nghttp2

• Limit the number of incoming reserved (remote) streams
• Add stream public API
• Rewrite priority tree handling
• Fix parallel make distcheck
• Define it and itprep recursive target if AM_EXTRA_RECURSIVE_TARGETS is defined
• fetch-ocsp-response: Handle spurious openssl exist status 0
• nghttpx: Use nghttp2::ssl::DEFAULT_CIPHER_LIST for backend TLS connection
• nghttpx: Don't allow blacked listed cipher suites for HTTP/2 connection
• nghttpx: better handle /dev/stderr and /dev/stdout (Patch from Tomasz Buchert)
• nghttpd: GOAWAY if SSL/TLS requirements for HTTP/2 are not met
• nghttpd: Return date header field for 304
• nghttpd: Support HEAD request
• h2load: Add Timing-script and base URI support (Patch from Lucas Pardue)
• h2load: Add timeout options (Patch from Nora)

• doc: Reword the HPACK tutorial (Patch from Tom Harwood)
• nghttpx: Fix stability issues
• h2load: Fix crash if -r > -n

Since v1.2.1 release is basically intended to fix bugs of nghttpx, and most of the interesting stuff was done in v1.2.0 (which released 1 week ago), we also lists the changes made in v1.2.0:

• Fix crash if response or data is submitted to closing stream
• Header table size UINT32_MAX must be accepted
• Use PROTOCOL_ERROR against DATA sent to idle stream
• Allow multiple in-flight SETTINGS
• Strictly check occurrence of dynamic table size update
• Fix configure warning that 'missing' is missing or too old
• Fix rm: cannot remove ‘*.rst’: No such file or directory when "make clean" (Patch from Alexis La Goutte)
• doc: Reword some of the server and client tutorial (Patch from Tom Harwood)
• src: Remove monotonic_clock replacement macro for gcc-4.6
• nghttpx: Add TLS ticket key sharing among nghttpx instances using memcached
• nghttpx: Add shared session cache using memcached
• nghttpx: Set SSL/TLS session timeout to 12 hours
• nghttpx: Enable session resumption on HTTP/2 backend
• nghttpx: Don't rewrite host header field by default
• nghttpx: Generate new ticket key every 1hr and its life time is now 12hrs
• nghttpx: Don't reuse backend connection if it is not clean
• nghttpx: Add AES-256-CBC encryption for TLS session ticket
• nghttpd: Fix the bug that 304 response has non-empty body
• h2load: Add -r and -C options to h2load (Patch from Nora Shoemaker)

ATTENTION: We have some issues in nghttpx included in this release. #320 and #321. It is recommended to use v1.1.2 until these issues are resolved.

• Fix crash if response or data is submitted to closing stream
• Header table size UINT32_MAX must be accepted
• Use PROTOCOL_ERROR against DATA sent to idle stream
• Allow multiple in-flight SETTINGS
• Strictly check occurrence of dynamic table size update
• Fix configure warning that 'missing' is missing or too old
• Fix rm: cannot remove ‘*.rst’: No such file or directory when "make clean" (Patch from Alexis La Goutte)
• doc: Reword some of the server and client tutorial (Patch from Tom Harwood)
• src: Remove monotonic_clock replacement macro for gcc-4.6
• nghttpx: Add TLS ticket key sharing among nghttpx instances using memcached
• nghttpx: Add shared session cache using memcached
• nghttpx: Set SSL/TLS session timeout to 12 hours
• nghttpx: Enable session resumption on HTTP/2 backend
• nghttpx: Don't rewrite host header field by default
• nghttpx: Generate new ticket key every 1hr and its life time is now 12hrs
• nghttpx: Don't reuse backend connection if it is not clean
• nghttpx: Add AES-256-CBC encryption for TLS session ticket
• nghttpd: Fix the bug that 304 response has non-empty body
• h2load: Add -r and -C options to h2load (Patch from Nora Shoemaker)

• Fix linker error with libnghttp2_asio
• Allow custom installation location for Python bindings

• nghttpx: Fix various stability issues and memory leak bug

Since v1.1.0 was released just yesterday, and has many changes, we list its changes here:

• Fix DATA is not consumed if nghttp2_http_on_data_chunk failed
• nghttp2_submit_response and nghttp2_submit_headers may return NGHTTP2_ERR_DATA_EXIST
• msvc build fixes and enchantments (Patch from Gabi Davar)
• Compile with IRIX gcc-4.7 (Patch from Klaus Ziegler)
• nghttp: Add --max-concurrent-streams option
• nghttp: Add comment on HAR on pushed objects (Patch from acesso)
• nghttpx: Add --include option to read additional configuration from given file
• nghttpx: Add backend routing based on request host and path by extending -b option
• nghttpx: Allow log variable to be enclosed by curly braces for disambiguation
• nghttpx: Add log variables related to SSL/TLS connection
• h2load: Add --ciphers option

