Hi folks! I am happy to announce the new formal release, 1.7.4.1, of the OpenResty bundle: http://openresty.org/#Download The highlights of this release are 1) the new "resty" command-line utility, 2) SSL/TLS cosocket support in ngx_lua (with SNI support and client-side session reuse support as well), and 3) SSL/TLS support in our nonblocking MySQL driver in pure Lua, lua-resty-mysql. (The highlight for the previous formal release was the full-duplex cosocket support ;)) Special thanks go to all our contributors for making this happen! Below is the complete change log for this release, as compared to the last formal release, 1.7.2.1: * upgraded the Nginx core to 1.7.4. * see the changes here: <http://nginx.org/en/CHANGES> * feature: added a new command-line utility, "resty", to run Lua code or Lua files (for OpenResty) directly from the command-line. it is installed into the "<prefix>/bin" directory. prodded by Vitaly Kosenko. This tool is currently experimental. * bugfix: "./configure": we might misuse the homebrew version of LuaJIT on Mac OS X when the user specified the "--with-ld-opt="-L/usr/local/lib"" option. thanks Aapo Talvensaari for the report. * bugfix: "util/install": remove the target file before overwriting to prevent running processes (if any) from crashing. * bugfix: "./configure": call "sh" explicitly for nginx's "./configure" script to prevent potential file permission issues. * optimize: now we use the C compiler option "-O2" for everything by default (we used to use "-O1" which is too conservative). * upgraded the ngx_postgres module to 1.0rc4. * bugfix: segmentation fault might happen in "ngx_destroy_pool" when debug logging was enabled in the nginx build. thanks buddy-ekb for the report. * upgraded the ngx_echo module to 0.56. * bugfix: our "create_loc_conf" callback did not return NULL on error. thanks Markus Linnala for the patch. * bugfix: reading $echo_client_request_headers would return garbled data when LF instead of CRLF is used as the line terminator in the original header. * bugfix: reading $echo_client_request_headers could lead to buffer overflow due to misuse of "r->header_end" while modules like ngx_fastcgi and ngx_proxy can change "r->header_end" to point to buffers of their own. * upgraded the ngx_form_input module to 0.10. * bugfix: "pcre_exec -2" error might happen when the standard "if" directive is used to test the empty value nginx variables set by this module with a regex. (Jiale) * bugfix: we incorrectly overrode "r->read_event_handler" with "ngx_http_request_empty_handler" in our "post read" callback for client request body reading, which could waste CPU time in level-triggered event models like poll and select. thanks chen for the catch. * upgraded the ngx_set_misc module 0.26. * change: set_escape_uri: use uppercase hexadecimal digits for percent-encoding as per RFC 3986. thanks splitice for the original patch. * bugfix: our "create_loc_conf" callback did not return NULL on error. thanks Markus Linnala for the patch. * bugfix: fixed source and test files' permission. they should not be executable at all. thanks Christos Kontas for the report. * upgraded LuaJIT to v2.1-20140805: https://github.com/openresty/luajit2/tags * imported Mike Pall's latest bug fixes: * FFI: Fix "__index"/"__newindex" metamethod resolution for ctypes. * Invalidate backpropagation cache after DCE. * upgraded the ngx_lua module to 0.9.12. * feature: implemented the SSL/TLS cosocket API. * added new method sslhandshake() to the stream-typed cosocket objects. * added new configuration directives lua_ssl_trusted_certificate, lua_ssl_verify_depth, lua_ssl_crl, lua_ssl_protocols, and lua_ssl_ciphers. thanks aviramc for the original patch. * feature: the standard coroutine API is now enabled in the context of header_filter_by_lua* and body_filter_by_lua*. thanks ngo for the request. * feature: for content/rewrite/access_by_lua_file directives, we now return 404 status code instead of 500 in case that the specified .lua file cannot be opened. thanks Sam Lee for the suggestion. * feature: added pure C API function for FFI-based implementation of reading ngx.header.HEADER. * feature: now we also explicitly check the Lua ABI/language version in our feature test of the "./configure" phase for a usable Lua lib. * feature: added pure C API functions for FFI-based implementations of ngx.worker.pid() and ngx.worker.exiting(). * bugfix: ngx.req.raw_header() could lead to buffer overflow and the "userdata length overflow" error due to misuse of "r->header_end" while modules like ngx_fastcgi and ngx_proxy can change "r->header_end" to point to buffers of their own. thanks sadmedved for the report. * bugfix: ngx.req.raw_header() would return garbled data when LF instead of CRLF is used as the line terminator in the original header. * bugfix: body_filter_by_lua*: reading "ngx.arg[1]" after clearing "ngx.arg[1]" (by assigning nil or "") could lead to segmentation faults. this regression had appeared in v0.9.10. thanks Jason Stangroome for the report. * bugfix: init_worker_by_lua* would conflict with some other nginx C modules (like ngx_proxy) when their "merge_loc_conf" callbacks (or alike) produce side-effects in "cf->cycle". thanks Ruoshan Huang for the report. * bugfix: stream-typed cosocket might read uninitialized memory bytes when logging errors due to sending to or receiving from a closed socket. * bugfix: