Timeline



09/02/23:

17:01 Changeset in nginx_org [3006:0e805229dd19] by Sergey A. Osokin <sergey.osokin@…>
Updated ngx_http_ssl_module documentation. Provided details about …

09/01/23:

17:34 Ticket #2541 (TLS 1.2 connection on TLS 1.3 only site) closed by Maxim Dounin
invalid: Thanks for the feedback, closing this.
16:31 Changeset in nginx [9157:daf8f5ba23d8] by Sergey Kandaurov <pluknet@…>
QUIC: removed use of SSL_quic_read_level and SSL_quic_write_level. As …
16:31 Changeset in nginx [9156:36b59521a41c] by Sergey Kandaurov <pluknet@…>
QUIC: refined sending CONNECTION_CLOSE in various packet types. As …
04:01 Ticket #2541 (TLS 1.2 connection on TLS 1.3 only site) updated by vp1981@…
Thanks for the explanations and suggestions! I implemented your idea …

08/31/23:

21:38 Changeset in nginx_org [3004:c95cbff9f571] by Artem Konev <artem.konev@…>
Added info about the Unit 1.31.0 release.
19:59 Changeset in nginx [9155:35bb47f65cab] by Maxim Dounin <mdounin@…>
Upstream: fixed handling of Status headers without reason-phrase. …
19:14 Changeset in nginx_org [3005:8b8f94802f41] by Ryan Davis <ry.davis@…>
Fixed lang attribute, added module closing tag.
15:54 Changeset in nginx [9168:ff98ae7d261e] by Sergey Kandaurov <pluknet@…>
QUIC: split keys availability checks to read and write sides. Keys …
10:29 Ticket #2540 (nginx stable 1.24 issues with cache file deletion under heavy load) closed by Maxim Dounin
invalid: Thanks for confirming, closing this.
10:28 Ticket #2532 (Nginx close connection immeadiately when handle quic connection migration) closed by Roman Arutyunyan
fixed
10:28 Ticket #2532 (Nginx close connection immeadiately when handle quic connection migration) updated by Roman Arutyunyan <arut@…>
In [changeset:"f6b6f3dd7ca0653fc5ffe4f32dc806460eb6c64e/nginx"
09:10 Ticket #2540 (nginx stable 1.24 issues with cache file deletion under heavy load) updated by p4rancesc0@…
Hi, by removing those two directives: […] out problems is …
08:43 Ticket #2541 (TLS 1.2 connection on TLS 1.3 only site) updated by Maxim Dounin
By default, nginx 1.25.2 accepts connections with …
08:14 Ticket #2540 (nginx stable 1.24 issues with cache file deletion under heavy load) updated by p4rancesc0@…
Hi, thanks for the reply. I can confirm that there is no traffic on …
08:01 Ticket #2541 (TLS 1.2 connection on TLS 1.3 only site) updated by Maxim Dounin
See also #2538.
08:01 Ticket #2538 (Site has TLS 1.2 connection despite being configured with TLS 1.3 only) closed by Maxim Dounin
duplicate: Duplicate of #2541.
07:46 Ticket #2540 (nginx stable 1.24 issues with cache file deletion under heavy load) updated by Maxim Dounin
There is no any traffic on nginx after the test stopped, correct? …
06:54 Changeset in nginx [9154:f6b6f3dd7ca0] by Roman Arutyunyan <arut@…>
QUIC: ignore path validation socket error (ticket #2532). Previously, …
05:39 Ticket #2541 (TLS 1.2 connection on TLS 1.3 only site) updated by vp1981@…
It looks like there was a problem with the nginx configuration. …
00:13 Ticket #2541 (TLS 1.2 connection on TLS 1.3 only site) created by vp1981@…
I configured nginx to accept only TLS 1.3 connections and up to …

08/30/23:

