diff options
| author | adam <adam@pkgsrc.org> | 2017-05-26 19:47:18 +0000 |
|---|---|---|
| committer | adam <adam@pkgsrc.org> | 2017-05-26 19:47:18 +0000 |
| commit | 682c4bf312b6c573ba64e12655d453faf46198fb (patch) | |
| tree | d3c785295023108caebfae4a8ebf42c1670b7902 /www/nghttp2/Makefile | |
| parent | fbb950427f6d44b4ae78c26bbb8248e97671ce86 (diff) | |
| download | pkgsrc-682c4bf312b6c573ba64e12655d453faf46198fb.tar.gz | |
Changes 1.23.0:
libnghttp2
Previously, if libnghttp2 received an invalid header field, it is just ignored, and is treated like it was never happened. This release changes this behaviour, and now libnghttp2 treats an incoming invalid header field as error, and resets the stream with PROTOCOL_ERROR.
nghttp2_on_invalid_frame_callback is now called if validation of altsvc header field fails.
nghttpx
nghttpx now verifies that OCSP response received from a program specified by --fetch-ocsp-response-file. The validation can be turned off by using --no-verify-ocsp option. In this validation, it makes sure that the OCSP response is targeted to the expected certificate. This is important because we pass the file path to the external program (see --fetch-ocsp-response-file), and if the file is replaced because of renewal, and nghttpx has not reloaded its configuration, the certificate nghttpx has loaded and the one included in the file differ. Verifying the OCSP response detects this, and avoids to send wrong OCSP response.
Diffstat (limited to 'www/nghttp2/Makefile')
| -rw-r--r-- | www/nghttp2/Makefile | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/www/nghttp2/Makefile b/www/nghttp2/Makefile index 2a05c249395..a775639b4e6 100644 --- a/www/nghttp2/Makefile +++ b/www/nghttp2/Makefile @@ -1,7 +1,6 @@ -# $NetBSD: Makefile,v 1.25 2017/04/30 01:21:25 ryoon Exp $ +# $NetBSD: Makefile,v 1.26 2017/05/26 19:47:18 adam Exp $ -DISTNAME= nghttp2-1.22.0 -PKGREVISION= 1 +DISTNAME= nghttp2-1.23.0 CATEGORIES= www MASTER_SITES= ${MASTER_SITE_GITHUB:=tatsuhiro-t/} EXTRACT_SUFX= .tar.xz |