTTP Server #587 (Kazuho Oku)
- [fastcgi] increase backlog size the bundled fastcgi server #588 (Kazuho Oku)
- [fastcgi] fix uninitialized memory access / memory leak during startup #611 (Kazuho Oku)
- [file] implement file descriptor cache #596 (Kazuho Oku)
- [http2] increase incoming window size from 256KB to 16MB #582 (Kazuho Oku)
- [http2] decrease memory footprint (and speedup) #599 (Kazuho Oku)
- [http2] start server push before the response headers for the original request becomes ready #593 (Kazuho Oku)
- [http2] fix issues reported by h2spec 1.2.0 #595 (Kazuho Oku)
- [http2] fix NULL access when an error during upgrade from HTTP/1 #607 (Kazuho Oku)
- [http2] fix too-many-streams error with h2load #608 (Kazuho Oku)
- [websocket] support proxying websocket connections #581 (Justin Zhu)
- [libh2o] fix compiler warnings #598 (Matt Clarkson, Kazuho Oku)
- [misc] downgrade required CMake version to 2.8.11 #594 (Kazuho Oku)
1.5.4 2015-11-12 04:05:00+0000
- [access-log] do not emit protocol and authority for `%U` #586 (Kazuho Oku)
- [ssl] fix handshake failure with older versions of Android (2.x) #591 (Kazuho Oku)
1.5.3 2015-11-06 04:30:00+0000
- [core] decode url-encoded character at the end of path #567 (Kazuho Oku)
- [access-log] fix startup failure on OSX when configured to emit to pipe #580 (Kazuho Oku)
- [http2] fix memory / state corruption in HPACK encoder #571 (Tatsuhiro Tsujikawa, Kazuho Oku)
- [http2] improve HPACK compression ratio #573 (Tatsuhiro Tsujikawa, Kazuho Oku)
- [http2] fix behavior when HEADERS frame specifies a stream not open as a dependency #575 (Kazuho Oku)
- [proxy] do not reset HTTP2 push paths when request is delegated to proxy #579 (Kazuho Oku)
- [ssl] include "http/1.1" in ALPN / NPN protocol selection list #578 (Kazuho Oku)
1.5.2 2015-10-20 06:49:00+0000
- [http2] fix stall when only reprioritized streams are being transferred #564 (Kazuho Oku)
1.5.1 2015-10-20 01:13:00+0000
- [file] fixed directory listing not alphabetically sorted #412 #474 #539 (Kazuho Oku)
- [file] mime-type lookup should be case-insensitive #561 (Kazuho Oku)
- [file] fix corrupt links in directory listing #562 (Kazuho Oku)
- [http1] preserve HTTP connection after redirect #552 (Kazuho Oku)
- [http2] fixed reprioritized streams (to highest) sometimes being interleaved with lower priority streams #550 (Kazuho Oku)
- [libh2o] add `-DWITHOUT_LIBS=ON` configuration option #551 (Kazuho Oku)
- [libh2o] adjustments to build libh2o in a subdirectory #556 (Futur Solo)
- [misc] rewrite setuidgid helper program in Perl #553 (Kazuho Oku)
- [misc] fix doc issues #530 #547 #549 (Masaki TAGAWA, Kazuho Oku, Kazu Yamamoto)
1.5.0 2015-09-30 06:39:00+0000
- [http2] enable `http2-reprioritize-blocking-assets` by default #528 (Kazuho Oku)
- [ssl] fix issues with neverbleed #520 (Kazuho Oku)
1.5.0-beta4 2015-09-23 03:36:00+0000
- [mruby] provide `env['rack.errors']`, `env['SERVER_SOFTWARE']` #517 #519 (Masayoshi Takahashi, Kazuho Oku)
- [ssl] add support for neverbleed - the OpenSSL / LibreSSL privilege separation engine #520 (Kazuho Oku)
1.5.0-beta3 2015-09-18 03:44:00+0000
- [http2] fix crash when `http2-reprioritize-blocking-assets`, `file.custom-handler` are used together #511 #514 (Kazuho Oku)
1.5.0-beta2 2015-09-16 07:00:00+0000
- [serurity fix][file] fix directory traversal (CVE-2015-5638) (Kazuho Oku)
- [mruby] fix build failure when oniguruma is already installed #501 #506 (Kazuho Oku)
- [mruby] update sample mruby app to use rack-based API #498 (Masayoshi Takahashi)
1.5.0-beta1 2015-09-11 06:15:49+0000
- [core] introduce `is_compressible` and `priority` attributes to MIME map #436 #496 (Kazuho Oku)
- [access-log] fix bug that emitted unnecessary NUL char in certain conditions #462 #463 (Kazuho Oku)
- [fastcgi] support for http2 server-push using `link: rel=preload` header #446 (Kazuho Oku)
