/
Changes
281 lines (252 loc) · 18.4 KB
/
Changes
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
Revision history for H2O.
1.7.0 2016-02-05 02:03:00+0000
- [core] support for wildcard hostnames #634 (Kazuho Oku)
- [core][file] preserve query paramaters upon redirection to a directory #690 (Tatsuhiro Tsujikawa)
- [core] use uppercase letters in URI-escape sequence #695 (Kazuho Oku)
- [core] forbid duplicates in `hosts` section #709 (Kazuho Oku)
- [fastcgi] add support for CGI #618 (Kazuho Oku)
- [fastcgi] drop transfer-encoding header #641 (Kazuho Oku)
- [file] fix a bug that caused `file.mime.addtypes` to fail setting the attributes of a content-type #731 (Kazuho Oku)
- [http2] fix broken `PUSH_PROMISE` frames being sent under high pressure #734 #736 (Kazuho Oku)
- [mruby] provide `env["rack.input"]` #515 #638 #644 (Masayoshi Takahashi, Kazuho Oku)
- [mruby] HTTP client API #637 #643 (Kazuho Oku)
- [mruby] dump the ruby source on error #631 (Kazuho Oku)
- [mruby] provide access to `$H2O_ROOT` #629 (Kazuho Oku)
- [mruby] change mrb_int to 64-bit on 64-bit systems #639 (Kazuho Oku)
- [mruby] concatenate request headers having same name #666 (Kazuho Oku)
- [mruby] bundle mruby-errno, mruby-file-stat #675 (Kazuho Oku)
- [mruby] refrain from building mruby handler by default if mkmf (part of ruby dev files) is not found #710 (Kazuho Oku)
- [proxy] detect upstream close of pooled socket before reuse #679 (Kazuho Oku)
- [reproxy] add support for relative URI #712 (Kazuho Oku)
- [ssl] turn on neverbleed by default #633 (Kazuho Oku)
- [libh2o] fix memory leaks during destruction #724 (greatwar)
- [libh2o] simplify vector operations #715 #735 (Domingo Alvarez Duarte)
- [misc] support basic authentication using .htpasswd #624 (Kazuho Oku)
- [misc] fix build error when an older version of H2O is installed aside an external dependency #718 #722 #736 (Kazuho Oku)
1.6.3 2016-01-26 07:46:00+0000
- [fastcgi][proxy] fix double-free issue during configuration phase #723 (Kazuho Oku)
- [proxy] fix response getting truncated when neither content-length nor transfer-encoding is used #725 (Kazuho Oku)
- [websocket] fix crash when access-log is enabled #698 (Shota Fukumori)
1.6.2 2016-01-13 06:24:00+0000
- [security fix][redirect] uri-escape the user-supplied portion of the redirect path (CVE-2016-1133) #682 #684 (Kazuho Oku)
- [core] fix error when trying to set multiple error documents using one `error-doc` directive #676 (Yamagishi Kazutoshi)
- [file] fix a bug that incorrectly returns 403 when a file is requested with a trailing slash #686 (Yamagishi Kazutoshi)
- [http2] fix HPACK encoder error (and crash) when trying to encode a token wo. hpack index #640 (Kazuho Oku)
- [libh2o] fix race condition during multithread receiver (un)registration #659 (Chul-Woong Yang)
- [libh2o] fix memory leak on dispose #683 (Kazuho Oku)
1.6.1 2015-12-18 05:05:00+0000
- [misc] fix build error on armv8a #628 (Kazuho Oku)
- [misc] fix build error when libuv < 1.0.0 is installed #630 (Kazuho Oku)
1.6.0 2015-12-04 05:47:00+0000
- [core] customized error pages #606 (Kazuho Oku)
- [core] fix busy loop when receiving RST packet under certain conditions #603 (Kazuho Oku)
- [access-log] collect and log various timings #583 (Kazuho Oku)
- [access-log] support '%A' and '%p' #585 (Kazuho Oku)
- [access-log] support '%{...}t' compatibile with Apache HTTP Server #587 (Kazuho Oku)
- [fastcgi] increase backlog size the bundled fastcgi server #588 (Kazuho Oku)
- [fastcgi] fix uninitialized memory access / memory leak during startup #611 (Kazuho Oku)
- [file] implement file descriptor cache #596 (Kazuho Oku)
- [http2] increase incoming window size from 256KB to 16MB #582 (Kazuho Oku)
