ืื ืืืืืืืืื ืืืืคึผ ืกืขืจืืืขืจ lighttpd 1.4.65 ืืื ืืืคืจืืื, ืืจืืื ื ืฆื ืคืึทืจืืื ืื ืืืื ืคืึธืจืฉืืขืืื ื, ืืืืขืจืืืื, ืืขืกืงืขื ืืื ืกืืึทื ืืึทืจืืก ืืื ืืืืืืงืืื ืคืื ืงืึทื ืคืืืืขืจืืืฉืึทื. Lighttpd ืืื ืคึผืึทืกืืง ืคึฟืึทืจ ื ืืฆื ืืืืฃ ืืขืืกื ืืึธืืืื ืกืืกืืขืืขื ืืื ืืื ืึทืืืขื ืฆื ื ืืืขืจืืง ืืึผืจืื ืืื ืงืคึผื ืงืึทื ืกืึทืืฉืึทื. ืื ื ืืึทืข ืืืขืจืกืืข ืึผืืื 173 ืขื ืืขืจืื ืืขื. ืื ืคึผืจืืืขืงื ืงืึธื ืืื ืืขืฉืจืืื ืืื C ืืื ืคืื ืื ืืขืจืืขืืืืื ืืื ืืขืจ ืื BSD ืืขืจืืืืืขื ืืฉ.
ืืืืคึผื ืืืืืฉืื:
- ืฆืืืขืืืืื ืฉืืืฆื ืคึฟืึทืจ ืืืขืืกืึธืงืงืขื ืืืืขืจ ืืืืคึผ / 2, ืืื ืืืคึผืืึทืืขื ืึทื RFC 8441, ืืืึธืก ืืืฉืจืืืื ืึท ืืขืงืึทื ืืืึทื ืคึฟืึทืจ ืคืืืกื ืืืง ืื ืืืขืืกืึธืงืงืขืฅ ืคึผืจืึธืืึธืงืึธื ืืืืฃ ืึท ืืืื ืคืึธืืขื ืืื ืึท ืืืืคึผ / 2 ืงืฉืจ.
- ืึท ืึทืืืึทื ืกืืจืืข ืืืืืขืจืงืืึทื ืคืึทืจืืืึทืืืื ื ืกืืขืืข ืืื ืืืคึผืืึทืืขื ืึทื ืึทื ืึทืืึทืื ืืขืจ ืงืืืขื ื ืฆื ืืฉืคึผืขื ืื ืืืืืขืจืงืืึทื ืคืื ืจืขืกืคึผืึธื ืกืขืก ืืขืฉืืงื ืืืจื ืื ืกืขืจืืืขืจ (RFC 9218), ืืื ืคืืจื ืคึผืจืืืึธืจืึทืืื ืืืขื ืจืืืขืจืขืงืืื ื ืจืืงืืืขืก. HTTP/2 ืืื ืฉืืืฆื ืคึฟืึทืจ ืื PRIORITY_UPDATE ืจืึทื.
- ืืื ืื lighttpd.conf ืกืขืืืื ืืก, ืฉืืืฆื ืคึฟืึทืจ ืงืึทื ืืืฉืึทื ืึทื ืฉืืืขืืขืืขื ืืื ืืืื ืืื ื ืฆื ืื ืึธื ืืืื (=^) ืืื ืกืืฃ (=$) ืคืื ืื ืฉืืจืืงื ืืื ืฆืืืขืืขืื. ืึทืืึท ืฉืืจืืงื ืืฉืขืงืก ืืขื ืขื ืคืื ืคืึทืกืืขืจ ืืื ืจืขืืืืขืจ ืืืืกืืจืืงื ืืื ืืขื ืขื ืืขื ืื ืคึฟืึทืจ ืคืืืข ืคึผืฉืื ืืฉืขืงืก.
- ืฆืืืขืืืืื ืฉืืืฆื ืคึฟืึทืจ ืคึผืึทืจืืืืืฉ PUT ืึทืคึผืขืจืืืฉืึทื ื (ืงืึทืืืขืจื ืืืื ืคืื ืื ืืึทืื ืืื ืื ืงืืื ืืขืืขืจ) ืฆื mod_webdav. ืฆื ืืขืื ืขืก, ืืืจ ืงืขื ืขื ื ืืฆื ืื ืึธืคึผืฆืืข 'webdav.opts += ("partial-put-copy-modify' => "ืืขืื").
- ืฆืืืขืืขืื 'accesslog.escaping = 'json' ืึธืคึผืฆืืข ืฆื mod_accesslog."
- ืฆืืืขืืขืื ืฉืืืฆื ืคึฟืึทืจ ืื ืื ืืื ืืืืืขืคืืึทืืข ืฆื ืืึธื_ืืขืคืืึทืืข.
- ืืขืื ืืืฃ ืืจืึทื ืกืืืกืืข ืืืจื ืืืืคึผ / 2 ืืื ืึทืงืกืขืืขืจืืืืื.
- ืื ืคืขืืืงืืึทื ืืืขืจื ืคืื ืื server.max-keep-alive-requests ืคึผืึทืจืึทืืขืืขืจ ืืื ืคืืจืขื ืืขืจื ืคืื 100 ืฆื 1000.
- ืืื ืืขืจ ืจืฉืืื ืคืื ืืืื ืืืืคึผืก, "ืึทืคึผืืึทืงืืืฉืึทื / ืืืฉืึทืืืึทืกืงืจืืคึผื" ืืื ืจืืคึผืืืืกื ืืืจื "ืืขืงืกื / ืืืฉืึทืืืึทืกืงืจืืคึผื" (RFC 9239).
ืฆืืงืื ืคึฟื ืคึผืืึทื ื ืึทืจืืึทื ื ืขืืขื ืฉืืจืขื ืืขืจืข ืกืืืคืขืจ ืกืขืืืื ืืก ืคึฟืึทืจ TLS ืืื ืืืกืืืืึทืืื ื ืืขืืึทื ืกืืคืขืจืก ืืืจื ืคืขืืืงืืึทื. ืื ืกืืคืขืจืกืืจืื ื ืืึทืฉืืขืืืงื ืืืขื ืืืื ืืฉืืื ืืืฉื ืคืื "HIGH" ืฆื "EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384". ืืืื ืคึผืืึทื ื ืขื ืคึฟืึทืจ ืืึทืืืึทืืืงืื ื ืืขื ืขื ืคืึทืจืขืืืขืจื TLS ืึธืคึผืฆืืขืก: ssl.honor-cipher-order, ssl.dh-file, ssl.ec-curve, ssl.disable-client-renegotiation, ssl.use-sslv2, ssl.use-sslv3. ืึทืืืืืืึธื ืึทืืื, ืืืจ ืืืขืื ืคืึธืจืืขืฆื ืฆื ืจืืื ืึทืจืืืฃ ืืื ื ืืึทืืืฉืืื, ืืืึธืก ืงืขื ืขื ืืืื ืจืืคึผืืืืกื ืืื ืึท ืืขืจ ืคืืขืงืกืึทืืึทื ืืืึท ืืืคึผืืึทืืขื ืืืืฉืึทื ืคืื mod_magnet. ืืื ืืึทืืื ืืขืจ, ืื ืืึทืืืฉืืื mod_evasive, mod_secdownload, mod_uploadprogress ืืื mod_usertrack ืืขื ืขื ืกืงืขืืืฉืืื ืคึฟืึทืจ ืืึทืืืึทืืืงืื ื.
ืืงืืจ: opennet.ru