Nginx 1.18 Stable Released With Many Fixes, Improvements

[phoronix]

Phoronix: Nginx 1.18 Stable Released With Many Fixes, Improvements

Nginx 1.18 is out this week as their newest stable branch succeeding the Nginx 1.16 series for this versatile HTTP server and reverse proxy / load balancer / HTTP cache / mail proxy...

http://www.phoronix.com/scan.php?page=news_item&px=Nginx-1.18-Released

[bug77]

Seeing as this thing is everywhere, it's not bad to see it improve. The minimum OpenSSL seems a tad old though.

[S.Pam]

What happened with the patent and code steeling issue around nginx?

[CommunityMember]

What happened with the patent and code steeling issue around nginx?

The criminal case was dropped (with a statement that they reserve the right to file a civil case). The general consensus is that the original filing was an attempted money grab, and that the evidence that is already known will not support a civil case even if filed in the future.

[CommunityMember]

Seeing as this thing is everywhere, it's not bad to see it improve. The minimum OpenSSL seems a tad old though.

Precisely because it is used in some many places the goal will be to try to support the oldest OpenSSL that provides the necessary functionally so that upgrade to the newer nginx does now also require all those sites to upgrade their OpenSSL version, and force a significant upgrade for other packages on the web server (some web server admins use the "if it ain't broke yet, I am not going to break it (upgrade it)" approach). If you need some newest features (TLS 1.3?) you may need to upgrade supporting packages (OpenSSL or BoringSSL?), but not everyone needs/wants the latest capabilities.

[bug77]

Precisely because it is used in some many places the goal will be to try to support the oldest OpenSSL that provides the necessary functionally so that upgrade to the newer nginx does now also require all those sites to upgrade their OpenSSL version, and force a significant upgrade for other packages on the web server (some web server admins use the "if it ain't broke yet, I am not going to break it (upgrade it)" approach). If you need some newest features (TLS 1.3?) you may need to upgrade supporting packages (OpenSSL or BoringSSL?), but not everyone needs/wants the latest capabilities.

That may be, but OpenSSL 0.9.8 is from 2005. It predates heartbleed & co. Unless the actual version is a more recent 0.9.8 variant, but the official docs sure don't mention it.

[squash]

In other news, Caddyserver is nearing their 2.0 release. I've been using their release candidates for a few months now and I'm very impressed.