Activity
From 2026-10-03 to 2026-10-09
2026-10-08
- GS 22:23 Lighttpd Bug #3325 (Patch Pending): OpenSSL "Curves/Groups" option not honored during startup
- lighttpd mod_openssl.c sets default curves (including X25519MLKEM768) during initialization, and then allows user-overrides in lighttpd.conf.
> ps: as i was digging around this issue it seemed possible to runtime check the various com... - AW 12:51 Lighttpd Bug #3325 (Patch Pending): OpenSSL "Curves/Groups" option not honored during startup
- Tried to use 1.4.85 with openssl 3.5.6 compiled with no-ml-kem option.
During startup it fails with message:
2026-10-08 12:41:20: (../../lighttpd-1.4.85/src/mod_openssl.c.3564) SSL: Unable to config groups X25519MLKEM768:X25519:P-256...
2026-10-07
- XL 06:27 Lighttpd Bug #3322: Graceful restart does not close file descriptors of running CGI scripts
- I am sorry if you waited for me to test the patch. I have moved to other issues in the meantime.
I tested the new patch with both CGI scripts. It seems to be working - there was no FD accumulation or deadlocks.