• Fix DATA is not consumed if nghttp2_http_on_data_chunk failed
• nghttp2_submit_response and nghttp2_submit_headers may return NGHTTP2_ERR_DATA_EXIST
• msvc build fixes and enchantments (Patch from Gabi Davar)
• Compile with IRIX gcc-4.7 (Patch from Klaus Ziegler)
• nghttp: Add --max-concurrent-streams option
• nghttp: Add comment on HAR on pushed objects (Patch from acesso)
• nghttpx: Add --include option to read additional configuration from given file
• nghttpx: Add backend routing based on request host and path by extending -b option
• nghttpx: Allow log variable to be enclosed by curly braces for disambiguation
• nghttpx: Add log variables related to SSL/TLS connection
• h2load: Add --ciphers option

• Add STREAM_DEP_DEBUG macro switch to enable runtime validation of depedency tree
• Fix another bug in priority handling; sibling's item is not queued when ancestor's item is detached
• nghttpx: Fix crash with --http2-bridge and both frontend and backend TLS

• Fix assertion failure in stream_update_dep_on_detach_item (GH-264)

• Fix bug that idle self-depending PRIORITY is not handled gracefully
• Optimize dependency based priority code to Firefox style tree
• enable third-party for asio_lib too (Patch from Mike Frysinger)
• fetch-ocsp-response: Support LibreSSL, and include port in ocsp_host
• src: Support compile with LibreSSL
• nghttpx: Fix bug that x-forwarded-proto header field does not reflect frontend scheme on HTTP/2 backend
• nghttpx: Validate :path on SPDY frontend

• Fix bug that data are not consumed for connection in race condition (GH-253)
• Define NGHTTP2_EXTERN to __declspec(dllimport) when using nghttp2 for Windows build
• Translate fetch-ocsp-response into Python
• libevent-client: Fix bug that path is broken if URI does not contain path part
• python: Call on_close callback when connection is lost for server session
• python: Expose client certificate, if available (Patch from Fabian Wiesel)
• python: Catch and log failure to set TCP_NODELAY (Patch from Fabian Wiesel)
• nghttpx: Add --add-request-header option
• nghttpx: Make WebSocket upgrade work
• nghttpx: Fix bug that END_STREAM is not set in backend for POST with Upgrade
• nghttpx: Don't send "Expect" header field twice

• Include stdint.h instead of inttypes.h when compiled with MSVC < 2013
• Fix invalid memory free on out-of-memory handling
• integration: Use our own copy of golang spdy package
• android: Don't link zlib bundled with android NDK
• Dockerfile.android: Update NDK ver, and ubuntu; build and link zlib
• src, examples: Fix up OpenSSL initialization
• nghttpx: Allow HTTP Upgrade from POST request if response header has not been sent to the client
• nghttpx: Fix bug that PUSH_PROMISE is sent after associated response HEADERS
• nghttpd: Close connection after settings timeout and GOAWAY was sent
• h2load: Fix bug that NPN fails if ALPN is enabled

• Implements RFC 7540 HTTP/2 (https://tools.ietf.org/html/rfc7540)
• implements RFC 7541 HPACK (https://tools.ietf.org/html/rfc7541)
• v1.0.0 introduced backward incompatible changes from 0.7 series. Read https://nghttp2.org/documentation/package_README.html#migration-from-v0-7-15-or-earlier to migrate from older version to this latest version.

• Implements h2-14 protocol (http://tools.ietf.org/html/draft-ietf-httpbis-http2-14)
• Implements HPACK 09 (http://tools.ietf.org/html/draft-ietf-httpbis-header-compression-09)
• Hopefully, this is the last release for 0.7.x series. Development continues in 1.x series.
• Access violation in buffers (GH-232) (Patch from Etienne Cimon)
• Retry finding jemalloc lib by je_malloc_stats_print (GH-233)
• inflatehd: Fix crash if 'wire' value is not string (GH-235)
• nghttpx: Revert 585af938287d329333d9c755698fb25aa6471dab to fix crash with TLS (GH-234)
• nghttpd: Add --echo-upload option to send back request body

• Implements h2-14 protocol (http://tools.ietf.org/html/draft-ietf-httpbis-http2-14)
• Implements HPACK 09 (http://tools.ietf.org/html/draft-ietf-httpbis-header-compression-09)
• Fix global-buffer-overflow in HPACK code
• Fix doc for nghttp2_select_next_protocol
• Fix bug that promised stream was not reset on decompression error
• Add systemd and upstart configuration file for nghttpx
  (Patch from Zhuoyun Wei)
• Improve nghttpx logrotate configuration file (Patch from Zhuoyun Wei)
• Update sphinx_rtd_theme
• h2load: Update h2load to give connect time and ttfb stats
  (Patch from ericcarlschwartz)
• nghttpd: Add -m, --max-concurrent-streams option
• nghttpx: Log absolute URI for HTTP/2 or client proxy request
• nghttpx: Add --header-field-buffer and --max-header-fields options
• nghttp: Fix assertion error if very large value is given to -t

