hoellen/dockerfiles
1
0
Fork 0
mirror of https://github.com/hoellen/dockerfiles.git synced 2025-04-20 04:19:18 +00:00
Code Issues Projects Releases Wiki Activity

reverse: add full HPACK encoding support

Browse Source
This commit is contained in:
Wonderfall 2017-09-20 19:12:55 +02:00 committed by GitHub
parent 1edc23a5ae
commit cc509a2a07
1 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
reverse/Dockerfile
View File

@ -100,6 +100,10 @@ RUN NB_CORES=${BUILD_CORES-$(getconf _NPROCESSORS_CONF)} \
&& echo "All seems good, now unpacking ${NGINX_TARBALL}..." \ && echo "All seems good, now unpacking ${NGINX_TARBALL}..." \
&& tar xzf ${NGINX_TARBALL} && cd nginx-${NGINX_VERSION} \ && tar xzf ${NGINX_TARBALL} && cd nginx-${NGINX_VERSION} \
# Nginx patch : full HPACK encoding
&& wget -q https://gist.githubusercontent.com/Wonderfall/da386e52e8c65c81d358c64066c85ace/raw/e9ee0228eaf37c9da3fd70129700651f6a9d5839/nginx-http2-hpack.patch \
&& patch -p1 < nginx-http2-hpack.patch \
# Nginx patch : dynamic TLS records # Nginx patch : dynamic TLS records
&& wget -q https://raw.githubusercontent.com/cujanovic/nginx-dynamic-tls-records-patch/master/nginx__dynamic_tls_records_1.13.0%2B.patch -O dynamic_records.patch \ && wget -q https://raw.githubusercontent.com/cujanovic/nginx-dynamic-tls-records-patch/master/nginx__dynamic_tls_records_1.13.0%2B.patch -O dynamic_records.patch \
&& patch -p1 < dynamic_records.patch \ && patch -p1 < dynamic_records.patch \
@ -108,10 +112,11 @@ RUN NB_CORES=${BUILD_CORES-$(getconf _NPROCESSORS_CONF)} \
&& ./configure \ && ./configure \
--prefix=/nginx \ --prefix=/nginx \
--sbin-path=/usr/local/sbin/nginx \ --sbin-path=/usr/local/sbin/nginx \
--with-cc-opt="-O3 -fPIE -fstack-protector-strong -D_FORTIFY_SOURCE=2 -Wformat -Werror=format-security -Wno-deprecated-declarations -I ../boringssl/.openssl/include/" \ --with-cc-opt="-O3 -fPIE -fstack-protector-strong -D_FORTIFY_SOURCE=2 -Wformat -Werror=format-security -Wno-deprecated-declarations -Wno-error=strict-aliasing" \
--with-ld-opt="-lrt -ljemalloc -Wl,-Bsymbolic-functions -Wl,-z,relro -L ../boringssl/.openssl/lib" \ --with-ld-opt="-lrt -ljemalloc -Wl,-Bsymbolic-functions -Wl,-z,relro" \
--with-openssl-opt='no-async enable-ec_nistp_64_gcc_128 no-shared no-ssl2 no-ssl3 no-comp no-idea no-weak-ssl-ciphers -DOPENSSL_NO_HEARTBEATS -O3 -fPIE -fstack-protector-strong -D_FORTIFY_SOURCE=2' \ --with-openssl-opt='no-async enable-ec_nistp_64_gcc_128 no-shared no-ssl2 no-ssl3 no-comp no-idea no-weak-ssl-ciphers -DOPENSSL_NO_HEARTBEATS -O3 -fPIE -fstack-protector-strong -D_FORTIFY_SOURCE=2' \
--with-openssl=/tmp/openssl-${OPENSSL_VERSION} \ --with-openssl=/tmp/openssl-${OPENSSL_VERSION} \
--with-http_v2_hpack_enc \
--http-log-path=/nginx/log/nginx_access.log \ --http-log-path=/nginx/log/nginx_access.log \
--error-log-path=/nginx/log/nginx_error.log \ --error-log-path=/nginx/log/nginx_error.log \
--pid-path=/nginx/run/nginx.pid \ --pid-path=/nginx/run/nginx.pid \