New TurnKey LAMP Stack version (17.0)

Changes:

  • Updated all relevant Debian packages to Bullseye/11 versions; including PHP 7.4.
  • Provide predefined dh_params (via 'turnkey-make-ssl-cert' where relevant) as per RFC7919 - part of #1653.
  • Updated version of mysqltuner script.
  • Enable HTTP/2 by default (where possible). Note: will not actually work until a CA signed cert is generated or installed.
  • Configure OCSP stapling (will only work once a valid cert is configured).
  • Enable HSTS by default (only effects HTTPS traffic - full implementation also requires HTTP redirect to HTTPS and valid cert).
  • Enable Apache mod-headers by default (required for HSTS).
  • Disable cipher order in default ssl.conf (no longer required with the secure cipher suites we use; mild improvement in cpu resources).
  • Update Apache's mod-python to use python3. Also update included python mysql module to use python3 variant (python3-mysqldb).
  • Retab default site file (000-default.conf) to make the indentation consistent (cosmetic change only).
  • Reorgnaise/refactor build code so there is now a dedicated apache.mk file. (Development - should have no end user impact).
  • Note: Please refer to turnkey-core's 17.0 changelog for changes common to all appliances. Here we only describe changes specific to this appliance.

Links

New TurnKey LAMP Stack version (16.1)

Changes:

  • Include 'turnkey-composer' wrapper script - runs composer as www-data user. Makes it easy to not run composer as root - part of #1539.
  • Explicitly install composer (rather than automatically include in all LAMP based appliances) - part of #1563.
  • Note: Please refer to turnkey-core's 16.1 changelog for changes common to all appliances. Here we only describe changes specific to this appliance.

Links

New TurnKey LAMP Stack version (16.0)

Changes:

  • Explcitly disable TLS<1.2 (i.e. SSLv3, TLSv1, TLSv1.1). (v15.x TurnKey releases supported TLS 1.2, but could fallback as low as TLSv1).
  • Update SSL/TLS cyphers to provide "Intermediate" browser/client support (suitable for "General-purpose servers with a variety of clients, recommended for almost all systems"). As provided by Mozilla via https://ssl-config.mozilla.org/.
  • Updated all relevant Debian packages to Buster/10 versions; including PHP 7.3.
  • Updated version of mysqltuner script - now installed as per upstream recommendation.
  • Note: Please refer to turnkey-core's changelog for changes common to all appliances. Here we only describe changes specific to this appliance.

Links

Pages

more