the first release of the new main branch , under which the development of new features will continue. In the parallel supported stable only changes related to fixing serious bugs and vulnerabilities are made. Next year, based on the main branch 1.19.x, a stable branch 1.20 will be formed.
Key :
- The ability to verify client certificates using external services based on the OCSP (Online Certificate Status Protocol) has been added. To enable verification, use the ssl_ocsp directive, to configure the cache size — ssl_ocsp_cache, to override the URL , specified in the certificate — ssl_ocsp_responder.
- Fixed the issue that occurred during gRPC backend operations, resulting in the error "upstream sent frame for closed stream" when sending frames to a closed stream.
- Resolved the problem with non-functional , if the "resolver" directive is not specified.
- Addressed a bug that caused connections to HTTP/2 with an incorrect initial sequence to not be reflected in the logs ().
Source: opennet.ru
