pluknet

Similar to ngx_http_v2_module, the implementation limit is now set to 4 bytes length, see NGX_HTTP_V2_INT_OCTETS in ngx_http_v2_parse_int(). For example, this limits a maximum integer value encoded with a 7-bit prefix...

SSL object cache

3

### Proposed changes WIP as obtained from https://mailman.nginx.org/pipermail/nginx-devel/2024-August/IKMUSKO6KA3UCDEJTXKDPZZZOEZ3THSO.html The series adds object caching of statically specified certificates, certificate keys, CRLs, and CA ceritficates.

The directive allows to pass upstream response trailers to client.

after #242

for #243

- adds a generic conf->upstream comments boilerplate for SCGI - additionally, adds ssl and uwsgi_string comments for Uwsgi - fixes conf->index comment for FastCGI

SmarterMail IMAP server may send an optional untagged CAPABILITY response. Previously resulted in a broken connection, now it is discarded.

SSL: disabled TLSv1 and TLSv1.1 by default.

2

SSL: disabled TLSv1 and TLSv1.1 by default. These TLS protocol versions are formally deprecated and forbidden to negotiate due to insufficient security reasons outlined in RFC 8996. The support was...

Copy custom extensions table in SSL_set_SSL_CTX()

9

The SSL_set_SSL_CTX() function is used to switch SSL contexts for the given SSL object, which may include copying a cert structure from the provided SSL_CTX and extensions flags from the...