*) Feature: the "optional_no_ca" parameter of the "ssl_verify_client"
       directive.
       Thanks to Mike Kazantsev and Eric O'Connor.

    *) Feature: the $bytes_sent, $connection, and $connection_requests
       variables can now be used not only in the "log_format" directive.
       Thanks to Benjamin Grössing.

    *) Feature: the "auto" parameter of the "worker_processes" directive.

    *) Bugfix: "cache file ... has md5 collision" alert.

    *) Bugfix: in the ngx_http_gunzip_filter_module.

    *) Bugfix: in the "ssl_stapling" directive.

*) Feature: OCSP stapling support.
Thanks to Comodo, DigiCert and GlobalSign for sponsoring this work.

*) Feature: the "ssl_trusted_certificate" directive.

*) Feature: resolver now randomly rotates addresses returned from cache.
Thanks to Anton Jouline.

*) Bugfix: OpenSSL 0.9.7 compatibility.

*) Feature: multiple "limit_req" limits may be used simultaneously.

*) Bugfix: in error handling while connecting to a backend.
Thanks to Piotr Sikora.

*) Bugfix: in AIO error handling on FreeBSD.

*) Bugfix: in the OpenSSL library initialization.

*) Bugfix: the "proxy_redirect" directives might not be correctly
inherited.

*) Bugfix: memory leak during reconfiguration if the "pcre_jit"
directive was used.

Maxim Dounin

_______________________________________________
nginx-announce mailing list
nginx-announce@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx-announce

*) Feature: the "TLSv1.1" and "TLSv1.2" parameters of the
"ssl_protocols" directive.

*) Bugfix: the "limit_req" directive parameters were not inherited
correctly; the bug had appeared in 1.1.12.

*) Bugfix: the "proxy_redirect" directive incorrectly processed
"Refresh" header if regular expression were used.

*) Bugfix: the "proxy_cache_use_stale" directive with "error" parameter
did not return answer from cache if there were no live upstreams.

*) Bugfix: the "worker_cpu_affinity" directive might not work.

*) Bugfix: nginx could not be built on Solaris; the bug had appeared in
1.1.12.

*) Bugfix: in the ngx_http_mp4_module.

Maxim Dounin

_______________________________________________
nginx-announce mailing list
nginx-announce@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx-announce

*) Change: now cache loader processes either as many files as specified
by "loader_files" parameter or works no more than time specified by
"loader_threshold" parameter during each iteration.

*) Change: now SIGWINCH signal works only in deamon mode.

*) Feature: now shared zones and caches use POSIX semaphores on
Solaris.
Thanks to Den Ivanov.

*) Feature: accept filters are now supported on NetBSD.

*) Bugfix: nginx could not be build on Linux 3.0.

*) Bugfix: nginx did not use gzipping in some cases; the bug had
appeared in 1.1.0.

*) Bugfix: request body might be incorrectly processed if client used
pipelining.

*) Bugfix: in the "request_body_in_single_buf" directive.

*) Bugfix: in "proxy_set_body" and "proxy_pass_request_body" directives
if SSL connection to backend was used.

*) Bugfix: nginx hogged CPU if all servers in an upstream were marked
as "down".

*) Bugfix: a segmentation fault might occur during reconfiguration if
ssl_session_cache was defined but not used in a previous
configuration.

*) Bugfix: a segmentation fault might occur in a worker process if many
backup servers were used in an upstream.

*) Bugfix: a segmentation fault might occur in a worker process if
"fastcgi/scgi/uwsgi_param" directives were used with values starting
with "HTTP_"; the bug had appeared in 0.8.40.

*) Feature: cache loader run time decrease.

*) Feature: "loader_files", "loader_sleep", and "loader_threshold"
options of the "proxy/fastcgi/scgi/uwsgi_cache_path" directives.

*) Feature: loading time decrease of configuration with large number of
HTTPS sites.

*) Feature: now nginx supports ECDHE key exchange ciphers.
Thanks to Adrian Kotelba.

