Timeline



01/08/21:

20:28 Ticket #2118 (no "ssl_certificate" is defined for the "listen ... ssl" when listen ...) closed by Maxim Dounin
worksforme: > Is this a problem with the config tester or am I missing something? …

01/07/21:

13:39 Ticket #2118 (no "ssl_certificate" is defined for the "listen ... ssl" when listen ...) created by lukasmatta@…
Hello, when I try to run "nginx -t" to test my config files, I get …
02:58 Ticket #2117 (upstream sent more data than specified in "Content-Length" header ...) updated by Maxim Dounin
Status changed
Thank you for the report. Indeed, this is a bug in handling of …

01/04/21:

22:06 Ticket #2116 (OCSP verification fails if response is signed by a designated authority) updated by Yan Foto
Checkmate! ---- > Try using -CAfile and -CApath arguments …
21:23 Ticket #2116 (OCSP verification fails if response is signed by a designated authority) updated by Maxim Dounin
Replying to Yan Foto: > 1. Choose a provider that uses …
13:21 Ticket #2116 (OCSP verification fails if response is signed by a designated authority) updated by Yan Foto
This is summary of of the discussion so far and my final comment.

01/03/21:

23:24 Ticket #2115 (Consider using "proxy_set_header Connection $http_connection;" in all ...) updated by Maxim Dounin
The example in the article does not imply using Connection: upgrade
23:07 Ticket #2116 (OCSP verification fails if response is signed by a designated authority) updated by Maxim Dounin
> So I guess the question remains: why doesn't it manage to do the …

01/02/21:

01:27 Ticket #2116 (OCSP verification fails if response is signed by a designated authority) updated by Yan Foto
> This implies that an OCSP response can be verified by using only …

12/31/20:

19:34 Ticket #1926 (resolver should not cache failures) closed by Maxim Dounin
invalid: The configuration in the archive provided is as follows: […] Note …
19:07 Ticket #2116 (OCSP verification fails if response is signed by a designated authority) updated by Maxim Dounin
> there would be no need to explicitly include an anchor which is …
14:04 Ticket #2114 (nginx-module-njs dependency error) updated by thresh
Owner, Status changed
No problem at all. That means we need to document this can happen and …
13:55 Ticket #2114 (nginx-module-njs dependency error) updated by Reine Kurth
Hello, sorry for the delay. Yes, you are right. I guess I could have …
13:21 Ticket #2116 (OCSP verification fails if response is signed by a designated authority) updated by Yan Foto
For future reference: I spent some more time trying to figure out …
12:16 Ticket #1926 (resolver should not cache failures) reopened by Orgad Shaneh

12/30/20:

21:31 nginx-docker.tar.gz attached to Ticket #1926 by Orgad Shaneh
Docker example
21:31 Ticket #1926 (resolver should not cache failures) updated by Orgad Shaneh
Sorry for the late response. It hits us again recently. I have a …
17:47 Changeset in nginx [8677:c57b6fc90f90]quic by Vladimir Homutov <vl@…>
QUIC: fixed header protection macro name.
07:49 Ticket #2117 (upstream sent more data than specified in "Content-Length" header ...) updated by halfcrazy@…
Description changed
05:54 1196.pcap attached to Ticket #2117 by halfcrazy@…
tcpdump
05:52 Ticket #2117 (upstream sent more data than specified in "Content-Length" header ...) created by halfcrazy@…
I have an invalid upstream that repsonse 204 with extra data. It works …
01:05 Ticket #2116 (OCSP verification fails if response is signed by a designated authority) updated by Yan Foto
Another note: > […] despite the fact that all valid responses are …

12/29/20:

21:37 Ticket #2115 (Consider using "proxy_set_header Connection $http_connection;" in all ...) updated by sbrudenell@…
>Correct approach is to fix such configurations I agree of course. …
21:33 Ticket #2116 (OCSP verification fails if response is signed by a designated authority) updated by Yan Foto
I appreciate the quick response, but I'm not sure if that's an OpenSSL …
21:10 Ticket #2116 (OCSP verification fails if response is signed by a designated authority) closed by Maxim Dounin
invalid: Unfortunately, OpenSSL provides no easy way to verify OCSP responses …
17:56 Ticket #2115 (Consider using "proxy_set_header Connection $http_connection;" in all ...) closed by Maxim Dounin
wontfix: Thank you for your suggestion. First of all, using $http_connection
17:21 Changeset in nginx-tests [1637:da52525f49d1] by Sergey Kandaurov <pluknet@…>
Tests: avoid ssl_certificate.t hang on SIGPIPE. It could stuck in SSL …
11:13 Changeset in nginx [7759:a20eef9a1df2] by Gena Makhomed <gmm@…>
Contrib: vim syntax, update core and 3rd party module directives.
00:29 Ticket #2116 (OCSP verification fails if response is signed by a designated authority) updated by Yan Foto
I also get the same results with nginx/1.18.0: […]

12/28/20:

