Tuesday, April 14, 2015

H2O version 1.2.0 released; bundles LibreSSL by default

This is the release announcement of H2O version 1.2.0. Full list of changes can be found in the Changes. The release includes a fix for a heap-overrun vulnerability in the proxy module; users of prior versions using the H2O as a reverse proxy are urged to upgrade to 1.2.0.

Aside from the bug fixes, we have adjusted the code-base so that no external dependencies would be required when building the standalone server.

One of the hustles while trying to install the older versions of H2O (or any other HTTP/2 server) was that it required the newest version of OpenSSL (version 1.0.2). This is because ALPN, a feature that became only available in version 1.0.2 is essential for the HTTP/2 protocol.

However it is often difficult to upgrade OpenSSL on existing systems, since it is used by other important softwares as well (SSH, etc.).

In H2O version 1.2.0, we have chosen to bundle LibreSSL. LibreSSL is not only considered more stable than OpenSSL; it also support new cipher-suites like chacha20-poly1305, which is the preferred cipher suite of Chrome for Android.

If CMake (the build tool used by H2O) does not detect OpenSSL version 1.0.2 or above, it would instruct the build chain to use LibreSSL being bundled. To enforce the use of libressl being bundled, pass -DWITH_BUNDLED_SSL=on as an argument to CMake (note: you might need to clear the build directory before running cmake). Or set -DWITH_BUNDLED_SSL=off to explicitly disable the use of libressl.

Version 1.2.0 also bundles other dependencies as well, so that the server can be installed as simply as by running cmake, make, and make install.

Have fun!

10 comments:

  1. its a wonderful post that you are giving to us.I am really happy to inform you that its a very nice post and you are explaining it in a very understanding form.Thank you so much.Students can approach custom essay writing service for more details about writing works and students can improve their academic writing skill by taking this service help.

    ReplyDelete
  2. Hello! Read my meaning about healthcare research topics. I hope it will be informative for you.

    ReplyDelete
  3. Every essay writing service is striving to be on top. They go ahead to convince their customers from all over. But only one and genuine thing speaks for the service: quality and reliable. If a service thinks it can convince customers through mere words then it’s wrong. Top essay writing services are identified by their reliability and high quality products. The same applies to top essay writers. There is no way a top essay writing service can host writers who are not qualified academically and professionally. If you would like to find info about “paper writing services review“, welcome to Scamfighter.

    ReplyDelete
  4. Hello! I just read this information and i can tell you that this article is useful. Thank you for sharing it. And rate my essay.

    ReplyDelete
  5. Hello! I simply wish to give an enormous thumbs up for the nice information you will have right here on this post.
    I might be coming again to your blog for more soon

    www.office.com/setup

    ReplyDelete
  6. To support such users in resolving any of the Office Setup regarding issues, we intend to give unique and quality third-party Office Setup services and support via Email, phone, web & live chat. And, with our experienced and skilled experts, we guarantee that you deliver quick resolutions to any www.office.com/setup issues.

    ReplyDelete

Note: Only a member of this blog may post a comment.