TLS 1.3 support added in Abyss Web Server 2.14

May 26, 2020

Today, we are happy to announce the release of Abyss Web Server version 2.14 for Windows, macOS, and Linux. It is available in two editions:

  • Abyss Web Server X1 version 2.14: Free personal edition. It isn't a trial version or a demo. It is a fully usable personal web server with no limitations, no nag screens, no spyware, and no advertisements.
  • Abyss Web Server X2 version 2.14: Professional edition priced at US $59.95. It is a professional web server which comes with one year of free upgrades and one year of priority technical support.

It is highly recommended that users of previous releases upgrade as soon as possible to this new version.

Major new features

  • Added support for TLS 1.3
  • Added support for TLS ciphers based on Elliptic-curve Diffie-Hellman (ECDH) and Diffie-Hellman key Exchange (DHE)
  • Improved macOS edition with added notarization to conform to the stricter security rules of macOS Catalina 10.15
  • Improved the installer of the Windows edition
  • Changed minimum operating system requirement to Windows XP, Mac OS X 10.9 and any Linux with GLIBC 2.4

Download / Upgrade

For Abyss Web Server X1 Users

Visit Downloads to get the new version of Abyss Web Server. Installation and upgrading instructions are provided on the download page.

For Abyss Web Server X2 Users

Open Abyss Web Server's console, select Help & Support, and click on Check for Updates.

Detailed changelog

SSL/TLS

  • Added support for TLS 1.3
  • Added support for TLS ciphers based on Elliptic-curve Diffie-Hellman (ECDH) and Diffie-Hellman key Exchange (DHE)
  • Exposed a parameter in custom SSL/TLS profiles declarations to honor server ciphers list order
  • Updated predefined SSL/TLS profiles to account for modern browsers and TLS 1.3 introduction
  • Removed support for the deprecated and insecure SSL3 protocol

ACME

  • Added HTTP proxy configuration to ACME Bot
  • Added support for POST-as-GET in ACME
  • Added support for skipping hostname * from ACME certificate generation

Server Core

  • Updated HTTP OPTIONS verb handling to fully respect the HTTP/1.1 specification
  • Improved HTTP headers request and response processing to respect all the edge cases of the HTTP/1.1 specification (empty HTTP headers, folding of multiple-valued headers, special handing of Set-Cookie and Set-Cookie2 headers)
  • Updated the HTTP Keep-Alive behavior to be in full conformance with the HTTP/1.1 updated specification in RFC 7230
  • Changed the HTTP parser to be stricter
  • Fixed a bug occurring with X-Sendfile when both chunked encoding and compression are active
  • Updated IP address string conversion to generate easier-to-read IPv4 addresses instead of IPv4-over-IPv6 style ones

SSI

  • Updated SSI processing of expressions to add support for the == comparison operator
  • Fixed SSI parsing of attribute values enclosed between quotes or backticks
  • Added proper regular expression parsing in SSI

Windows specific changes

  • Improved Windows installer
  • Updated the Windows installer to restrict access permissions to the installation directory and to the kcstore subdirectory

macOS specific changes

  • Added notarization to conform to the stricter security rules of macOS Catalina 10.15
  • Modernized the DMG package for macOS (added a graphical background with installation instruction)
  • Deprecated old method to run privileged operations on macOS and replaced it by a proper helper tool
  • Updated the Help book to be conformant to the modern macOS help specifications

Operating systems compatibility

  • Changed minimum operating system requirement to Windows XP, Mac OS X 10.9 and any Linux with GLIBC 2.4
  • Updated integrated documentation to adapt to dark mode on macOS and Windows 10
  • Cleaned the source code base from artifacts related to legacy operating systems.

Keep in touch with us

Sign up for our low volume newsletter to get product announcements, articles and power tips.

or