Issue HTTP server Lighttpd 1.4.68

lighttpd 1.4.68 trying to combine high performance, safety, compliance with standards and flexibility of configuration. LightTPD is suitable for use on highly loaded systems and is aimed at low CPU memory and resources. The project code is written in the language of SI and spreads under the license BSD.

The main changes :

  • In Mod_openssl and Mod_GNUTLS, the inclusion of SSL_SENDFILE () and gnutls_record_Send_file () use of KTLS (implementation of TLS at the nucleus level).
  • For TLS, more stringent encryption settings are used and obsolete ciphers are disabled by default. The Cipherstring settings are changed from the “High” value to “eecdh+aesgcm: AES256+EECDH: Chacha20: Sha256:! Sha384”. The outdated TLS: SSL.Honor-cipher-Order, SSL.DH-File, SSL.EC-Curve, SSL.Disable- CLENEGOTION, SSL.use-SSLV2, SSL.SL.use-SSLV3 are also removed.
  • Cleaning mini-modules continued, which can be replaced with a more flexible Lua realeization of Mod_magnet. The modules are remote Mod_evasive, Mod_Secdownload, Mod_uploadProgress and Mod_usertrack.
  • In Mod_magnet, support for the experimental settings of Lighty.r.req_attr [“Response.*”].
  • ].

  • Continuing support of the LibEV fdevent option.
/Media reports cited above.