- [file] send `etag` and `vary` headers on 304 response #439 (Kazuho Oku)
- [file] sort directory listing #412 #474 (Kazuho Oku)
- [gzip] introduce support for on-the-fly gzip #413 #457 (Justin Zhu)
- [http2] introduce cookie-based implementation of cache-aware server-push #421 #432 (Kazuho Oku)
- [http2] improve HPACK compression ratio of server-push #450 (Kazuho Oku)
- [http2] never push if client requested not to #464 (Kazuho Oku)
- [http2] send `content-length` if possible #472 (Kazuho Oku)
- [mruby] production-level support using Rack-based interface #467 #475 #489 (Kazuho Oku)
- [reproxy] support delegation using relative URL #468 (Kazuho Oku)
- [reproxy] preserve method if status is 307 or 308 #491 (Kazuho Oku)
- [ssl] improved error handling of `openssl ocsp` command #449 #454 (Tatsuhiro Tsujikawa)
- [ssl] use libressl on ARM as well #485 (Kazuho Oku)
1.4.4 2015-08-17 21:45:00+0000
- [misc] fix install error of libh2o-evloop in case development files of OpenSSL cannot be found #443 (Kazuho Oku)
1.4.3 2015-08-17 01:25:00+0000
- [fastcgi] change ownership of domain socket when `fastcgi.spawn` command is used #443 (Masaki TAGAWA)
- [fastcgi] kill fastcgi processes spawned by `fastcgi.spawn` command when standalone server receives SIGINT #444 (Kazuho Oku)
- [file] fix file descriptor leak on multi-range request #434 (Justin Zhu)
- [ssl] update libressl to 2.2.2 #440 (Kazuho Oku)
- [misc] fix build error in case development files of OpenSSL cannot be found #433 (Kazuho Oku)
1.4.2 2015-07-28 08:02:00+0000
- [fastcgi] do not concatenate the headers (ex. Set-Cookie) sent by a FastCGI app #427 (Kazuho Oku)
- [ssl] for guarding session ticket secret use writer-preferred locks on Linux as well #423 (Kazuho Oku)
- [misc] suppress compiler warnings #415 (Syohei YOSHIDA)
1.4.1 2015-07-22 11:55:00+0000
- [core] respect the value of the `user` configuration directive (was always switching to `nobody`) #416 (Kazuho Oku)
1.4.0 2015-07-22 09:41:00+0000
- [core] add support for the PROXY protocol #386 #389 (Kazuho Oku)
- [core] drop privileges if run as root without `user` directive #410 (Kazuho Oku)
- [fastcgi] pass `HTTPS: on` to FastCGI application if the scheme is HTTPS #379 (Kazuho Oku)
- [fastcgi] drop privileges of the fastcgi process spawned by `fastcgi.spawn` #414 (Kazuho Oku)
- [mruby] introduce experimental mruby handler #378 #387 #399 #402 #404 #408 (Ryosuke Matsumoto)
- [proxy] support application server listening to unix-domain socket #383 (Kazuho Oku)
- [SSL] implement session cache using memcached #391 #395 (Kazuho Oku)
- [SSL] session ticket with automatic rollover, file-based and memcached-based sharing #395 #400 (Kazuho Oku)
- [SSL] fix server crash during startup if more than 4 certificates are used #375 (Kazuho Oku)
- [misc] support for musl (C runtime running on Linux other than glibc) #374 (Bennett Goble)
- [misc] do not spawn processes / create files unless the server is starting #381 (Kazuho Oku)
- [misc] support for OpenIndiana (and other Solaris-based OS) #384 (Kazuho Oku)
- [misc] replace select-based backend with poll #385 (Kazuho Oku)
- [misc] update libyaml to 0.1.6 #379 (Martell Malone)
1.3.1 2015-06-19 03:35:00+0000
- [core] do not refuse to start-up when failing to enable TCP Fast Open #368 (Kazuho Oku)
- [fastcgi] fix server start-up issues when using `fastcgi.spawn` #367 (Kazuho Oku)
- [SSL] support OCSP stapling using `openssl ocsp` command built from LibreSSL in addition to OpenSSL #366 (Tatsuhiro Tsujikawa)
1.3.0 2015-06-17 21:53:00+0000
- [core] enable TCP fast-open #356 (Tatsuhiko Kubo)
- [core] improve virtual-host lookup logic #293 #296 (Kazuho Oku)
- [core] fix content being mis-sent for HEAD requests #300 #302 (Kazuho Oku)
- [doc] bundle documents #292 (Kazuho Oku)
- [fastcgi] add FastCGI support #346 #359 #360 #364 (Kazuho Oku)
