Today, we’re releasing Ferron 3.0.0-rc.5, the fifth release candidate version of what it would be Ferron 3.
This release involves distributed TLS improvements and a forwarded authentication bugfix.
Distributed TLS improvements
I improved ACME automatic TLS and STEK auto-rotation features to allow to be used for distributed TLS over a shared network filesystem. You can configure it like non-distributed automatic TLS, but point the cache and STEK keys at a location served by a shared volume, like this:
example.com {
tls {
provider acme
challenge http-01
contact "admin@example.com"
cache "/var/cache/ferron-acme-shared"
ticket_keys {
file "/var/cache/ferron-acme-shared/tickets.keys"
auto_rotate
rotation_interval "12h"
max_keys 3
}
}
root /var/www/html
}This makes it easier to use Ferron 3 as a part of distributed system where there are multiple edge server instances (like microservices architecture or CDNs).
Forwarded authentication improvements
Improved handling and checking the authentication status when using forwarded authentication, to improve security and enforcement.
Thank you @impietic for your contributions!
Ferron 3 stable coming soon
Ferron 3 is approaching even closer to a stable, production-ready web server. This release candidate focuses on improving the overall stability and user experience of Ferron 3.
As always, I welcome feedback, bug reports, and testing results.
Full changelog
You can see the complete changelog for Ferron 3.0.0-rc.1 in the release notes.
Try it
- Documentation: https://ferron.sh/docs/v3
- GitHub repo: https://github.com/ferronweb/ferron/tree/develop-3.x
Install Ferron 3 using the installer:
sudo bash -c "$(curl -fsSL https://get.ferron.sh/v3)"