update nginx to 1.25.2

Author: pangpang

CHANGES

@@ -1,4 +1,23 @@
 
+Changes with nginx 1.25.2                                        15 Aug 2023
+
+    *) Feature: path MTU discovery when using HTTP/3.
+
+    *) Feature: TLS_AES_128_CCM_SHA256 cipher suite support when using
+       HTTP/3.
+
+    *) Change: now nginx uses appname "nginx" when loading OpenSSL
+       configuration.
+
+    *) Change: now nginx does not try to load OpenSSL configuration if the
+       --with-openssl option was used to built OpenSSL and the OPENSSL_CONF
+       environment variable is not set.
+
+    *) Bugfix: in the $body_bytes_sent variable when using HTTP/3.
+
+    *) Bugfix: in HTTP/3.
+
+
 Changes with nginx 1.25.1                                        13 Jun 2023
 
     *) Feature: the "http2" directive, which enables HTTP/2 on a per-server

CHANGES.ru

@@ -1,4 +1,23 @@
 
+Изменения в nginx 1.25.2                                          15.08.2023
+
+    *) Добавление: path MTU discovery при использовании HTTP/3.
+
+    *) Добавление: поддержка шифра TLS_AES_128_CCM_SHA256 при использовании
+       HTTP/3.
+
+    *) Изменение: теперь при загрузке конфигурации OpenSSL nginx использует
+       appname "nginx".
+
+    *) Изменение: теперь nginx не пытается загружать конфигурацию OpenSSL,
+       если для сборки OpenSSL использовался параметр --with-openssl и
+       переменная окружения OPENSSL_CONF не установлена.
+
+    *) Исправление: в переменной $body_bytes_sent при использовании HTTP/3.
+
+    *) Исправление: в HTTP/3.
+
+
 Изменения в nginx 1.25.1                                          13.06.2023
 
     *) Добавление: директива http2, позволяющая включать HTTP/2 в отдельных

app/cpp/readme

@@ -8,6 +8,8 @@ if [ $OPENSSL != NONE ]; then
     have=NGX_OPENSSL . auto/have
     have=NGX_SSL . auto/have
 
+    have=NGX_OPENSSL_NO_CONFIG . auto/have
+
     if [ $USE_OPENSSL_QUIC = YES ]; then
         have=NGX_QUIC . auto/have
         have=NGX_QUIC_OPENSSL_COMPAT . auto/have

auto/lib/openssl/conf

@@ -110,7 +110,7 @@ HTTP_UPSTREAM_ZONE=YES
 
 
 HTTP_HI_PYTHON_VERSION=python3
-HTTP_HI_LUA_VERSION=lua5.3
+HTTP_HI_LUA_VERSION=lua5.4
 
 # STUB
 HTTP_STUB_STATUS=NO
@@ -613,7 +613,7 @@ cat << END
   --with-debug                       enable debug logging
 
   --with-http-hi-python-version      with python version,python2 or python3 ,default:python3
-  --with-http-hi-lua-versioin        with lua version,lua,lua5.1,lua5.2,lua5.3 or luajit ,default:lua5.3
+  --with-http-hi-lua-versioin        with lua version,lua,lua5.1,lua5.2,lua5.3,lua5.4 or luajit ,default:lua5.4
 
 END
 

auto/options

@@ -10,8 +10,8 @@ if ! test -f Makefile;then
                 --with-stream_ssl_module                            \
                 --with-http_realip_module                           \
                 --prefix=/usr/local/nginx                           \
-                --with-http-hi-python-version=python-3.8-embed      \
-                --with-http-hi-lua-version=lua5.3                   \
+                --with-http-hi-python-version=python-3.10-embed      \
+                --with-http-hi-lua-version=lua5.4                   \
                 --add-module=module/ngx_http_autoblacklist_module   \
                 --add-module=module/ngx_http_lua_module             \
                 --add-module=module/ngx_http_py_module              \

