/patch

Something could be public patches

MIT LicenseMIT

Patches

Nginx

nginx.patch

  • Add HTTP2 HPACK Encoding Support.
  • Add Dynamic TLS Record support.

Test pass: 1.17.10

nginx_with_quic.patch

  • Add HTTP3(QUIC) Support.
    • For OCSP stapling, maybe you need this.
  • Add HTTP2 HPACK Encoding Support.
  • Add Dynamic TLS Record support.

Test pass: 1.17.10 with cloudflare/quiche 1c5fe75

use_openssl_md5_sha1.patch

  • Use the OpenSSL library instead of the Nginx original function.
  • Repack it because "patch unexpectedly ends in middle of line".

Test pass: 1.17.10

Enable_BoringSSL_OCSP.patch

  • For BoringSSL support OCSP stapling.
    • Using "ssl_stapling_file" to support.
    • Only "ssl_stapling_file" with single cert is supported.
    • Auto-rebuild OCSP stapling file with shell and atd(at cron), you can read this article(Maybe you need a translation tool).
    • Thanks @CarterLi.

Test pass: 1.17.10

nginx_with_spdy.patch (Deprecated)

  • Add SPDY Support.
  • Add HTTP2 HPACK Encoding Support.
  • Add Dynamic TLS Record support.

Test pass: 1.17.9

nginx_with_spdy_quic.patch (Deprecated)

  • Add SPDY Support.
  • Add HTTP3(QUIC) Support.
  • Add HTTP2 HPACK Encoding Support.
  • Add Dynamic TLS Record support.

Test pass: 1.17.9 with cloudflare/quiche 9a8b3b

nginx_strict-sni.patch (Deprecated)

  • Enable Strict-SNI, Protect your site ip without exposing your certificate (From here)
    • Strict SNI requires at least two ssl server (fake) settings (server { listen 443 ssl }).
    • It does not matter what kind of certificate or duplicate.

Test pass: 1.15.5

Other

dropbox_fs_fix.patch

  • For Dropbox Linux users. This patch could let official python script auto-load libdropbox_fs_fix.so library before start dropboxd.
    • Using Dropbox filesystem fix for Linux Repo and make libdropbox_fs_fix.so.
    • After compiled, copy libdropbox_fs_fix.so to $HOME/.dropbox-dist/libdropbox_fs_fix.so.
    • Download Dropbox official python script, put it with patch file together.
    • Patch, enjoy.

Test pass: 2019.02.14 version

Links

让Nginx使用BoringSSL时支持OCSP Stapling

博客终止使用TLS 1.0和TLS 1.1协议

小试HTTP3

我的Nginx编译之旅

解决Dropbox Linux客户端因文件系统导致无法同步问题

kn007的个人博客