20:16 Ticket #1665 (Minimum zone size for limit_req strangely high) updated by joshua.mccullough.teslagovernment.com@…
The above comment was my mistake, I did not include the unit in the …
20:13 Ticket #1665 (Minimum zone size for limit_req strangely high) updated by joshua.mccullough.teslagovernment.com@…
Could the docs be updated regarding this? It's very confusing. In my …
13:03 Ticket #2540 (nginx stable 1.24 issues with cache file deletion under heavy load) updated by p4rancesc0@…
Description changed
13:02 Ticket #2540 (nginx stable 1.24 issues with cache file deletion under heavy load) updated by p4rancesc0@…
Description changed
13:00 Ticket #2540 (nginx stable 1.24 issues with cache file deletion under heavy load) updated by p4rancesc0@…
Description changed
12:57 Ticket #2540 (nginx stable 1.24 issues with cache file deletion under heavy load) created by p4rancesc0@…
Hi, during some synthetic benchmarks on our nginx we faced a strange …
12:47 Changeset in nginx-tests [1939:24482e311749] by Sergey Kandaurov <pluknet@…>
Tests: added QUIC test with resending Initial packets on Retry.
11:36 Ticket #2539 (--with-http_v3_module changes the layout of the ngx_connection_s ...) updated by Roman Arutyunyan
Thanks for reporting this. QUIC indeed should be included in signature.
09:59 Ticket #2539 (--with-http_v3_module changes the layout of the ngx_connection_s ...) created by dmikhin@…
Nginx compiled with v3 support has following signature: […] Nginx …
07:09 Changeset in nginx [9153:8f7e6d8c061e] by Roman Arutyunyan <arut@…>
QUIC: use last client dcid to receive initial packets. Previously, …
04:11 Ticket #2538 (Site has TLS 1.2 connection despite being configured with TLS 1.3 only) updated by vp1981@…
(Continue 3) This is how I tested with curl: (see attachment).
04:10 Ticket #2538 (Site has TLS 1.2 connection despite being configured with TLS 1.3 only) updated by vp1981@…
(Continue) I configured nginx to establish only TLS 1.3 connections …
04:09 Ticket #2538 (Site has TLS 1.2 connection despite being configured with TLS 1.3 only) created by vp1981@…
Hello, I'm running nginx on Archlinux.

08/29/23:

22:22 Changeset in nginx-tests [1938:e1059682aeef] by Sergey Kandaurov <pluknet@…>
Tests: fixed ClientHello with resending Initial QUIC packets. …
17:25 Ticket #2537 (Host not found in resolver "kube-dns.kube-system.svc.cluster.local". ...) updated by Maxim Dounin
There are no restrictions on DNS server name length in resolver. In …
08:11 Changeset in nginx_org [3003:4e25281328fa] by Yaroslav Zhuravlev <yar@…>
Updated with Netcraft August 2023 Web Server Survey stats.
07:36 Ticket #2532 (Nginx close connection immeadiately when handle quic connection migration) updated by Roman Arutyunyan
Please try the attached patch.
07:35 quic-old-path-validation attached to Ticket #2532 by Roman Arutyunyan
07:22 Ticket #2532 (Nginx close connection immeadiately when handle quic connection migration) updated by Roman Arutyunyan
Normally ICMP takes some time to arrive and error is not returned by …
07:06 Ticket #2536 (should we discard initial packet with zero-length odcid?) closed by Roman Arutyunyan
invalid: I looked deeper into this and I don't see how odcid can be empty. An …

08/27/23:

02:47 Ticket #2536 (should we discard initial packet with zero-length odcid?) updated by Roman Arutyunyan
Thanks for reporting this. We need to rely on client ip/port in this case.

