Tuesday, February 28, 2017

H2O version 2.2 beta released with TLS 1.3 support and other improvements

Today I am happy to announce the release of H2O version 2.2.0-beta1.

The release includes 20 changes made by 10 people. It is great to see that the development effort has become a joint work of such a community.

Below are some of the big changes that went into the beta release.

Case preservation of header names under HTTP/1 #1194

Since the release of H2O, we have always used lowercased header names. This is acceptable from the specifications' standpoint since header names are defined to be case-insensitive. Also, HTTP/2 only allows transmission of the names in lowercase.

However, in practice, there are applications that rely on the case of the header names being preserved by a reverse proxy. And it is technically possible to preserve the case of the characters in HTTP/1.

@deweerdt came up with a pull request that preserves the case of the header names whenever possible. As of this writing, case of the chacacters are preserved between the reverse proxy handler and HTTP/1 clients. Header names transmitted through HTTP/2 will continue to be in lower-case due to how they are encoded in HTTP/2.

Pull requests for preserving the headers communicated through other handlers are welcome.

Directives to modify request headers sent through the reverse proxy handler #1126

@zlm2012 has added configuration directives that can be used to tweak the request headers sent to the application server through the reverse proxy handler.

This has been implemented by refactoring and generalizing the headers handler that has been used to modify the response headers; so now it is possible to modify the request headers in any way that is possible to modify the response headers!

Support for TLS 1.3 draft-18 #1204

Our in-house implementation of TLS 1.3 (named picotls) has landed to master. Picotls provides an efficient (zero-copy) and clean-cut API (designed as a codec rather than an an I/O abstraction) for the upcoming version 1.3 of the TLS protocol.

Thanks to the library, H2O now implements all the features that is necessary to run TLS 1.3 in production and for performance; including support for session resumption, 0-RTT data, OCSP stapling.

Use of picotls is enabled by default; to disable it, set max-version property of the ssl configuration directive to tlsv1.2.

Bug fixes thanks to code analysis #1174 #1110

@hbowden worked on integrating Coverity to H2O. The static analysis tool has found several issues and they have been fixed.

@jfoote and @deweerdt worked on integrating Google's continuous fuzzing to H2O. As a result of the integration, several issues were found and fixed in H2O.

19 comments:

  1. I like your topic of selection for blog but want to suggest you for sharing some more information regarding your subject so that we can understand your thought more clearly
    starfall | barney | abcya

    ReplyDelete
  2. This is one of the cult game now, a lot of people enjoy playing them . Also you can refer to the game :
    animal jam 2 | five nights at freddys 2 | hotmail login

    ReplyDelete


  3. The share your really gives us excitement. Thanks for your sharing. If you feel tired at work or study try to participate in our games to bring the most exciting feeling. Thank you!
    hotmail login | red ball | 192.168.1.1

    ReplyDelete
  4. This is really nice blog here is very interesting things for us it's amazing thanks for sharing.
    - Run 2 play

    ReplyDelete
  5. Thank you for the news. It's great to see new updates.
    lenny face generator

    ReplyDelete
  6. This App will help you organize your knowledge and get ready to take and pass the Licensure Exam for Registered Nurses. Look for it From Ben Sheehan: Exam Countdown is a free and simple app to keep track of exam dates.

    ReplyDelete
  7. Add your own toasts, or edit the toasts you saved in the Favorites section. download driver You do not need to create accounts with 3rd parties to use B.

    ReplyDelete
  8. Purchased books can be synchronized between your devices. check out this Endless play option for when you want the met to click until you stop it.

    ReplyDelete
  9. Reinforce the concept by saying the picture pattern out loud. downlodable apps Food, supplements and cardio will be done on time, every time.

    ReplyDelete
  10. Music from your playlist synchs with your steps, hands-free. downlodable pdf LIMITATIONS - Internet connection is required to compile and run a program.

    ReplyDelete
  11. Interesting article! Thank you for sharing them! I hope you will continue to have similar posts to share with everyone!

    -- five nights at freddy’s --

    ReplyDelete
  12. - E-mail any fact to a friend, and CC or BCC it, too. yamaha portable grand dgx 620 midi driver Instead it gives you an overview of how much time you have spent on the various tasks of your project.

    ReplyDelete
  13. 22-M, to give you confidence that once deleted with TrueEraser, your file data is gone forever. pattayaforum.ru RATING: 12+ Suitable for adults who enjoy humorous mystery novels.

    ReplyDelete
  14. There are so many useful information in your post, I like it all the time. And I want to share this what is aso with you,you can take a look. This is very useful.

    ReplyDelete