- [file] support for `If-Range` requests #345 (Justin Zhu)
- [file] send 503 (not 403) in case if too many files are open #304 (Kazuho Oku)
- [http2] add `http2-reprioritize-blocking-assets` directive to optimize first-paint time on Chrome #349 (Kazuho Oku)
- [http2] fix incompliant behavior when the number of stream exceeds the negotiated maximum #341 #352 (Kazuho Oku)
- [proxy] fix potential use-after-free issue in case upstream name is resolved using getaddrinfo #307 (Kazuho Oku)
- [proxy] increase default I/O timeout from 5 to 30 seconds fb5c016 (Kazuho Oku)
- [redirect] support internal redirect #364 (Kazuho Oku)
- [SSL] fix assertion failure during handshake #316 (Kazuho Oku)
- [SSL] fix assertion failure when receiving a corrupt TLS record (http2 only) #297 (Kazuho Oku)
- [SSL] fix build error on OpenSUSE using libressl #337 (Kazuho Oku)
- [SSL] select ALPN protocol based on server-side preference #335 (Justin Zhu)
- [libh2o] build shared libraries as well #324 (pyos)
- [libh2o] build libh2o-evloop #327 (Laurentiu Nicola)
- [misc] emit stacktrace in case of fatal error (Linux only) #331 (Kazuho Oku)
- [misc] improve NetBSD compatibility #289 (Kazuho Oku)
- [misc] fix file descriptor leaks #336 (Kazuho Oku)
1.2.0 2015-04-14 07:13:00+0000
- [core] bundle libyaml #248 (Kazuho Oku)
- [core] implement master-worker process mode and daemon mode (bundles Server::Starter) #258 #270 (Kazuho Oku)
- [file] more mime-types by default #250 #254 #280 (Tatsuhiko Kubo, George Liu, Kazuho Oku)
- [file][http1] fix connection being closed if the length of content is zero #276 (Kazuho Oku)
- [headers] fix heap overrun during configuration #251 (Kazuho Oku)
- [http2] do not delay sending PUSH_PROMISE #221 (Kazuho Oku)
- [http2] reduce memory footprint under high load #271 (Kazuho Oku)
- [http2] fix incorrect error sent when number of streams exceed the limit #268 (Kazuho Oku)
- [proxy] fix heap overrun when building request sent to upstream #266 #269 (Moto Ishizawa, Kazuho Oku)
- [proxy] fix laggy response in case the length of content is zero #274 #276 (Kazuho Oku)
- [SSL] fix potential stall while reading data from client #268 (Kazuho Oku)
- [SSL] bundle LibreSSL #236 #272 (Kazuho Oku)
- [SSL] obtain source-level compatibility with BoringSSL #228 (Kazuho Oku)
- [SSL] add directive `listen.ssl.cipher-preference` for controlling the selection logic of cipher-suites #233 (Kazuho Oku)
- [SSL] disable TLS compression #252 (bisho)
- [libh2o] fix C++ compatibility (do not use empty struct) #225 (Kazuho Oku)
- [libh2o] search external dependencies using pkg-config #227 (Kazuho Oku)
- [misc] fix GCC version detection bug used for controlling compiler warnings #224 (Kazuho Oku)
- [misc] check merory allocation failures in socket pool #265 (Tatsuhiko Kubo)
1.1.1 2015-03-09 06:12:00+0000
- [proxy] fix crash on NetBSD when upstream connection is persistent #217 (Kazuho Oku)
- [misc] fix compile error on FreeBSD #211 #212 (Syohei Yoshida)
1.1.0 2015-03-06 06:41:00+0000
- [core][file] send redirects appending '/' as abs-path redirects #209 (Kazuho Oku)
- [headers] add directives for manipulating response headers #204 (Kazuho Oku)
- [http2] do not send a corrupt response if header value is longer than 126 bytes #193 (Kazuho Oku)
- [http2] fix interoperability issue with nghttp2 0.7.5 and above 5c42eb1 (Kazuho Oku)
- [proxy] send `via` header to upstream #191 (Kazuho Oku)
- [proxy] resolve hostname asynchronously #207 (Kazuho Oku)
- [proxy] distribute load between upstream servers (using `rand()`) #208 (Kazuho Oku)
- [proxy] fix a bug that may cause a corrupt `location` header being forwarded #190 (Kazuho Oku)
- [reproxy] add support for `x-reproxy-url` header #187 #197 (Daisuke Maki, Kazuho Oku)
1.0.1 2015-02-23 05:50:00+0000