- [http2] decrease memory footprint (and speedup) #599 (Kazuho Oku)
- [http2] start server push before the response headers for the original request becomes ready #593 (Kazuho Oku)
- [http2] fix issues reported by h2spec 1.2.0 #595 (Kazuho Oku)
- [http2] fix NULL access when an error during upgrade from HTTP/1 #607 (Kazuho Oku)
- [http2] fix too-many-streams error with h2load #608 (Kazuho Oku)
- [websocket] support proxying websocket connections #581 (Justin Zhu)
- [libh2o] fix compiler warnings #598 (Matt Clarkson, Kazuho Oku)
- [misc] downgrade required CMake version to 2.8.11 #594 (Kazuho Oku)
1.5.4 2015-11-12 04:05:00+0000
- [access-log] do not emit protocol and authority for `%U` #586 (Kazuho Oku)
- [ssl] fix handshake failure with older versions of Android (2.x) #591 (Kazuho Oku)
1.5.3 2015-11-06 04:30:00+0000
- [core] decode url-encoded character at the end of path #567 (Kazuho Oku)
- [access-log] fix startup failure on OSX when configured to emit to pipe #580 (Kazuho Oku)
- [http2] fix memory / state corruption in HPACK encoder #571 (Tatsuhiro Tsujikawa, Kazuho Oku)
- [http2] improve HPACK compression ratio #573 (Tatsuhiro Tsujikawa, Kazuho Oku)
- [http2] fix behavior when HEADERS frame specifies a stream not open as a dependency #575 (Kazuho Oku)
- [proxy] do not reset HTTP2 push paths when request is delegated to proxy #579 (Kazuho Oku)
- [ssl] include "http/1.1" in ALPN / NPN protocol selection list #578 (Kazuho Oku)
1.5.2 2015-10-20 06:49:00+0000
- [http2] fix stall when only reprioritized streams are being transferred #564 (Kazuho Oku)
1.5.1 2015-10-20 01:13:00+0000
- [file] fixed directory listing not alphabetically sorted #412 #474 #539 (Kazuho Oku)
- [file] mime-type lookup should be case-insensitive #561 (Kazuho Oku)
- [file] fix corrupt links in directory listing #562 (Kazuho Oku)
- [http1] preserve HTTP connection after redirect #552 (Kazuho Oku)
- [http2] fixed reprioritized streams (to highest) sometimes being interleaved with lower priority streams #550 (Kazuho Oku)
- [libh2o] add `-DWITHOUT_LIBS=ON` configuration option #551 (Kazuho Oku)
- [libh2o] adjustments to build libh2o in a subdirectory #556 (Futur Solo)
- [misc] rewrite setuidgid helper program in Perl #553 (Kazuho Oku)
- [misc] fix doc issues #530 #547 #549 (Masaki TAGAWA, Kazuho Oku, Kazu Yamamoto)
1.5.0 2015-09-30 06:39:00+0000
- [http2] enable `http2-reprioritize-blocking-assets` by default #528 (Kazuho Oku)
- [ssl] fix issues with neverbleed #520 (Kazuho Oku)
1.5.0-beta4 2015-09-23 03:36:00+0000
- [mruby] provide `env['rack.errors']`, `env['SERVER_SOFTWARE']` #517 #519 (Masayoshi Takahashi, Kazuho Oku)
- [ssl] add support for neverbleed - the OpenSSL / LibreSSL privilege separation engine #520 (Kazuho Oku)
1.5.0-beta3 2015-09-18 03:44:00+0000
- [http2] fix crash when `http2-reprioritize-blocking-assets`, `file.custom-handler` are used together #511 #514 (Kazuho Oku)
1.5.0-beta2 2015-09-16 07:00:00+0000
- [serurity fix][file] fix directory traversal (CVE-2015-5638) (Kazuho Oku)
- [mruby] fix build failure when oniguruma is already installed #501 #506 (Kazuho Oku)
- [mruby] update sample mruby app to use rack-based API #498 (Masayoshi Takahashi)
1.5.0-beta1 2015-09-11 06:15:49+0000
- [core] introduce `is_compressible` and `priority` attributes to MIME map #436 #496 (Kazuho Oku)
- [access-log] fix bug that emitted unnecessary NUL char in certain conditions #462 #463 (Kazuho Oku)
- [fastcgi] support for http2 server-push using `link: rel=preload` header #446 (Kazuho Oku)
- [file] send `etag` and `vary` headers on 304 response #439 (Kazuho Oku)
- [file] sort directory listing #412 #474 (Kazuho Oku)
- [gzip] introduce support for on-the-fly gzip #413 #457 (Justin Zhu)
- [http2] introduce cookie-based implementation of cache-aware server-push #421 #432 (Kazuho Oku)
