Custom Query (2297 matches)
Results (16 - 18 of 2297)
Ticket | Resolution | Summary | Owner | Reporter |
---|---|---|---|---|
#50 | fixed | Basic Auth does not seem to work with SHA1 hashs | ||
Description |
We are using Basic Authentication to protect part of our site. Initially, we set up the passwords using the SHA1 option. However, authentication failed. Using MD5 worked OK. I think NGINX module is not generating the SHA1 version of the password from the HTTP header correctly. This is the log dump: 2011/11/04 14:01:22 [debug] 26969#0: *6 rc: 0 user: "SR*" salt: "{SHA}VAf27VQjI3EG7889p+LAY9HqMOo=" 2011/11/04 14:01:22 [debug] 26969#0: *6 encrypted: "{SgJ8nAZK5bVg" 2011/11/04 14:01:22 [error] 26969#0: *6 user "istewartson": password mismatch, client: 62.73.161.20, server: site400.the clubuk.com, request: "GET /guides/index.html HTTP/1.1", host: "SR", referrer: "http://**SR**/report/chapter-1.html" Looking at the source, we think the code in src/core/ngx_crypt.c in the function ngx_crypt_ssha not creating the hashed version of the password correctly - it should be {SHA}followed by 20 characters - the encrypted line in the above debug dump looks wrong. I've remove some sensitive data and replaced it by SR (host and user names). |
|||
#66 | fixed | SCGI response doesn't compress with GZIP | ||
Description |
GZIP filtering ignores scgi responses with correct headers (content-type etc.) and doesn't compress responses. |
|||
#72 | fixed | Bad mp4 handling | ||
Description |
The built in MP4 module corrupts files produced by ffmpeg 0.9. While it's true that our setup had both the built in module *AND* the third party one, we did retest with 1.0.11 and only the builtin and the same error persisted. The issue seems to be solved by http://h264.code-shop.com/trac/wiki/Mod-H264-Streaming-Nginx-Version2 The generated file is most likely not cut on a keyframe boundary because the audio works fine, and playing the file in mplayer shows some motion similar to the original video. |