NEWS in yahns-1.4.0 vs NEWS in yahns-1.5.0
- old
+ new
@@ -1,4 +1,60 @@
+yahns 1.5.0 - initial OpenSSL support and bugfixes / 2014-12-21
+---------------------------------------------------------------
+
+This release adds basic OpenSSL support for HTTPS connections.
+
+Users must supply a OpenSSL::SSL::SSLContext object which yahns will use
+as-is. yahns will only support HTTPS on Ruby 2.1 and later, as we rely
+on "exception: false" in the read_nonblock and write_nonblock methods in
+OpenSSL::SSL::SSLSocket.
+
+See the Ruby standard library documentation on how to configure
+OpenSSL::SSL::SSLContext objects to pass to the yahns "listen" directive
+Editing the yahns config file to use OpenSSL goes something like this:
+
+ require 'openssl' # we will not do this for the user, even
+ ctx = OpenSSL::SSL::SSLContext.new
+ # user must configure ctx here...
+
+ listen 443, ssl_ctx: ctx
+
+Note: yahns developers are not responsible for bugs in OpenSSL itself
+or misconfigured SSLContext objects created by users. However, our
+support of OpenSSL sockets is barely-tested and likely buggy, too.
+
+Furthermore, the "sendfile" (or "kgio-sendfile") gem is no longer a
+required dependency. It is currently impossible to use zero-copy
+system calls with TLS sockets.
+
+There are also minor cleanups and a bugfix to ensure body#close is
+called for folks using body#to_path where `body' is the Rack
+response body. This bug affected logging using the 'clogger' gem
+when serving static files.
+
+Shortlog of changes since 1.4.0
+
+ save around 1500 bytes of memory on x86-64
+ http_response: remove arg for Array#join
+ remove unused client_max_header_size config
+ config: use literal symbol array for now
+ http_response: reduce constants for 100 responses
+ favor Array#map! for freshly-split arrays
+ sendfile_compat: remove dependency on pread
+ extras/autoindex: simplify checking non-.gz
+ Rakefile: kill more useless gsub use
+ initial cut at OpenSSL support
+ test/test_ssl: skip test if SSL on older Rubies
+ wbuf_common: close body proxies on sendfile abort
+ bump published Ruby version requirement to 2.0
+ make sendfile an optional dependency
+ openssl_client: ignore SSL_accept errors during negotiation
+
+Disclaimer: the yahns project does not and will never endorse
+any commercial entities, including certificate authorities.
+
+Shpx Nhgubevgl.
+
yahns 1.4.0 / 2014-11-16
------------------------
Minor internal cleanups and bugfixes.