the stream-typed and datagram-typed cosockets' resolver handler did not handle some special errors correctly. * bugfix: ngx.resp.get_headers(): sometimes we might omit the builtin-headers Content-Type, Content-Length, Connection, and Transfer-Encoding. thanks Jon Keys for the report. * bugfix: ngx.req.socket(true): it incrrectly returned the error "chunked request bodies not supported yet" for raw request sockets with chunked request bodies. thanks Xiaofei Yang for the report. * bugfix: we did not check allocation failures while compiling the pattern for tcpsock:receiveuntil(). thanks Tatsuhiko Kubo for the patch. * bugfix: we did not use "lua_checkstack()" to prevent Lua stack overflow in our own C-land Lua backtrace generator. * bugfix: fixed an incorrect error message. thanks aviramc for the patch. * bugfix: for statically linked LuaJIT, we need to pass "-ldl" to the linker. thanks cf2012 for the report. * bugfix: the tcp_nodelay directive configuration was not honored by upstream TCP cosockets, which could lead to extra delays for small messages. thanks Shun Zhang for reporting this issue. * bugfix: fixed build failures with OpenSSL older than 0.9.8f. thanks FFCZ for the report. * bugfix: compilation failed with nginx 1.3.6 or older. this regression had appeared in the v0.9.11 release. * bugfix: compilation failed with nginx 0.9.x. * bugfix: our "create_loc_conf" callback did not return NULL on error. * bugfix: added allocation failure check for "ngx_array_init()" on the C land. thanks Tatsuhiko Kubo for the patch. * optimize: we now cache the userdata metatable (for the "__gc" metamethod) in the lua registry for both the stream-typed datagram-typed cosockets. * optimize: reading ngx.header.HEADER: eliminated dynamic allocations and data copying when there is no need to ransform "_" to "-" in the header name. * change: ngx.escape_uri() now uses uppercase hexadecimal digits for percent-encoding according to the recommendation in RFC 3986. thanks Piotr Sikora for the suggestion. * change: use the type "ngx_http_lua_ffi_str_t" instead of "ngx_str_t" in the pure C API function "ngx_http_lua_ffi_req_get_headers". * change: renamed the C macro "NGX_HTTP_LUA_NO_FFI_API" to "NGX_LUA_NO_FFI_API". * style: various coding style fixes and minor optimizations from Tatsuhiko Kubo. * doc: documented the behavior of init_by_lua* when lua_code_cache is off. * doc: fixed a wrong statement regarding "require()" in the "Lua Variable Scope" section. thanks Hungpu DU for the report. * doc: more clarification in the docs for the "res.truncated" flag returned by ngx.location.capture(). thanks Jon Keys for asking. * doc: added missing method name "get_keys" under "ngx.shared.DICT" and also fixed the method order. thanks George Bashi for the patch. * doc: markdown: fixed the "Back to TOC" links for the sections ("Nginx API for Lua" and "Directives") with inlined TOC. thanks Pierre-Yves Gérardy and Simon Eskildsen for the reports. * doc: improved the wording in the "Lua Coroutine Yielding/Resuming" section. thanks Hungpu DU for the report. * doc: improved the wording of the documentation for ngx.req.clear_header() to prevent ambiguity. thanks Christophe-Marie Duquesne for the report. * upgraded the lua-resty-core library to 0.0.9. * feature: implemented the reading part of ngx.header.HEADER with FFI. * feature: implemented ngx.worker.pid() and ngx.worker.exiting() with FFI. * upgraded the lua-resty-upstream-healthcheck library to 0.03. * optimize: timers in different nginx worker processes can go out of phase as time goes, resulting in duplicate test requests from different workers in the same check interval. thanks fancyrabbit for the report and fix. * upgraded the lua-resty-websocket library to 0.04. * feature: resty.websocket.client: added support for the "origin" option to specify the value of the "Origin" request header. thanks woo for the original patch. * bugfix: resty.websocket.client: connection pooling was broken due to duplicate websocket handshakes. thanks woo for the patch. * bugfix: fixed the "Sec-WebSocket-Protocol" header when the secondary protocols are specified. thanks woo for the report. * doc: typo fixes from Laurent Arnoud. * upgraded the lua-resty-dns library to 0.13. * bugfix: we did not parse the character-strings in the "TXT" record data. thanks Kevin Ingersoll for the report. * upgraded the lua-resty-mysql library to 0.15. * feature: added new boolean-value options "ssl" and "ssl_verify" to the connect() method connecting to MySQL via SSL. * upgraded the lua-cjson library to 2.1.0.2. * bugfix: the Makefile had a bug that overwrites the existing "cjson.so" file in place which could cause already running processes with this ".so" file loaded to crash. thanks ywsample for the report. The HTML version of the change log with lots of helpful hyper-links can be browsed here: http://openresty.org/#ChangeLog1007004 OpenResty (aka. ngx_openresty) is a full-fledged web application server by bundling the standard Nginx core, lots of 3rd-party Nginx modules and Lua libraries, as well as most of their external dependencies. See OpenResty's homepage for details: http://openresty.org/ We have run extensive testing on our Amazon EC2 test cluster and ensured that all the components (including the Nginx core) play well together. The latest test report can always be found here: http://qa.openresty.org Have fun! -agentzh