kn007/patch

Backport some (should be safe) changes from google nginx

CarterLi opened this issue · 4 comments

CarterLi commented

Because of the large size, I put them into my gist: https://gist.github.com/CarterLi/f6e21d4749984a255edc7b358b44bf58

For now, there are 3 patches ported:

  1. Use openssl md5 / sha1
  2. Add $upstream_bytes_sent variable.
  3. Add "proxy_ssl_alpn" directive

All 3 patches are generated from the clean nginx 1.15.0 code base and can be applied together with sslconfig nginx.patch

kn007 commented

Interesting, look great.
Thank you

kevin25 commented

@kn007 @CarterLi Have you tested it with Nginx 1.15.2?

CarterLi commented

Only openssl md5 / sha1 @kevin25

Harvester57 commented

I concur, the OpenSSL MD5/SHA1 patch applies nicely on Nginx 1.15.2