- [core] change backlog size from 65,536 to 65,535 #183 (Tatsuhiko Kubo)
- [http2] fix assertion failure in HPACK encoder #186 (Kazuho Oku)
- [http2] add `extern` to some global variables that were not marked as such #178 (Kazuho Oku)
- [proxy] close persistent upstream connection if client abruptly closes the stream #188 (Kazuho Oku)
- [proxy] fix internal state corruption in case upstream sends response headers divided into multpile packets #189 (Kazuho Oku)
- [SSL] add host header to OCSP request #176 (Masaaki Hirose)
- [libh2o] do not require header files under `deps/` when using libh2o #173 (Kazuho Oku)
- [libh2o] fix compile error in examples when compiled with `H2O_USE_LIBUV=0` #177 (Kazuho Oku)
- [libh2o] in example, add missing / after the reference path #180 (Matthieu Garrigues)
- [misc] fix invalid HTML in sample page #175 (Deepak Prakash)
1.0.0 2015-02-18 20:01:00+0000
- [core] add redirect handler #150 (Kazuho Oku)
- [core] add `pid-file` directive for specifying the pid file #164 (Kazuho Oku)
- [core] connections accepted by host-specific listeners should not be handled by handlers of other hosts #163 (Kazuho Oku)
- [core] (FreeBSD) fix a bug that prevented the standalone server from booting when run as root #160 (Kazuho Oku)
- [core] switch to pipe-based interthread messaging #154 (Kazuho Oku)
- [core] use kqueue on all BSDs #156 (Kazuho Oku)
- [access-log] more logging directives: %H, %m, %q, %U, %V, %v #158 (Kazuho Oku)
- [access-log] bugfix: header values were not logged when specified using uppercase letters #157 (Kazuho Oku)
- [file] add application/json to defalt MIME-types #159 (Tatsuhiko Kubo)
- [http2] add support for the finalized version of HTTP/2 #166 (Kazuho Oku)
- [http2] fix issues reported by h2spec v0.0.6 #165 (Kazuho Oku)
- [proxy] merge the cookie headers before sending to upstream #161 (Kazuho Oku)
- [proxy] simplify the configuration directives (and make persistent upstream connections as default) #162 (Kazuho Oku)
- [SSL] add configuration directive to preload DH params #148 (Jeff Marrison)
- [libh2o] separate versioning scheme using H2O_LIBRARY_VERSION_* #167 (Kazuho Oku)
0.9.2 2015-02-10 04:17:00+0000
- [core] graceful shutdown on SIGTERM #119 (Kazuho Oku)
- [core] less TCP errors under high load #81 (Kazuho Oku)
- [file] add support for HEAD requests #110 (Mark Hoersken)
- [http1] MSIE workaround (send `Cache-Control: private` in place of Vary) #114 (Kazuho Oku)
- [http2] support server-push #133 (Kazuho Oku)
- [http2] fix spurious RST_STREAMS being sent #132 (Kazuho Oku)
- [http2] weight-based distribution of bandwidth #135 (Kazuho Oku)
- [proxy] added configuration directive `proxy.preserve-host` #112 (Masahiro Nagano)
- [proxy] sends X-Forwarded-For and X-Forwarded-Proto headers #112 (Masahiro Nagano)
- [proxy] stability improvements #61 (Kazuho Oku)
- [misc] adjustments to make the source code more analyzer-friendly #113,#117 (Nick Desaulniers, Maks Naumov)
0.9.1 2015-01-19 21:13:00+0000
- added configuration directives: ssl/cipher-suite, ssl/ocsp-update-interval, ssl/ocsp-max-failures, expires, file.send-gzip
- [http2] added support for draft-16 (draft-14 is also supported)
- [http2] dependency-based prioritization
- [http2] improved conformance to the specification
- [SSL] OCSP stapling (automatically enabled by default)
- [SSL] fix compile error with OpenSSL below version 1.0.1
- [file] content negotiation (serving .gz files)
- [expires] added support for Cache-Control: max-age
- [libh2o] libh2o and the header files installed by `make install`
- [libh2o] fix compile error when used from C++
- automatically setuids to nobody when run as root and if `user` directive is not set
- automatically raises RLIMIT_NOFILE
- uses all CPU cores by default
- now compiles on NetBSD and other BSD-based systems
0.9.0 2014-12-25 20:17:00+0000
- initial release