08/26/23:

11:23 Ticket #2537 (Host not found in resolver "kube-dns.kube-system.svc.cluster.local". ...) created by yersan@…
Hi, I have the following simple configuration: […] Which gives …

08/25/23:

16:06 Ticket #2536 (should we discard initial packet with zero-length odcid?) created by pl080516@…
If a initial packet with zero-length odcid is accpeted, nginx will …
16:02 BadContent edited by Maxim Dounin
(diff)
14:12 Changeset in nginx-tests [1937:2a0a6035a1af] by Sergey Kandaurov <pluknet@…>
Tests: removed TODO and try_run() checks for legacy versions.
14:12 Changeset in nginx-tests [1936:716d7500317d] by Sergey Kandaurov <pluknet@…>
Tests: keep HTTP/2 test for "return 444" in error_page as TODO.
12:39 Changeset in nginx [9151:933f37273282] by Sergey Kandaurov <pluknet@…>
Version bump.
09:51 Changeset in nginx [9152:2880f60a80c3] by Sergey Kandaurov <pluknet@…>
QUIC: posted generating TLS Key Update next keys. Since at least …

08/24/23:

10:59 Changeset in nginx-tests [1935:6bafe9419126] by Sergey Kandaurov <pluknet@…>
Tests: allowed ssl_curve.t to run on BoringSSL. Recently BoringSSL …

08/23/23:

18:32 Ticket #2534 (Build error with clang 16 on Alpine) closed by Maxim Dounin
wontfix: That's a known issue with clang and musl, see here: …
16:48 Ticket #2533 (Variables does not work in error_log and ssl_certificate) closed by Maxim Dounin
duplicate: Duplicate of #2531.
16:48 Ticket #2531 (You cannot use variables in error_log and ssl_certificate) updated by Maxim Dounin
See also #2533.
15:54 Ticket #2534 (Build error with clang 16 on Alpine) updated by kenballus@…
Description changed
15:53 Ticket #2534 (Build error with clang 16 on Alpine) created by kenballus@…
Nginx's current default branch (revision hash …
14:26 Ticket #2533 (Variables does not work in error_log and ssl_certificate) created by EduardoRuizM@…
Variables does not work in directives. Sample: set $DOMAIN …

08/22/23:

10:29 Changeset in nginx-tests [1934:4d13c9e74d04] by Sergey Kandaurov <pluknet@…>
Tests: added ability to setup QUIC TLS named group.

08/21/23:

13:26 Changeset in nginx-tests [1933:9bafe7cddd3c] by Sergey Kandaurov <pluknet@…>
Tests: improved QUIC key update tests with old keys. On unsuccessful …
13:10 Changeset in nginx-tests [1932:b68471aee5ad] by Sergey Kandaurov <pluknet@…>
Tests: improved test for a stream initiating QUIC path migration. …
02:40 Ticket #2351 (Support reading file ETag from additional sources) updated by Seirdy
I'd also like to encourage this. The Caddy ticket tracker had a …

08/18/23:

21:43 Changeset in nginx_org [3002:48f245493600] by Yaroslav Zhuravlev <yar@…>
Slightly updated text in Preload Objects in njs.
18:57 Ticket #2528 (nginx reload with quic reuseport: quic packet rejected rc:-1) updated by murilo.b.andrade@…
I am still testing the patches that you mentioned. I tested with …
13:10 Changeset in nginx-tests [1931:afe4af958e53] by Sergey Kandaurov <pluknet@…>
Tests: cleanup.
13:03 Changeset in nginx-tests [1930:0e8b5b442b1d] by Sergey Kandaurov <pluknet@…>
Tests: basic QUIC key update tests.
11:41 Changeset in nginx_org [2995:89ab7fc9fea5] by Sergey Kandaurov <pluknet@…>
Development guide: updated style in code examples.
06:02 Ticket #2532 (Nginx close connection immeadiately when handle quic connection migration) updated by xhrlog@…
Description changed
05:58 Ticket #2532 (Nginx close connection immeadiately when handle quic connection migration) updated by xhrlog@…
Description changed
05:58 problem.jpg attached to Ticket #2532 by xhrlog@…
05:57 Ticket #2532 (Nginx close connection immeadiately when handle quic connection migration) created by xhrlog@…
Hi! After patch https://hg.nginx.org/nginx/rev/f3412ec3b6d1, I found …

