Revision history for H2O.

1.5.0 2015-09-30 06:39:00+0000

- [http2] enable `http2-reprioritize-blocking-assets` by default #528 (Kazuho Oku)

- [ssl] fix issues with neverbleed #520 (Kazuho Oku)

1.5.0-beta4 2015-09-23 03:36:00+0000

- [mruby] provide `env['rack.errors']`, `env['SERVER_SOFTWARE']` #517 #519 (Masayoshi Takahashi, Kazuho Oku)

- [ssl] add support for neverbleed - the OpenSSL / LibreSSL privilege separation engine #520 (Kazuho Oku)

1.5.0-beta3 2015-09-18 03:44:00+0000

- [http2] fix crash when `http2-reprioritize-blocking-assets`, `file.custom-handler` are used together #511 #514 (Kazuho Oku)

1.5.0-beta2 2015-09-16 07:00:00+0000

- [serurity fix][file] fix directory traversal (CVE-2015-5638) (Kazuho Oku)

- [mruby] fix build failure when oniguruma is already installed #501 #506 (Kazuho Oku)

- [mruby] update sample mruby app to use rack-based API #498 (Masayoshi Takahashi)

1.5.0-beta1 2015-09-11 06:15:49+0000

- [core] introduce `is_compressible` and `priority` attributes to MIME map #436 #496 (Kazuho Oku)

- [access-log] fix bug that emitted unnecessary NUL char in certain conditions #462 #463 (Kazuho Oku)

- [fastcgi] support for http2 server-push using `link: rel=preload` header #446 (Kazuho Oku)

- [file] send `etag` and `vary` headers on 304 response #439 (Kazuho Oku)

- [file] sort directory listing #412 #474 (Kazuho Oku)

- [gzip] introduce support for on-the-fly gzip #413 #457 (Justin Zhu)

- [http2] introduce cookie-based implementation of cache-aware server-push #421 #432 (Kazuho Oku)

- [http2] improve HPACK compression ratio of server-push #450 (Kazuho Oku)

- [http2] never push if client requested not to #464 (Kazuho Oku)

- [http2] send `content-length` if possible #472 (Kazuho Oku)

- [mruby] production-level support using Rack-based interface #467 #475 #489 (Kazuho Oku)

- [reproxy] support delegation using relative URL #468 (Kazuho Oku)

- [reproxy] preserve method if status is 307 or 308 #491 (Kazuho Oku)

- [ssl] improved error handling of `openssl ocsp` command #449 #454 (Tatsuhiro Tsujikawa)

- [ssl] use libressl on ARM as well #485 (Kazuho Oku)

1.4.4 2015-08-17 21:45:00+0000

- [misc] fix install error of libh2o-evloop in case development files of OpenSSL cannot be found #443 (Kazuho Oku)

1.4.3 2015-08-17 01:25:00+0000

- [fastcgi] change ownership of domain socket when `fastcgi.spawn` command is used #443 (Masaki TAGAWA)

- [fastcgi] kill fastcgi processes spawned by `fastcgi.spawn` command when standalone server receives SIGINT #444 (Kazuho Oku)

- [file] fix file descriptor leak on multi-range request #434 (Justin Zhu)

- [ssl] update libressl to 2.2.2 #440 (Kazuho Oku)

- [misc] fix build error in case development files of OpenSSL cannot be found #433 (Kazuho Oku)

1.4.2 2015-07-28 08:02:00+0000

- [fastcgi] do not concatenate the headers (ex. Set-Cookie) sent by a FastCGI app #427 (Kazuho Oku)

- [ssl] for guarding session ticket secret use writer-preferred locks on Linux as well #423 (Kazuho Oku)

- [misc] suppress compiler warnings #415 (Syohei YOSHIDA)

1.4.1 2015-07-22 11:55:00+0000

- [core] respect the value of the `user` configuration directive (was always switching to `nobody`) #416 (Kazuho Oku)

1.4.0 2015-07-22 09:41:00+0000

- [core] add support for the PROXY protocol #386 #389 (Kazuho Oku)

- [core] drop privileges if run as root without `user` directive #410 (Kazuho Oku)

- [fastcgi] pass `HTTPS: on` to FastCGI application if the scheme is HTTPS #379 (Kazuho Oku)

- [fastcgi] drop privileges of the fastcgi process spawned by `fastcgi.spawn` #414 (Kazuho Oku)

- [mruby] introduce experimental mruby handler #378 #387 #399 #402 #404 #408 (Ryosuke Matsumoto)

- [proxy] support application server listening to unix-domain socket #383 (Kazuho Oku)

- [SSL] implement session cache using memcached #391 #395 (Kazuho Oku)

- [SSL] session ticket with automatic rollover, file-based and memcached-based sharing #395 #400 (Kazuho Oku)

- [SSL] fix server crash during startup if more than 4 certificates are used #375 (Kazuho Oku)

- [misc] support for musl (C runtime running on Linux other than glibc) #374 (Bennett Goble)

- [misc] do not spawn processes / create files unless the server is starting #381 (Kazuho Oku)

