Abyss Web Server Upgrade

Any comments, issues or suggestions regarding our website should be posted here.
Post Reply
huntor
PrimeTech Administrator
PrimeTech Administrator
Posts: 1293
Joined: Mon Sep 27, 2010 12:00 am

Abyss Web Server Upgrade

Post by huntor »

Currently the latest version is in beta. The main fixes in this has to do with supporting the latest SSL security aka TLS 1.3, dropping sslV3 and dropping legacy support for things older than windows xp. Holly crap that stuff is old. At some point we will be upgrading but not until they release the stable version.

Here is the changelog


CHANGES AND NEW FEATURES:

SSL/TLS

Added support for TLS 1.3
Added support ciphers based on Elliptic-curve Diffie-Hellman (ECDH) and Diffie-Hellman key Exchange (DHE)
Exposed a parameter in custom SSL/TLS profiles declarations to honor server ciphers list order
Updated predefined SSL/TLS profiles to account for modern browsers and TLS 1.3 introduction
Removed support for the deprecated and insecure SSL3 protocol

ACME

Added HTTP proxy configuration to ACME Bot
Added support for POST-as-GET in ACME
Added support for skipping hostname * from ACME certificate generation

Server Core

Updated HTTP OPTIONS verb handling to fully respect the HTTP/1.1 specification
Improved HTTP headers request and response processing to respect all the edge cases of the HTTP/1.1 specification (empty HTTP headers, folding of multiple-valued headers, special handing of Set-Cookie and Set-Cookie2 headers)
Fixed a bug occurring with X-Sendfile when both chunked encoding and compression are active
Updated IP address string conversion to generate easier-to-read IPv4 addresses instead of IPv4-over-IPv6 style ones

SSI

Updated SSI processing of expressions to add support for the == comparison operator
Fixed SSI parsing of attribute values enclosed between quotes or backticks
Added proper regular expression parsing in SSI

Windows specific changes

Improved Windows installer
Updated the Windows installer to restrict access permissions to the installation directory and to the kcstore subdirectory

macOS specific changes

Added notarization to conform to the stricter security rules of macOS Catalina 10.15
Modernized the DMG package for macOS (added a graphical background with installation instruction)
Deprecated old method to run privileged operations on macOS and replaced it by a proper helper tool
Updated the Help book to be conformant to the modern macOS help specifications

Operating systems compatibility

Changed minimum operating system requirement to Windows XP, Mac OS X 10.9 and any Linux with GLIBC 2.4
Updated integrated documentation to adapt to dark mode on macOS and Windows 10
Cleaned the source code base from artifacts related to legacy operating systems.
Image
User avatar
Bubbachuk-PG-
Site Admin
Site Admin
Posts: 4914
Joined: Sun May 16, 2010 1:59 pm
Location: Marshville, North Carolina
Contact:

Re: Abyss Web Server Upgrade

Post by Bubbachuk-PG- »

THANKS!! :D :D
Image
Image

The democracy will cease to exist when you take away from those who
are willing to work and give to those who would not.
~ Thomas Jefferson

Website: http://pgsquad.com
Facebook: https://www.facebook.com/oliver.holmes.357
huntor
PrimeTech Administrator
PrimeTech Administrator
Posts: 1293
Joined: Mon Sep 27, 2010 12:00 am

Re: Abyss Web Server Upgrade

Post by huntor »

Web Server software updated to Abyss 2.14. Might be another update coming as I found a small bug and submitted it to them.

SSL/TLS
Added support for TLS 1.3
Added support for TLS ciphers based on Elliptic-curve Diffie-Hellman (ECDH) and Diffie-Hellman key Exchange (DHE)
Exposed a parameter in custom SSL/TLS profiles declarations to honor server ciphers list order
Updated predefined SSL/TLS profiles to account for modern browsers and TLS 1.3 introduction
Removed support for the deprecated and insecure SSL3 protocol
ACME
Added HTTP proxy configuration to ACME Bot
Added support for POST-as-GET in ACME
Added support for skipping hostname * from ACME certificate generation
Server Core
Updated HTTP OPTIONS verb handling to fully respect the HTTP/1.1 specification
Improved HTTP headers request and response processing to respect all the edge cases of the HTTP/1.1 specification (empty HTTP headers, folding of multiple-valued headers, special handing of Set-Cookie and Set-Cookie2 headers)
Updated the HTTP Keep-Alive behavior to be in full conformance with the HTTP/1.1 updated specification in RFC 7230
Changed the HTTP parser to be stricter
Fixed a bug occurring with X-Sendfile when both chunked encoding and compression are active
Updated IP address string conversion to generate easier-to-read IPv4 addresses instead of IPv4-over-IPv6 style ones
SSI
Updated SSI processing of expressions to add support for the == comparison operator
Fixed SSI parsing of attribute values enclosed between quotes or backticks
Added proper regular expression parsing in SSI
Windows specific changes
Improved Windows installer
Updated the Windows installer to restrict access permissions to the installation directory and to the kcstore subdirectory
macOS specific changes
Added notarization to conform to the stricter security rules of macOS Catalina 10.15
Modernized the DMG package for macOS (added a graphical background with installation instruction)
Deprecated old method to run privileged operations on macOS and replaced it by a proper helper tool
Updated the Help book to be conformant to the modern macOS help specifications
Operating systems compatibility
Changed minimum operating system requirement to Windows XP, Mac OS X 10.9 and any Linux with GLIBC 2.4
Updated integrated documentation to adapt to dark mode on macOS and Windows 10
Cleaned the source code base from artifacts related to legacy operating systems.
Image
User avatar
Bubbachuk-PG-
Site Admin
Site Admin
Posts: 4914
Joined: Sun May 16, 2010 1:59 pm
Location: Marshville, North Carolina
Contact:

Re: Abyss Web Server Upgrade

Post by Bubbachuk-PG- »

Thank You! :D
Image
Image

The democracy will cease to exist when you take away from those who
are willing to work and give to those who would not.
~ Thomas Jefferson

Website: http://pgsquad.com
Facebook: https://www.facebook.com/oliver.holmes.357
Post Reply