contrib/vim/syntax/nginx.vim

@@ -6214,9 +6214,11 @@ struct ErrorHandler {
                                              ? std::string(message)
                                              : "unknown error running error");
 #if LUA_VERSION_NUM >= 502
+#if LUA_VERSION_NUM <= 503
     case LUA_ERRGCMM:
       throw LuaGCError(status,
                        message ? std::string(message) : "unknown gc error");
+#endif
 #endif
     default:
       throw LuaUnknownError(status, message ? std::string(message)
@@ -6756,7 +6758,13 @@ template <typename Derived> class LuaThreadImpl {
     if (argnum < 0) {
       argnum = 0;
     }
-    int result = lua_resume(thread, state, argnum);
+    int nres;
+    int result = 
+    #if LUA_VERSION_NUM <= 503
+    lua_resume(thread, state, argnum);
+    #else
+    lua_resume(thread,state,argnum,&nres);
+    #endif
     except::checkErrorAndThrow(result, thread);
     return detail::FunctionResultProxy::ReturnValue(thread, result, 1,
                                                     types::typetag<Result>());

install_demo.sh

@@ -13,6 +13,7 @@
 static void ngx_show_version_info(void);
 static ngx_int_t ngx_add_inherited_sockets(ngx_cycle_t *cycle);
 static void ngx_cleanup_environment(void *data);
+static void ngx_cleanup_environment_variable(void *data);
 static ngx_int_t ngx_get_options(int argc, char *const *argv);
 static ngx_int_t ngx_process_options(ngx_cycle_t *cycle);
 static ngx_int_t ngx_save_argv(ngx_cycle_t *cycle, int argc, char *const *argv);
@@ -518,7 +519,8 @@ ngx_add_inherited_sockets(ngx_cycle_t *cycle)
 char **
 ngx_set_environment(ngx_cycle_t *cycle, ngx_uint_t *last)
 {
-    char                **p, **env;
+    char                **p, **env, *str;
+    size_t                len;
     ngx_str_t            *var;
     ngx_uint_t            i, n;
     ngx_core_conf_t      *ccf;
@@ -600,7 +602,31 @@ ngx_set_environment(ngx_cycle_t *cycle, ngx_uint_t *last)
     for (i = 0; i < ccf->env.nelts; i++) {
 
         if (var[i].data[var[i].len] == '=') {
-            env[n++] = (char *) var[i].data;
+
+            if (last) {
+                env[n++] = (char *) var[i].data;
+                continue;
+            }
+
+            cln = ngx_pool_cleanup_add(cycle->pool, 0);
+            if (cln == NULL) {
+                return NULL;
+            }
+
+            len = ngx_strlen(var[i].data) + 1;
+
+            str = ngx_alloc(len, cycle->log);
+            if (str == NULL) {
+                return NULL;
+            }
+
+            ngx_memcpy(str, var[i].data, len);
+
+            cln->handler = ngx_cleanup_environment_variable;
+            cln->data = str;
+
+            env[n++] = str;
+
             continue;
         }
 
@@ -645,6 +671,29 @@ ngx_cleanup_environment(void *data)
 }
 
 
+static void
+ngx_cleanup_environment_variable(void *data)
+{
+    char  *var = data;
+
+    char  **p;
+
+    for (p = environ; *p; p++) {
+
+        /*
+         * if an environment variable is still used, as it happens on exit,
+         * the only option is to leak it
+         */
+
+        if (*p == var) {
+            return;
+        }
+    }
+
+    ngx_free(var);
+}
+
+
 ngx_pid_t
 ngx_exec_new_binary(ngx_cycle_t *cycle, char *const *argv)
 {

module/lib/kaguya.hpp

@@ -9,8 +9,8 @@
 #define _NGINX_H_INCLUDED_
 
 
-#define nginx_version      1025001
-#define NGINX_VERSION      "1.25.1"
+#define nginx_version      1025002
+#define NGINX_VERSION      "1.25.2"
 #define NGINX_VER          "nginx/" NGINX_VERSION
 
 #ifdef NGX_BUILD