23:39 Ticket #2116 (OCSP verification fails if response is signed by a designated authority) created by Yan Foto
Enabling stapled OCSP by setting ssl_stapling and …
10:09 Ticket #2114 (nginx-module-njs dependency error) updated by thresh
Hi, It seems that nginx from Ubuntu repositories got installed …

12/27/20:

07:33 Ticket #2115 (Consider using "proxy_set_header Connection $http_connection;" in all ...) created by sbrudenell@…
Hi, There are a number of places in shipped config and documentation …

12/26/20:

18:45 Ticket #2114 (nginx-module-njs dependency error) created by Reine Kurth
nginx installed from nginx PPA on Ubuntu 20.10 (deb [arch=amd64] …

12/25/20:

12:01 Changeset in nginx [8676:7df607cb2d11]quic by Vladimir Homutov <vl@…>
QUIC: ngx_quic_bpf module. The quic kernel bpf helper inspects packet …
11:18 Changeset in nginx [8674:2c7f927f7999]quic by Vladimir Homutov <vl@…>
QUIC: ngx_quic_module.
11:01 Changeset in nginx [8673:046c951e393a]quic by Vladimir Homutov <vl@…>
QUIC: moved all quic sources into src/event/quic.

12/24/20:

16:17 Changeset in nginx-tests [1636:2d371452658c] by Sergey Kandaurov <pluknet@…>
Tests: fixed serving binary OCSP responses on win32.

12/23/20:

16:42 Ticket #2112 (Domain Redirection.) closed by Maxim Dounin
invalid: For questions on how to configure nginx, consider using …

12/22/20:

13:41 Changeset in nginx [8672:13c537def699]quic by Sergey Kandaurov <pluknet@…>
QUIC: removed unused <openssl/aes.h> inclusion. The low-level API was …
12:57 Ticket #2104 (I encountered an error when compiling nginx-quic.) closed by Sergey Kandaurov
fixed: https://hg.nginx.org/nginx-quic/rev/5247461c17e1
09:04 Changeset in nginx [8671:5247461c17e1]quic by Sergey Kandaurov <pluknet@…>
QUIC: fixed -Wtype-limits with GCC <= 5 (ticket #2104).
09:04 Changeset in nginx [8670:b14338acbf9d]quic by Sergey Kandaurov <pluknet@…>
QUIC: fixed logging PATH_CHALLENGE/RESPONSE and build with GCC < 5.
09:04 Changeset in nginx [8669:5b51d8405378]quic by Sergey Kandaurov <pluknet@…>
QUIC: fixed building ALPN callback without debug and http2.
09:03 Changeset in nginx [8668:af6363758ef9]quic by Sergey Kandaurov <pluknet@…>
QUIC: fixed build with OpenSSL < 1.1.1. The <openssl/kdf.h> header is …

12/21/20:

17:35 Changeset in nginx [8683:6422455c92b4]quic by Roman Arutyunyan <arut@…>
HTTP/3: removed HTTP/3-specific code. The …
12:05 Changeset in nginx [8667:a4c05aff8ec0]quic by Sergey Kandaurov <pluknet@…>
QUIC: converted to SSL_CIPHER_get_protocol_id(). This API is …

12/19/20:

11:37 Ticket #2112 (Domain Redirection.) created by info.excent.co.uk@…
Hello Team, We have use the free version of the nginx to replace the …

12/18/20:

19:05 Ticket #2111 (Worker dumps core with image_filter test, proxy and HTML response from ...) updated by Maxim Dounin
Could you please provide details on how …
18:05 Ticket #2110 (nginx as grpc reverse proxy report 499 after few weeks of work) closed by Maxim Dounin
invalid
15:34 Ticket #2111 (Worker dumps core with image_filter test, proxy and HTML response from ...) created by lordgurke@…
nginx worker process dumps core (and drops connection) if the …
11:21 Ticket #2110 (nginx as grpc reverse proxy report 499 after few weeks of work) updated by shuliakovsky@…
I think task may be closed until problem will happen in future.
10:22 Ticket #2110 (nginx as grpc reverse proxy report 499 after few weeks of work) updated by shuliakovsky@…
> Another thing which catches my eye is the name of the backend …

12/17/20:

15:40 Ticket #2110 (nginx as grpc reverse proxy report 499 after few weeks of work) updated by Maxim Dounin
> I mean NGINX begins report 499 Again: it's not nginx reports 499, …
07:48 Ticket #2110 (nginx as grpc reverse proxy report 499 after few weeks of work) updated by shuliakovsky@…
Replying to Maxim Dounin: > Could you please clarify what …
01:24 Ticket #1606 (WebAssembly doesn't work on Firefox/Chrome due to missing MIME type) updated by Laurence 'GreenReaper' Parry
This is a common enough issue for users of Flash emulator Ruffle …

12/16/20:

13:24 Ticket #2110 (nginx as grpc reverse proxy report 499 after few weeks of work) updated by Maxim Dounin
Could you please clarify what makes you think that the observed …
12:47 Changeset in nginx [8666:ab6aaa8e86b0]quic by Sergey Kandaurov <pluknet@…>
HTTP/3: staticize internal parsing functions.
12:47 Changeset in nginx [8665:96eb6915d244]quic by Sergey Kandaurov <pluknet@…>
HTTP/3: staticize ngx_http_v3_methods.
07:13 Ticket #2110 (nginx as grpc reverse proxy report 499 after few weeks of work) updated by shuliakovsky@…
P.S. Nothing abnormal with memory or cpu usage not detected.
07:10 Ticket #2110 (nginx as grpc reverse proxy report 499 after few weeks of work) created by shuliakovsky@…
NGINX used as grpc-proxy with queue to avoid throttling from grpc …

12/15/20:

16:55 Changeset in nginx [8664:f61d347158d0]quic by Sergey Kandaurov <pluknet@…>
Merged with the default branch.
15:06 Milestone nginx-1.19.6 completed
Status: scheduled Trunk: mainline * Bug fixes
14:57 Changeset in nginx_org [2636:a0824dab33ff] by Maxim Dounin <mdounin@…>
nginx-1.19.6
14:41 Changeset in nginx [7757:82228f955153] by Maxim Dounin <mdounin@…>
release-1.19.6 tag
14:41 Changeset in nginx [7756:f618488eb769]release-1.19.6 by Maxim Dounin <mdounin@…>
nginx-1.19.6-RELEASE
13:49 Changeset in nginx [7755:7d6ba2a00e2f] by Maxim Dounin <mdounin@…>
Updated OpenSSL used for win32 builds.
13:13 Ticket #2106 (How can I read Subject Alternative name from client certificate?) closed by Maxim Dounin
wontfix: The $ssl_client_escaped_cert is a client certificate in PEM format, …
12:23 Changeset in nginx [8675:d3747ba486e7]quic by Vladimir Homutov <vl@…>
Core: added interface to linux bpf() system call. It contains …

12/14/20:

21:37 Ticket #1606 (WebAssembly doesn't work on Firefox/Chrome due to missing MIME type) updated by https://stackoverflow.com/users/4228964/florent
Please add this mime type. I forgot multiple times to add it to the …
20:21 Ticket #2109 (Content-Type header is dropped when HTTP2 is used( HTTP status 204 only)) updated by Maxim Dounin
Status changed
It looks like a bug in ngx_http_v2_header_filter(). In contrast to …
13:51 Ticket #2106 (How can I read Subject Alternative name from client certificate?) updated by stackoverflow12301230@…
@Maxim: As per my use case, I want to retrieve SAN from user …
08:59 Ticket #2109 (Content-Type header is dropped when HTTP2 is used( HTTP status 204 only)) created by ms2008vip@…
When backend server returned HTTP status 204 with Content-Type header. …

12/11/20:

23:18 Ticket #2106 (How can I read Subject Alternative name from client certificate?) updated by Maxim Dounin
The full certificate in PEM format is available in the …
16:21 Ticket #2106 (How can I read Subject Alternative name from client certificate?) created by stackoverflow12301230@…
How can I read Subject Alternative name from client certificate? …
10:42 Changeset in nginx [7754:7a55311b0dc3] by Maxim Dounin <mdounin@…>
Fixed double close of non-regular files in flv and mp4. With …

12/10/20:

20:54 Changeset in nginx-tests [1635:7b80c8e0479a] by Maxim Dounin <mdounin@…>
Tests: absolute URI parsing tests.
17:40 Ticket #2079 (Empty path in URL) closed by Maxim Dounin
fixed: Fix committed, thanks for reporting this.
17:14 Ticket #2079 (Empty path in URL) updated by Maxim Dounin <mdounin@…>
In [changeset:"8989fbd2f89aadfc879798127e66f5a85044ed44/nginx"
17:09 Changeset in nginx [7753:2fec22332ff4] by Maxim Dounin <mdounin@…>
Removed extra allocation for r->uri. The ngx_http_parse_complex_uri() …
17:09 Changeset in nginx [7752:8989fbd2f89a] by Maxim Dounin <mdounin@…>
Fixed parsing of absolute URIs with empty path (ticket #2079). When …
14:54 Changeset in nginx [8662:b9ac4752d0e6]quic by Roman Arutyunyan <arut@…>
QUIC: send and process ack_delay for Initial and Handshake levels. …
11:51 Ticket #2071 (ssl_reject_handshake on introduced in nginx 1.19.4 works but disables ...) updated by i81b4u@…
FYI: I saw today that the code that fixes the problem made it into …

12/09/20:

21:26 Changeset in nginx [8663:1823e2152fc4]quic by Roman Arutyunyan <arut@…>
QUIC: always calculate rtt for largest acknowledged packet. …
16:15 Changeset in nginx [8661:49efd27dace6]quic by Roman Arutyunyan <arut@…>
QUIC: use client max_ack_delay when computing pto timeout. …
Note: See TracTimeline for information about the timeline view.