• Implements h2-14 protocol (http://tools.ietf.org/html/draft-ietf-httpbis-http2-14)
• Implements HPACK 09 (http://tools.ietf.org/html/draft-ietf-httpbis-header-compression-09)
• Fix bug that promised stream was not reset by returning NGHTTP2_ERR_TEMPORAL_CALLBACK_FAILURE from nghttp2_on_header_callback. Instead, associated stream was reset.
• Allow NGHTTP2_ERR_TEMPORAL_CALLBACK_FAILURE from nghttp2_on_begin_headers_callback
• h2load: Effectively disable flow control by setting large window size
• asio: Graceful shutdown and joinable server (Patch from Xiaoguang Sun)

• Implements h2-14 protocol (http://tools.ietf.org/html/draft-ietf-httpbis-http2-14)
• Implements HPACK 09 (http://tools.ietf.org/html/draft-ietf-httpbis-header-compression-09)
• Fix bug that nghttp2_session_set_next_stream_id accepts invalid stream_id
• HPACK: Rewrite static header table handling
• HPACK: Never index authorization and small cookie header field
• Don't install libnghttp2_asio headers if they are disabled
• doc: Specify program directive so that hyperlink to option is
  correctly pointed to the intended location
• asio: client: Call error_cb on error occurred in do_read and do_write
  (Fixes GH-207)
• nghttp: Add --no-push option to disable server push
• nghttp: Show stream ID in statistics output
• nghttp: Remove --dep-idle option
• nghttp: Use same priority anchor nodes as Firefox does
• nghttpx: Don't push resource if link header has non empty loadpolicy
• nghttpx: Add logging for somewhat important events (logs, tickets, and ocsp)
• nghttpx: Set Downstream to stream user data on HTTP Upgrade to h2

• Implements h2-14 protocol (http://tools.ietf.org/html/draft-ietf-httpbis-http2-14)
• Implements HPACK 09 (http://tools.ietf.org/html/draft-ietf-httpbis-header-compression-09)
• nghttpx: Fix waitpid race condition in ocsp response update
• nghttp: Consider user-provided :authority header field for SNI as well as host header field

• Implements h2-14 protocol (http://tools.ietf.org/html/draft-ietf-httpbis-http2-14)
• Implements HPACK 09 (http://tools.ietf.org/html/draft-ietf-httpbis-header-compression-09)
• Make sure that nghttp2 license is MIT license
• Add nghttp2_session_consume_{connection,stream} to consume bytes independent
• Add nghttp2_send_data_callback to send DATA payload without copying
• "static inline" fix for build with VS2013 (Patch from Remo E)
• Update lib/Makefile.msvc (Patch from Remo E)
• Remove dependency on libws2_32 on Windows build
• Define NGHTTP2_EXTERN macro to export function for Windows build
• doc: Generate API doc per function
• python: Add async body generation support
• python: Fix pseudo-header field ordering bug
• nghttpx: Redirect stderr to errorlog file
• nghttpx: Fix bug that data buffered in SSL object are not read
• nghttpx: Remove --tls-ctx-per-worker option
• nghttpx: Add OCSP stapling feature

• Implements h2-14 protocol (http://tools.ietf.org/html/draft-ietf-httpbis-http2-14)
• Implements HPACK 09 (http://tools.ietf.org/html/draft-ietf-httpbis-header-compression-09)
• h2load: Fix crash if -t > -c
• h2load: Add -d option to upload data to server
• nghttpx: Forward only "trailers" keyword in te when forwarding HTTP/2 backend
• nghttpx: Fix PUSH_PROMISE header field corruption [GH-194]
• nghttpx: Fix te header field is duplicated when forwarding HTTP/2 backend
• nghttp, nghttpd: Add --hexdump option to hexdump incoming traffic.
• examples: Place AM_CPPFLAGS first to use in-package header files first [GH-192]

• Implements h2-14 protocol (http://tools.ietf.org/html/draft-ietf-httpbis-http2-14)
• Implements HPACK 09 (http://tools.ietf.org/html/draft-ietf-httpbis-header-compression-09)
• Validate :path header field for http or https URI scheme
• NULL-terminate header field name and value presented by callback
• README.rst: Cleaned up the grammar a bit
  (Patch from Ross Smith II)
• h2load: fix for segfault by reserving correct worker count
  (Patch from Stefan Eissing)