08/17/23:

20:48 Ticket #2531 (You cannot use variables in error_log and ssl_certificate) closed by Maxim Dounin
invalid: Short answer: Variables are not macros, see …
16:31 Changeset in nginx_org [2994:537b98ec3c83] by Roman Arutyunyan <arut@…>
Development guide: fixed example code. The code produced compiler errors.
11:42 Changeset in nginx-tests [1929:3408c20d2f24] by Sergey Kandaurov <pluknet@…>
Tests: unbreak reading QUIC stream received not from the beginning. …
06:00 Ticket #2531 (You cannot use variables in error_log and ssl_certificate) updated by EduardoRuizM@…
Description changed
05:59 Ticket #2531 (You cannot use variables in error_log and ssl_certificate) created by EduardoRuizM@…
Variables defined by SET are not processed internally SAMPLE: set …

08/16/23:

12:36 Changeset in nginx-tests [1928:2df7d700518f] by Sergey Kandaurov <pluknet@…>
Tests: fixed parsing STREAM frames split on inner frame headers.
12:32 Changeset in nginx-tests [1927:55e0dee863e2] by Sergey Kandaurov <pluknet@…>
Tests: handled receiving QUIC STREAM FIN in a separate packet. Since …
11:12 Changeset in nginx_org [3007:3184864bbb3f] by Yaroslav Zhuravlev <yar@…>
Added SharedDict to njs Reference.
11:12 Changeset in nginx_org [3001:7c3182a95cd6] by Yaroslav Zhuravlev <yar@…>
Enhanced description of r.headersOut in njs Reference.
11:12 Changeset in nginx_org [3000:7eafa16bb07c] by Yaroslav Zhuravlev <yar@…>
Replaced "delete" to "del" in js_shared_dict_zone.
11:12 Changeset in nginx_org [2999:0e29ac906426] by Yaroslav Zhuravlev <yar@…>
Removed obsolete brackets in njs changes.
11:12 Changeset in nginx_org [2998:050d2e099e16] by Yaroslav Zhuravlev <yar@…>
Added example to r.subrequest in njs Reference.
11:12 Changeset in nginx_org [2997:adecad3d7039] by Yaroslav Zhuravlev <yar@…>
Added link to subrequest response object in njs Reference.
11:12 Changeset in nginx_org [2996:98bd95a5ac70] by Yaroslav Zhuravlev <yar@…>
Added link to Preload Objects from js_preload_object.

08/15/23:

17:57 Milestone nginx-1.25.2 completed
Status: released Trunk: mainline * QUIC and HTTP/3 bug fixes …
17:12 Changeset in nginx_org [2993:1ae01ea2eca8] by Maxim Dounin <mdounin@…>
nginx-1.25.2
17:03 Changeset in nginx [9150:44536076405c] by Maxim Dounin <mdounin@…>
release-1.25.2 tag
17:03 Changeset in nginx [9149:1d839f05409d]release-1.25.2 by Maxim Dounin <mdounin@…>
nginx-1.25.2-RELEASE
15:10 Changeset in nginx [9148:f101bccb38e1] by Maxim Dounin <mdounin@…>
Updated OpenSSL used for win32 builds.
11:36 Changeset in nginx_org [2992:6e094f915896] by Yaroslav Zhuravlev <yar@…>
Updated docs for the upcoming NGINX Plus release.
08:02 Ticket #2350 (Option to have set_real_ip_from use the proxied client ip when using ...) updated by driskell@…
I came here from #2524. It would be extremely useful to be able to use …

08/14/23:

