The release of the lightweight http server lighttpd 1.4.74 has been published, aiming to combine high performance, security, standards compliance, and configurability. Lighttpd is suitable for high-load systems and focuses on low memory and CPU resource consumption. The project code is written in C and is distributed under the BSD license.
I den nya versionen:
- The behavior of data logging using syslog has changed (enabled by the parameter «server.errorlog-use-syslog = âenable'») â previously, all messages were sent only with the LOG_ERROR priority, but now the priority is selected based on the message type (LOG_WARNING, LOG_DEBUG).
- On systems with the Musl C library, the sendfile() call is now supported.
- The mod_dirlisting module has added the option «dir-listing.sort» to define the output sorting.
- In mod_deflate, the configuration «deflate.allowed-encodings» has been enabled, and the bzip2 algorithm has been given the lowest selection priority.
- Support for the operators «if», «elif», «elsif», «elseif», and «else if» has been added to the configuration file.
- In mod_openssl and mod_gnutls, a check for support of TLS implementation at the Linux kernel level (kTLS) has been added.
- Compatibility with the DragonflyBSD operating system has been ensured.
In the next release, several changes that break compatibility are planned. By default, a more secure TLS cipher suite will be activated to protect against session compromise in the event of interception of long-term keys (forward secrecy) and the use of authenticated encryption (AEAD). The set «EECDH+AESGCM:AES256+EECDH:CHACHA20:!SHA1:!SHA256:!SHA384» is expected to be replaced with «EECDH+AESGCM:CHACHA20:!PSK:!DHE».
The second future compatibility change will be in mod_redirect, applying to HTTP/1.1, changing the redirect code from 301 (Moved Permanently) to 308 (Permanent Redirect), unless the parameter «url.redirect-code» is explicitly set. In 2025, version TLSv1.3 is expected to be enabled by default (the MinProtocol parameter will be changed to TLSv1.3).
KĂ€lla: opennet.ru
