lighttpd

lighttpd Description

lighttpd is an open source, free, secure, fast, compliant, and very flexible Web server, specifically engineered and optimized for high-performance Linux environments.lighttpd has an advanced set of features that includes FastCGI (load balanced), CGI, Auth, Output-Compression, URL-Rewriting, SSL, and much more.lighttpd is the perfect solution for Linux server where high performance AJAX applications are a must, because of its event-driven architecture, which is optimized for a large number of parallel connections (keep-alive).Compared to other popular Web servers, lighttpd has a small memory footprint, as well as effective management of the CPU load. What's New in This Release: [ read full changelog ]Important changes:There have been some important security fixes pending (which you should already have gotton through your favorite distribution); I am sorry for the delayed release (we probably should communicate security bugs on our page and mailing lists too for those who are not following oss-security).We updated the “standardâ€‌ ssl cipher string recommendation to ssl.cipher-list ="aRSA+HIGH !3DES +kEDH +kRSA !kSRP !kPSK"; see below for the detailed reasons.Regression warning:The fix for lighttpd SA-2013-01 (CVE-2013-4508, “Using possibly vulnerable cipher suites with SNIâ€‌) includes a regression:Each SSL_CTX also gets loaded with all values for ssl.ca-file from all blocks in the config.This means that your ssl.ca-files must not contain cyclic chains and should use unique subject names.See Debian Bug – #729555 for more details.Security fixes:lighttpd SA-2013-01 (CVE-2013-4508)lighttpd SA-2013-02 (CVE-2013-4559)lighttpd SA-2013-03 (CVE-2013-4560)OpenSSL ci... �.You can free download lighttpd from Softpedia now.