- [misc] support for OpenIndiana (and other Solaris-based OS) #384 (Kazuho Oku)

- [misc] replace select-based backend with poll #385 (Kazuho Oku)

- [misc] update libyaml to 0.1.6 #379 (Martell Malone)

1.3.1 2015-06-19 03:35:00+0000

- [core] do not refuse to start-up when failing to enable TCP Fast Open #368 (Kazuho Oku)

- [fastcgi] fix server start-up issues when using `fastcgi.spawn` #367 (Kazuho Oku)

- [SSL] support OCSP stapling using `openssl ocsp` command built from LibreSSL in addition to OpenSSL #366 (Tatsuhiro Tsujikawa)

1.3.0 2015-06-17 21:53:00+0000

- [core] enable TCP fast-open #356 (Tatsuhiko Kubo)

- [core] improve virtual-host lookup logic #293 #296 (Kazuho Oku)

- [core] fix content being mis-sent for HEAD requests #300 #302 (Kazuho Oku)

- [doc] bundle documents #292 (Kazuho Oku)

- [fastcgi] add FastCGI support #346 #359 #360 #364 (Kazuho Oku)

- [file] support for `If-Range` requests #345 (Justin Zhu)

- [file] send 503 (not 403) in case if too many files are open #304 (Kazuho Oku)

- [http2] add `http2-reprioritize-blocking-assets` directive to optimize first-paint time on Chrome #349 (Kazuho Oku)

- [http2] fix incompliant behavior when the number of stream exceeds the negotiated maximum #341 #352 (Kazuho Oku)

- [proxy] fix potential use-after-free issue in case upstream name is resolved using getaddrinfo #307 (Kazuho Oku)

- [proxy] increase default I/O timeout from 5 to 30 seconds fb5c016 (Kazuho Oku)

- [redirect] support internal redirect #364 (Kazuho Oku)

- [SSL] fix assertion failure during handshake #316 (Kazuho Oku)

- [SSL] fix assertion failure when receiving a corrupt TLS record (http2 only) #297 (Kazuho Oku)

- [SSL] fix build error on OpenSUSE using libressl #337 (Kazuho Oku)

- [SSL] select ALPN protocol based on server-side preference #335 (Justin Zhu)

- [libh2o] build shared libraries as well #324 (pyos)

- [libh2o] build libh2o-evloop #327 (Laurentiu Nicola)

- [misc] emit stacktrace in case of fatal error (Linux only) #331 (Kazuho Oku)

- [misc] improve NetBSD compatibility #289 (Kazuho Oku)

- [misc] fix file descriptor leaks #336 (Kazuho Oku)

1.2.0 2015-04-14 07:13:00+0000

- [core] bundle libyaml #248 (Kazuho Oku)

- [core] implement master-worker process mode and daemon mode (bundles Server::Starter) #258 #270 (Kazuho Oku)

- [file] more mime-types by default #250 #254 #280 (Tatsuhiko Kubo, George Liu, Kazuho Oku)

- [file][http1] fix connection being closed if the length of content is zero #276 (Kazuho Oku)

- [headers] fix heap overrun during configuration #251 (Kazuho Oku)

- [http2] do not delay sending PUSH_PROMISE #221 (Kazuho Oku)

- [http2] reduce memory footprint under high load #271 (Kazuho Oku)

- [http2] fix incorrect error sent when number of streams exceed the limit #268 (Kazuho Oku)

- [proxy] fix heap overrun when building request sent to upstream #266 #269 (Moto Ishizawa, Kazuho Oku)

- [proxy] fix laggy response in case the length of content is zero #274 #276 (Kazuho Oku)

- [SSL] fix potential stall while reading data from client #268 (Kazuho Oku)

- [SSL] bundle LibreSSL #236 #272 (Kazuho Oku)

- [SSL] obtain source-level compatibility with BoringSSL #228 (Kazuho Oku)

- [SSL] add directive `listen.ssl.cipher-preference` for controlling the selection logic of cipher-suites #233 (Kazuho Oku)

- [SSL] disable TLS compression #252 (bisho)

- [libh2o] fix C++ compatibility (do not use empty struct) #225 (Kazuho Oku)

- [libh2o] search external dependencies using pkg-config #227 (Kazuho Oku)

- [misc] fix GCC version detection bug used for controlling compiler warnings #224 (Kazuho Oku)

- [misc] check merory allocation failures in socket pool #265 (Tatsuhiko Kubo)

1.1.1 2015-03-09 06:12:00+0000

- [proxy] fix crash on NetBSD when upstream connection is persistent #217 (Kazuho Oku)

- [misc] fix compile error on FreeBSD #211 #212 (Syohei Yoshida)

1.1.0 2015-03-06 06:41:00+0000

- [core][file] send redirects appending '/' as abs-path redirects #209 (Kazuho Oku)

- [headers] add directives for manipulating response headers #204 (Kazuho Oku)

- [http2] do not send a corrupt response if header value is longer than 126 bytes #193 (Kazuho Oku)

