Nginx-0.8.17

Changes with nginx 0.8.17 28 Sep
2009

*) Security: now "/../" are disabled in "Destination" request header
   line.

*) Change: now $host variable value is always low case.

*) Feature: the $ssl_session_id variable.

*) Bugfix: socket leak; the bug had appeared in 0.8.11.

Changes with nginx 0.8.17

Thanks Igor – 0.8.17 is on its way into my devel branch PPA right now:

https://launchpad.net/~jdub/+archive/devel

  • Jeff

Hi Igor

thanks :slight_smile:

OpenSuSE/SuSE Enterprise RPMS are submitted for rebuild, and should be
available in 1-2 hrs

http://download.opensuse.org/repositories/server:/http/

Juergen

Igor S. wrote:

Changes with nginx 0.8.17 28 Sep
2009

*) Security: now "/../" are disabled in "Destination" request header
   line.

*) Change: now $host variable value is always low case.

*) Feature: the $ssl_session_id variable.

*) Bugfix: socket leak; the bug had appeared in 0.8.11.

Hi Igor,

Could you explain how $ssl_session_id variable works?

Thanks a lot,

Vi

On Sat, Oct 03, 2009 at 04:02:58AM +0200, Hoang Hoang wrote:

*) Bugfix: socket leak; the bug had appeared in 0.8.11.

Hi Igor,

Could you explain how $ssl_session_id variable works?

This variable is the same as Apache’s SSL_SESSION_ID:

http://www.modssl.org/docs/2.8/ssl_reference.html#ToC25

SSL_SESSION_ID string The hex-encoded SSL session id

More information about SSL sessions:
http://www.modssl.org/docs/2.8/ssl_intro.html#ToC12