Patches

Nginx

use_openssl_md5_sha1.patch

• Use the OpenSSL library instead of the Nginx original function.
• Repack it because "patch unexpectedly ends in middle of line".
  • Thanks @CarterLi

Test pass: 1.27.2

nginx_dynamic_tls_records.patch

• Add Dynamic TLS Record Support.

Require: Nginx 1.27.2

Enable_BoringSSL_OCSP.patch

• For BoringSSL support OCSP stapling.
  • Using "ssl_stapling_file" to support.
  • Only "ssl_stapling_file" with single cert is supported.
  • Auto-rebuild OCSP stapling file with shell and atd(at cron), you can read this article(Maybe you need a translation tool).
  • Thanks @CarterLi.

Test pass: 1.25.5

nginx.patch (Discontinued)

• Add HTTP2 HPACK Encoding Support.
• Add Dynamic TLS Record Support.

Require: Nginx 1.25.0 (this version only)

Test pass: 1.25.0

Since Nginx 1.25.1, HPACK encoding will not support because the HTTP/2 server push support has been removed.

nginx_with_quic.patch (Discontinued)

• Add HTTP3(QUIC) Support.
  • For OCSP stapling, maybe you need this.
• Add HTTP2 HPACK Encoding Support.
• Add Dynamic TLS Record Support.

Require: Nginx 1.21.4 or later.

Test pass: 1.23.3 with cloudflare/quiche@c9311a1

Check your modules when build failed.

nginx_for_1.23.4.patch (Deprecated)

• Add HTTP2 HPACK Encoding Support.
• Add Dynamic TLS Record Support.

Require: Nginx version below 1.25.0

Test pass: 1.23.4

nginx_with_quic_for_1.19.7_full.patch (Deprecated)

• Add HTTP3(QUIC) Support.
  • For OCSP stapling, maybe you need this.
• Add HTTP2 HPACK Encoding Support.
• Add Dynamic TLS Record Support.

Require: Nginx 1.19.7 or later(below 1.21.4).

Test pass: 1.21.3 with cloudflare/quiche@af1bbc0

nginx_with_quic_for_1.19.6.patch is required to support Nginx versions lower than 1.19.7, cause post_accept_timeout had been removed by Nginx since 1.19.7.

nginx_with_quic_for_1.19.6.patch (Deprecated)

• Revert nginx_with_quic.patch to support Nginx versions lower than 1.19.7.
• Patch nginx_with_quic.patch first, then patch this one.

Test pass: 1.19.6 with nginx_with_quic.patch@ec8cac4 & cloudflare/quiche@fca5e9a

nginx_with_spdy.patch (Deprecated)

• Add SPDY Support.
• Add HTTP2 HPACK Encoding Support.
• Add Dynamic TLS Record Support.

Test pass: 1.17.9

nginx_with_spdy_quic.patch (Deprecated)

• Add SPDY Support.
• Add HTTP3(QUIC) Support.
• Add HTTP2 HPACK Encoding Support.
• Add Dynamic TLS Record Support.

Test pass: 1.17.9 with cloudflare/quiche@9a8b3b

Other

openssl-1.1.1.patch

• Add TLS 1.3 Support.
• Add BoringSSL's Equal Preference Support.
• Add ChaCha20-Poly1305 Draft Version Support.

Test pass: 1.1.1w

ffmpeg-let-rtmp-flv-support-hevc-h265-opus.patch

• FLV/RTMP Extensions For FFmpeg.
  • Add FLV Encode/Decode with H.265/HEVC & OPUS Codec Support.
  • Add RTMP Stream Push with H.265/HEVC & OPUS Codec Support.
  • Thanks @xia-chu.

Test pass: 4.3.1

dropbox_fs_fix.patch

• For Dropbox Linux users. This patch could let official python script auto-load libdropbox_fs_fix.so library before start dropboxd.
  • Using Dropbox filesystem fix for Linux Repo and make libdropbox_fs_fix.so.
  • After compiled, copy libdropbox_fs_fix.so to $HOME/.dropbox-dist/libdropbox_fs_fix.so.
  • Download Dropbox official python script, put it with patch file together.
  • Patch, enjoy.

Test pass: 2019.02.14 version

Links

聊聊Nginx 1.25和HTTP/3

Nginx 1.19.4新特性推荐

让Nginx使用BoringSSL时支持OCSP Stapling

博客终止使用TLS 1.0和TLS 1.1协议

小试HTTP3

我的Nginx编译之旅

解决Dropbox Linux客户端因文件系统导致无法同步问题

kn007的个人博客