- [http2] fix interoperability issue with nghttp2 0.7.5 and above 5c42eb1 (Kazuho Oku)

- [proxy] send `via` header to upstream #191 (Kazuho Oku)

- [proxy] resolve hostname asynchronously #207 (Kazuho Oku)

- [proxy] distribute load between upstream servers (using `rand()`) #208 (Kazuho Oku)

- [proxy] fix a bug that may cause a corrupt `location` header being forwarded #190 (Kazuho Oku)

- [reproxy] add support for `x-reproxy-url` header #187 #197 (Daisuke Maki, Kazuho Oku)

1.0.1 2015-02-23 05:50:00+0000

- [core] change backlog size from 65,536 to 65,535 #183 (Tatsuhiko Kubo)

- [http2] fix assertion failure in HPACK encoder #186 (Kazuho Oku)

- [http2] add `extern` to some global variables that were not marked as such #178 (Kazuho Oku)

- [proxy] close persistent upstream connection if client abruptly closes the stream #188 (Kazuho Oku)

- [proxy] fix internal state corruption in case upstream sends response headers divided into multpile packets #189 (Kazuho Oku)

- [SSL] add host header to OCSP request #176 (Masaaki Hirose)

- [libh2o] do not require header files under `deps/` when using libh2o #173 (Kazuho Oku)

- [libh2o] fix compile error in examples when compiled with `H2O_USE_LIBUV=0` #177 (Kazuho Oku)

- [libh2o] in example, add missing / after the reference path #180 (Matthieu Garrigues)

- [misc] fix invalid HTML in sample page #175 (Deepak Prakash)

1.0.0 2015-02-18 20:01:00+0000

- [core] add redirect handler #150 (Kazuho Oku)

- [core] add `pid-file` directive for specifying the pid file #164 (Kazuho Oku)

- [core] connections accepted by host-specific listeners should not be handled by handlers of other hosts #163 (Kazuho Oku)

- [core] (FreeBSD) fix a bug that prevented the standalone server from booting when run as root #160 (Kazuho Oku)

- [core] switch to pipe-based interthread messaging #154 (Kazuho Oku)

- [core] use kqueue on all BSDs #156 (Kazuho Oku)

- [access-log] more logging directives: %H, %m, %q, %U, %V, %v #158 (Kazuho Oku)

- [access-log] bugfix: header values were not logged when specified using uppercase letters #157 (Kazuho Oku)

- [file] add application/json to defalt MIME-types #159 (Tatsuhiko Kubo)

- [http2] add support for the finalized version of HTTP/2 #166 (Kazuho Oku)

- [http2] fix issues reported by h2spec v0.0.6 #165 (Kazuho Oku)

- [proxy] merge the cookie headers before sending to upstream #161 (Kazuho Oku)

- [proxy] simplify the configuration directives (and make persistent upstream connections as default) #162 (Kazuho Oku)

- [SSL] add configuration directive to preload DH params #148 (Jeff Marrison)

- [libh2o] separate versioning scheme using H2O_LIBRARY_VERSION_* #167 (Kazuho Oku)

0.9.2 2015-02-10 04:17:00+0000

- [core] graceful shutdown on SIGTERM #119 (Kazuho Oku)

- [core] less TCP errors under high load #81 (Kazuho Oku)

- [file] add support for HEAD requests #110 (Mark Hoersken)

- [http1] MSIE workaround (send `Cache-Control: private` in place of Vary) #114 (Kazuho Oku)

- [http2] support server-push #133 (Kazuho Oku)

- [http2] fix spurious RST_STREAMS being sent #132 (Kazuho Oku)

- [http2] weight-based distribution of bandwidth #135 (Kazuho Oku)

- [proxy] added configuration directive `proxy.preserve-host` #112 (Masahiro Nagano)

- [proxy] sends X-Forwarded-For and X-Forwarded-Proto headers #112 (Masahiro Nagano)

- [proxy] stability improvements #61 (Kazuho Oku)

- [misc] adjustments to make the source code more analyzer-friendly #113,#117 (Nick Desaulniers, Maks Naumov)

0.9.1 2015-01-19 21:13:00+0000

- added configuration directives: ssl/cipher-suite, ssl/ocsp-update-interval, ssl/ocsp-max-failures, expires, file.send-gzip

- [http2] added support for draft-16 (draft-14 is also supported)

- [http2] dependency-based prioritization

- [http2] improved conformance to the specification

- [SSL] OCSP stapling (automatically enabled by default)

- [SSL] fix compile error with OpenSSL below version 1.0.1

- [file] content negotiation (serving .gz files)

- [expires] added support for Cache-Control: max-age

- [libh2o] libh2o and the header files installed by `make install`

- [libh2o] fix compile error when used from C++

- automatically setuids to nobody when run as root and if `user` directive is not set

- automatically raises RLIMIT_NOFILE

- uses all CPU cores by default

- now compiles on NetBSD and other BSD-based systems

0.9.0 2014-12-25 20:17:00+0000

- initial release