- [http2] improve HPACK compression ratio of server-push #450 (Kazuho Oku)
- [http2] never push if client requested not to #464 (Kazuho Oku)
- [http2] send `content-length` if possible #472 (Kazuho Oku)
- [mruby] production-level support using Rack-based interface #467 #475 #489 (Kazuho Oku)
- [reproxy] support delegation using relative URL #468 (Kazuho Oku)
- [reproxy] preserve method if status is 307 or 308 #491 (Kazuho Oku)
- [ssl] improved error handling of `openssl ocsp` command #449 #454 (Tatsuhiro Tsujikawa)
- [ssl] use libressl on ARM as well #485 (Kazuho Oku)
1.4.4 2015-08-17 21:45:00+0000
- [misc] fix install error of libh2o-evloop in case development files of OpenSSL cannot be found #443 (Kazuho Oku)
1.4.3 2015-08-17 01:25:00+0000
- [fastcgi] change ownership of domain socket when `fastcgi.spawn` command is used #443 (Masaki TAGAWA)
- [fastcgi] kill fastcgi processes spawned by `fastcgi.spawn` command when standalone server receives SIGINT #444 (Kazuho Oku)
- [file] fix file descriptor leak on multi-range request #434 (Justin Zhu)
- [ssl] update libressl to 2.2.2 #440 (Kazuho Oku)
- [misc] fix build error in case development files of OpenSSL cannot be found #433 (Kazuho Oku)
1.4.2 2015-07-28 08:02:00+0000
- [fastcgi] do not concatenate the headers (ex. Set-Cookie) sent by a FastCGI app #427 (Kazuho Oku)
- [ssl] for guarding session ticket secret use writer-preferred locks on Linux as well #423 (Kazuho Oku)
- [misc] suppress compiler warnings #415 (Syohei YOSHIDA)
1.4.1 2015-07-22 11:55:00+0000
- [core] respect the value of the `user` configuration directive (was always switching to `nobody`) #416 (Kazuho Oku)
1.4.0 2015-07-22 09:41:00+0000
- [core] add support for the PROXY protocol #386 #389 (Kazuho Oku)
- [core] drop privileges if run as root without `user` directive #410 (Kazuho Oku)
- [fastcgi] pass `HTTPS: on` to FastCGI application if the scheme is HTTPS #379 (Kazuho Oku)
- [fastcgi] drop privileges of the fastcgi process spawned by `fastcgi.spawn` #414 (Kazuho Oku)
- [mruby] introduce experimental mruby handler #378 #387 #399 #402 #404 #408 (Ryosuke Matsumoto)
- [proxy] support application server listening to unix-domain socket #383 (Kazuho Oku)
- [SSL] implement session cache using memcached #391 #395 (Kazuho Oku)
- [SSL] session ticket with automatic rollover, file-based and memcached-based sharing #395 #400 (Kazuho Oku)
- [SSL] fix server crash during startup if more than 4 certificates are used #375 (Kazuho Oku)
- [misc] support for musl (C runtime running on Linux other than glibc) #374 (Bennett Goble)
- [misc] do not spawn processes / create files unless the server is starting #381 (Kazuho Oku)
- [misc] support for OpenIndiana (and other Solaris-based OS) #384 (Kazuho Oku)
- [misc] replace select-based backend with poll #385 (Kazuho Oku)
- [misc] update libyaml to 0.1.6 #379 (Martell Malone)
1.3.1 2015-06-19 03:35:00+0000
- [core] do not refuse to start-up when failing to enable TCP Fast Open #368 (Kazuho Oku)
- [fastcgi] fix server start-up issues when using `fastcgi.spawn` #367 (Kazuho Oku)
- [SSL] support OCSP stapling using `openssl ocsp` command built from LibreSSL in addition to OpenSSL #366 (Tatsuhiro Tsujikawa)
1.3.0 2015-06-17 21:53:00+0000
- [core] enable TCP fast-open #356 (Tatsuhiko Kubo)
- [core] improve virtual-host lookup logic #293 #296 (Kazuho Oku)
- [core] fix content being mis-sent for HEAD requests #300 #302 (Kazuho Oku)
- [doc] bundle documents #292 (Kazuho Oku)
- [fastcgi] add FastCGI support #346 #359 #360 #364 (Kazuho Oku)
- [file] support for `If-Range` requests #345 (Justin Zhu)
- [file] send 503 (not 403) in case if too many files are open #304 (Kazuho Oku)