*) Feature: the "lingering_close" directive.
Thanks to Maxim Dounin.

*) Bugfix: in closing connection for pipelined requests.
Thanks to Maxim Dounin.

*) Bugfix: nginx did not disable gzipping if client sent "gzip;q=0" in
"Accept-Encoding" request header line.

*) Bugfix: in timeout in unbuffered proxied mode.
Thanks to Maxim Dounin.

*) Bugfix: memory leaks when a "proxy_pass" directive contains
variables and proxies to an HTTPS backend.
Thanks to Maxim Dounin.

*) Bugfix: in parameter validaiton of a "proxy_pass" directive with
variables.
Thanks to Lanshun Zhou.

*) Bugfix: SSL did not work on QNX.
Thanks to Maxim Dounin.

*) Bugfix: SSL modules could not be built by gcc 4.6 without
--with-debug option.

    *) Bugfix: nginx did not support all ciphers and digests used in client
       certificates.
       Thanks to Innocenty Enikeew.

    *) Bugfix: nginx cached incorrectly FastCGI responses if there was
       large stderr output before response.

    *) Bugfix: nginx did not support HTTPS referrers.

    *) Bugfix: nginx/Windows might not find file if path in configuration
       was given in other character case; the bug had appeared in 0.8.34.

    *) Bugfix: the $date_local variable has an incorrect value, if the "%s"
       format was used.
       Thanks to Maxim Dounin.

    *) Bugfix: if ssl_session_cache was not set or was set to "none", then
       during client certificate verify the error "session id context
       uninitialized" might occur; the bug had appeared in 0.7.1.

    *) Bugfix: a geo range returned default value if the range included two
       or more /16 networks and did not begin at /16 network boundary.

    *) Bugfix: a block used in a "stub" parameter of an "include" SSI
       directive was output with "text/plain" MIME type.

    *) Bugfix: $r->sleep() did not work; the bug had appeared in 0.8.11.

    *) Security: now SSL/TLS renegotiation is disabled.
       Thanks to Maxim Dounin.

    *) Bugfix: listen unix domain socket did not inherit while online
       upgrade.

    *) Bugfix: the "unix:" parameter of the "set_real_ip_from" directive
       did not without yet another directive with any IP address.

    *) Bugfix: segmentation fault and infinite looping in resolver.

    *) Bugfix: in resolver.
       Thanks to Artem Bokhan.

    *) Security: now "/../" are disabled in "Destination" request header
       line.

    *) Change: now $host variable value is always low case.

    *) Feature: the $ssl_session_id variable.

    *) Bugfix: socket leak; the bug had appeared in 0.8.11.

    *) Change: minimum supported OpenSSL version is 0.9.7.

    *) Change: the "ask" parameter of the "ssl_verify_client" directive was
       changed to the "optional" parameter and now it checks a client
       certificate if it was offered.
       Thanks to Brice Figureau.

    *) Feature: the $ssl_client_verify variable.
       Thanks to Brice Figureau.

    *) Feature: the "ssl_crl" directive.
       Thanks to Brice Figureau.

    *) Feature: the "proxy" parameter of the "geo" directive.

    *) Feature: the "image_filter" directive supports variables for setting
       size.

    *) Bugfix: the $ssl_client_cert variable usage corrupted memory; the
       bug had appeared in 0.7.7.
       Thanks to Sergey Zhuravlev.

    *) Bugfix: "proxy_pass_header" and "fastcgi_pass_header" directives did
       not pass to a client the "X-Accel-Redirect", "X-Accel-Limit-Rate",
       "X-Accel-Buffering", and "X-Accel-Charset" lines from backend
       response header.
       Thanks to Maxim Dounin.

    *) Bugfix: in handling "Last-Modified" and "Accept-Ranges" backend
       response header lines; the bug had appeared in 0.7.44.
       Thanks to Maxim Dounin.

    *) Bugfix: the "[alert] zero size buf" error if subrequest returns an
       empty response; the bug had appeared in 0.8.5.