Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Previous to 4.2.x, for two SSL certificates with the same CN, the last one would be used. This has been changed to properly using the first one as well as issuing a warning about the situation. This will only affect those with multiple SSL Certificates with the same CN, for example a self-signed one and one from a CA.

Configure max TLS record size

The client can decipher the data only once it has received a full record over SSL. The record size can have significant impact on the page load time performance of the application. No limitation on record size means that clients might have to download up to 16KB of data before starting to process them, whereas very small records incur a larger overhead due to record framing. A new configuration has been added to control this:

 

Code Block
CONFIG proxy.config.ssl.max_record_size INT 0

Jira: TS-2365

Gentoo Layout changes

Runtimedir on Gentoo changed from /var/run to /run

...