- [http2] add `http2-reprioritize-blocking-assets` directive to optimize first-paint time on Chrome #349 (Kazuho Oku)
- [http2] fix incompliant behavior when the number of stream exceeds the negotiated maximum #341 #352 (Kazuho Oku)
- [proxy] fix potential use-after-free issue in case upstream name is resolved using getaddrinfo #307 (Kazuho Oku)
- [proxy] increase default I/O timeout from 5 to 30 seconds fb5c016 (Kazuho Oku)
- [redirect] support internal redirect #364 (Kazuho Oku)
- [SSL] fix assertion failure during handshake #316 (Kazuho Oku)
- [SSL] fix assertion failure when receiving a corrupt TLS record (http2 only) #297 (Kazuho Oku)
- [SSL] fix build error on OpenSUSE using libressl #337 (Kazuho Oku)
- [SSL] select ALPN protocol based on server-side preference #335 (Justin Zhu)
- [libh2o] build shared libraries as well #324 (pyos)
- [libh2o] build libh2o-evloop #327 (Laurentiu Nicola)
- [misc] emit stacktrace in case of fatal error (Linux only) #331 (Kazuho Oku)
- [misc] improve NetBSD compatibility #289 (Kazuho Oku)
- [misc] fix file descriptor leaks #336 (Kazuho Oku)
1.2.0 2015-04-14 07:13:00+0000
- [core] bundle libyaml #248 (Kazuho Oku)
- [core] implement master-worker process mode and daemon mode (bundles Server::Starter) #258 #270 (Kazuho Oku)
- [file] more mime-types by default #250 #254 #280 (Tatsuhiko Kubo, George Liu, Kazuho Oku)
- [file][http1] fix connection being closed if the length of content is zero #276 (Kazuho Oku)
- [headers] fix heap overrun during configuration #251 (Kazuho Oku)
- [http2] do not delay sending PUSH_PROMISE #221 (Kazuho Oku)
- [http2] reduce memory footprint under high load #271 (Kazuho Oku)
- [http2] fix incorrect error sent when number of streams exceed the limit #268 (Kazuho Oku)
- [proxy] fix heap overrun when building request sent to upstream #266 #269 (Moto Ishizawa, Kazuho Oku)
- [proxy] fix laggy response in case the length of content is zero #274 #276 (Kazuho Oku)
- [SSL] fix potential stall while reading data from client #268 (Kazuho Oku)
- [SSL] bundle LibreSSL #236 #272 (Kazuho Oku)
- [SSL] obtain source-level compatibility with BoringSSL #228 (Kazuho Oku)
- [SSL] add directive `listen.ssl.cipher-preference` for controlling the selection logic of cipher-suites #233 (Kazuho Oku)
- [SSL] disable TLS compression #252 (bisho)
- [libh2o] fix C++ compatibility (do not use empty struct) #225 (Kazuho Oku)
- [libh2o] search external dependencies using pkg-config #227 (Kazuho Oku)
- [misc] fix GCC version detection bug used for controlling compiler warnings #224 (Kazuho Oku)
- [misc] check merory allocation failures in socket pool #265 (Tatsuhiko Kubo)
1.1.1 2015-03-09 06:12:00+0000
- [proxy] fix crash on NetBSD when upstream connection is persistent #217 (Kazuho Oku)
- [misc] fix compile error on FreeBSD #211 #212 (Syohei Yoshida)
1.1.0 2015-03-06 06:41:00+0000
- [core][file] send redirects appending '/' as abs-path redirects #209 (Kazuho Oku)
- [headers] add directives for manipulating response headers #204 (Kazuho Oku)
- [http2] do not send a corrupt response if header value is longer than 126 bytes #193 (Kazuho Oku)
- [http2] fix interoperability issue with nghttp2 0.7.5 and above 5c42eb1 (Kazuho Oku)
- [proxy] send `via` header to upstream #191 (Kazuho Oku)
- [proxy] resolve hostname asynchronously #207 (Kazuho Oku)
- [proxy] distribute load between upstream servers (using `rand()`) #208 (Kazuho Oku)
- [proxy] fix a bug that may cause a corrupt `location` header being forwarded #190 (Kazuho Oku)
- [reproxy] add support for `x-reproxy-url` header #187 #197 (Daisuke Maki, Kazuho Oku)
1.0.1 2015-02-23 05:50:00+0000
- [core] change backlog size from 65,536 to 65,535 #183 (Tatsuhiko Kubo)
- [http2] fix assertion failure in HPACK encoder #186 (Kazuho Oku)
