The main branch of nginx 1.29.2 has been released, continuing the development of new features. The stable branch 1.28.x, which is maintained in parallel, will only receive changes related to fixing serious bugs and vulnerabilities. In the future, a stable branch 1.30 will be formed based on the main branch 1.29.x. The project's code is written in C and is distributed under the BSD license.
In the new release:
- The ability to build with the AWS-LC cryptographic library, developed by Amazon, has been added.
- An issue with the "ssl_protocols" directive has been resolved when used with a virtual server, different from the default server. The problem occurred when using OpenSSL 1.1.1 and later releases.
- A failure in the TLSv1.3 connection negotiation with OpenSSL configurations and client certificates has been fixed. The failure occurred when resuming a session with a different SNI value.
- An error that caused the log message "ignoring stale global SSL error" to appear when using the QUIC protocol and the "ssl_reject_handshake" directive has been corrected.
- An issue with handling time values in the HTTP header "Cache-Control" returned by the backend has been resolved.
- The use of the xtext encoding in the XCLIENT command has been established.
- An issue with caching for TLS certificates during reconfiguration has been resolved.
Additionally, the release of the FreeNginx 1.29.2 project, which is a fork of Nginx, has been noted. The fork is developed by Maxim Dunin, one of the key Nginx developers. FreeNginx is positioned as a non-commercial project that ensures the development of the Nginx codebase without corporate interference. FreeNginx continues to be distributed under the BSD license. Notable changes in FreeNginx 1.29.2 include the addition of support for the TLS extension ECH (Encrypted Client Hello).
Source: opennet.ru
