Tulutsani nginx 1.23.4 ndi TLSv1.3 yothandizidwa mwachisawawa

Kutulutsidwa kwa nthambi yayikulu nginx 1.23.4 kwapangidwa, mkati momwe chitukuko cha zinthu zatsopano chikupitilira. Munthambi yokhazikika ya 1.22.x, yomwe imasungidwa mofanana, kusintha kokha kokhudzana ndi kuchotsedwa kwa nsikidzi zazikulu ndi zofooka zimapangidwa. M'tsogolomu, pamaziko a nthambi yaikulu 1.23.x, nthambi yokhazikika 1.24 idzapangidwa.

Zina mwazosintha:

  • Mwachisawawa, protocol ya TLSv1.3 imayatsidwa.
  • Chenjezo tsopano likuwonetsedwa ngati zoikidwiratu za ma protocol omwe amagwiritsidwa ntchito pa soketi yomvera achotsedwa.
  • Pamene kasitomala amagwiritsa ntchito "mapaipi", maulumikizidwe amatsekedwa pamene akudikirira deta yowonjezera (kutseka pafupi).
  • Thandizo lowonjezera la ma byte mu module ya ngx_http_gzip_static_module.
  • Mulingo wodula mitengo ya zolakwika za SSL "utali wa data wautali kwambiri", "utali waufupi kwambiri", "mtundu woyipa", "palibe ma siginecha ogawana", "utali woyipa wa digest", "sigalgs osowa" wasinthidwa kuchoka ku "crit" kupita ku "information" extension", "encrypted length yaitali kwambiri", "bad length", " bad key update", "kuphatikizana chanza ndi data yosagwirana chanza", "ccs analandira msanga", "data pakati pa ccs ndi kumaliza", "packet length motalika kwambiri" , "zochenjeza zambiri", "mbiri yaying'ono kwambiri" ndi "ndapeza chipsepse pamaso pa ccs".
  • Kugwira ntchito kwa madoko mumayendedwe omvera kwawongoleredwa.
  • Konzani vuto posankha malo olakwika mukamagwiritsa ntchito malo oyambira atali kuposa zilembo 255.
  • Ma module a ngx_http_autoindex_module ndi ngx_http_dav_module, komanso kuphatikiza malangizo, tsopano amathandizira zilembo zomwe si za ASCII m'mafayilo amtundu wa Windows.
  • Konzani kutayikira kwa socket mukamagwiritsa ntchito HTTP/2 ndi error_page malangizo kuti muwongolere zolakwika 400.

Source: opennet.ru

Kuwonjezera ndemanga