Patches

nginx.patch

• Add SPDY Support.
• Add HTTP2 HPACK Encoding Support.
• Add Dynamic TLS Record support.

Test pass: 1.17.0

nginx_auto_using_PRIORITIZE_CHACHA.patch

• Using SSL_OP_PRIORITIZE_CHACHA when support (For Nginx with OpenSSL 1.1.1, #2)

Test pass: 1.15.5

nginx_strict-sni.patch

• Enable Strict-SNI, Protect your site ip without exposing your certificate (From here)
  • Strict SNI requires at least two ssl server (fake) settings (server { listen 443 ssl }).
  • It does not matter what kind of certificate or duplicate.

Test pass: 1.15.5

Other

我的Nginx编译之旅

kn007的个人博客