- [http2] add `extern` to some global variables that were not marked as such #178 (Kazuho Oku)
- [proxy] close persistent upstream connection if client abruptly closes the stream #188 (Kazuho Oku)
- [proxy] fix internal state corruption in case upstream sends response headers divided into multpile packets #189 (Kazuho Oku)
- [SSL] add host header to OCSP request #176 (Masaaki Hirose)
- [libh2o] do not require header files under `deps/` when using libh2o #173 (Kazuho Oku)
- [libh2o] fix compile error in examples when compiled with `H2O_USE_LIBUV=0` #177 (Kazuho Oku)
- [libh2o] in example, add missing / after the reference path #180 (Matthieu Garrigues)
- [misc] fix invalid HTML in sample page #175 (Deepak Prakash)
1.0.0 2015-02-18 20:01:00+0000
- [core] add redirect handler #150 (Kazuho Oku)
- [core] add `pid-file` directive for specifying the pid file #164 (Kazuho Oku)
- [core] connections accepted by host-specific listeners should not be handled by handlers of other hosts #163 (Kazuho Oku)
- [core] (FreeBSD) fix a bug that prevented the standalone server from booting when run as root #160 (Kazuho Oku)
- [core] switch to pipe-based interthread messaging #154 (Kazuho Oku)
- [core] use kqueue on all BSDs #156 (Kazuho Oku)
- [access-log] more logging directives: %H, %m, %q, %U, %V, %v #158 (Kazuho Oku)
- [access-log] bugfix: header values were not logged when specified using uppercase letters #157 (Kazuho Oku)
- [file] add application/json to defalt MIME-types #159 (Tatsuhiko Kubo)
- [http2] add support for the finalized version of HTTP/2 #166 (Kazuho Oku)
- [http2] fix issues reported by h2spec v0.0.6 #165 (Kazuho Oku)
- [proxy] merge the cookie headers before sending to upstream #161 (Kazuho Oku)
- [proxy] simplify the configuration directives (and make persistent upstream connections as default) #162 (Kazuho Oku)
- [SSL] add configuration directive to preload DH params #148 (Jeff Marrison)
- [libh2o] separate versioning scheme using H2O_LIBRARY_VERSION_* #167 (Kazuho Oku)
0.9.2 2015-02-10 04:17:00+0000
- [core] graceful shutdown on SIGTERM #119 (Kazuho Oku)
- [core] less TCP errors under high load #81 (Kazuho Oku)
- [file] add support for HEAD requests #110 (Mark Hoersken)
- [http1] MSIE workaround (send `Cache-Control: private` in place of Vary) #114 (Kazuho Oku)
- [http2] support server-push #133 (Kazuho Oku)
- [http2] fix spurious RST_STREAMS being sent #132 (Kazuho Oku)
- [http2] weight-based distribution of bandwidth #135 (Kazuho Oku)
- [proxy] added configuration directive `proxy.preserve-host` #112 (Masahiro Nagano)
- [proxy] sends X-Forwarded-For and X-Forwarded-Proto headers #112 (Masahiro Nagano)
- [proxy] stability improvements #61 (Kazuho Oku)
- [misc] adjustments to make the source code more analyzer-friendly #113,#117 (Nick Desaulniers, Maks Naumov)
0.9.1 2015-01-19 21:13:00+0000
- added configuration directives: ssl/cipher-suite, ssl/ocsp-update-interval, ssl/ocsp-max-failures, expires, file.send-gzip
- [http2] added support for draft-16 (draft-14 is also supported)
- [http2] dependency-based prioritization
- [http2] improved conformance to the specification
- [SSL] OCSP stapling (automatically enabled by default)
- [SSL] fix compile error with OpenSSL below version 1.0.1
- [file] content negotiation (serving .gz files)
- [expires] added support for Cache-Control: max-age
- [libh2o] libh2o and the header files installed by `make install`
- [libh2o] fix compile error when used from C++
- automatically setuids to nobody when run as root and if `user` directive is not set
- automatically raises RLIMIT_NOFILE
- uses all CPU cores by default
- now compiles on NetBSD and other BSD-based systems
0.9.0 2014-12-25 20:17:00+0000
- initial release