13:10 Changeset in nginx-tests [1926:0fb9ca9046bf] by Sergey Kandaurov <pluknet@…>
Tests: fixed variable-length encoding of QUIC Stream ID.
12:41 Changeset in nginx-tests [1925:a4f1cbd87f0d] by Sergey Kandaurov <pluknet@…>
Tests: fixed decoding QUIC packet numbers with PNL bits set.
12:13 Changeset in nginx-tests [1924:0e4ff5f83653] by Sergey Kandaurov <pluknet@…>
Tests: saved input buffer after processing QUIC long packets. …
09:44 Ticket #2530 (ACK of packet containing PATH_RESPONSE frame can't update rtt state) updated by Sergey Kandaurov
Status changed
06:28 Ticket #2530 (ACK of packet containing PATH_RESPONSE frame can't update rtt state) created by pl080516@…
The packet sent by calling ngx_quic_frame_sendto will not be insert …
05:21 Changeset in nginx [9147:58afcd72446f] by Roman Arutyunyan <arut@…>
QUIC: path MTU discovery. MTU selection starts by doubling the …

08/10/23:

12:33 Ticket #2529 (Can pto timeout check removed from ngx_quic_pto_handler?) updated by wojxhr@…
Replying to Roman Arutyunyan: > This is indeed true for …
09:50 Ticket #2529 (Can pto timeout check removed from ngx_quic_pto_handler?) updated by Roman Arutyunyan
This is indeed true for one level. But we may have packets on …
09:38 Ticket #2529 (Can pto timeout check removed from ngx_quic_pto_handler?) created by wojxhr@…
I'm wonder that if the code in ngx_quic_pto_handler can be …
06:18 Ticket #2528 (nginx reload with quic reuseport: quic packet rejected rc:-1) updated by Roman Arutyunyan
Currently QUIC does not handle reloads well. Existing connections may …
03:08 Ticket #2528 (nginx reload with quic reuseport: quic packet rejected rc:-1) updated by murilo.b.andrade@…
This is my nginx.conf […] [=#point1 (This is the http3 client that …
03:01 debug_error.log.zip attached to Ticket #2528 by murilo.b.andrade@…
debug_error.log
03:00 Ticket #2528 (nginx reload with quic reuseport: quic packet rejected rc:-1) created by murilo.b.andrade@…
I observed some client timeout issue in http3 requests when nginx is …

08/09/23:

06:38 Ticket #2500 (After update to nginx 1.25 and configure vhost to enable http/3 quic ...) closed by Roman Arutyunyan
fixed

08/08/23:

19:04 Ticket #2526 (wrong gpg key for nginx-stable repo) updated by thresh
nginx -V changed
Hello! Can you please elaborate on what is different between stable …
16:15 Ticket #2449 (Allow using OpenSSL 3.0 "provider" API instead of deprecated "engine" API) updated by Maxim Dounin
For the record, the above commit makes it possible to provide …
15:54 Ticket #2404 (openssl config is loaded from the build location by default) closed by Maxim Dounin
fixed: Fix committed, thanks for prodding this.
06:43 Changeset in nginx [9146:f3412ec3b6d1] by Roman Arutyunyan <arut@…>
QUIC: allowed ngx_quic_frame_sendto() to return NGX_AGAIN. …

08/07/23:

17:19 Ticket #2527 (Nginx unable to install from default Ubuntu Repository if IPv6 is ...) closed by thresh
invalid: Hi! We don't support Ubuntu's own nginx packages and we have no …
12:57 Ticket #2527 (Nginx unable to install from default Ubuntu Repository if IPv6 is ...) created by randa.dan@…
I am running Ubuntu 22.04 Server on an x86_64 machine. In my […] …
10:54 Ticket #2404 (openssl config is loaded from the build location by default) updated by Maxim Dounin <mdounin@…>
In [changeset:"0ba26c99b3a17218bc22d90a719e50a7e13c26d8/nginx"
10:54 Ticket #2449 (Allow using OpenSSL 3.0 "provider" API instead of deprecated "engine" API) updated by Maxim Dounin <mdounin@…>
In [changeset:"85abf534cead276d677d5452600c04d0b5d0995f/nginx"

08/04/23:

21:08 Ticket #2525 (bug when try to return 496 error) updated by Maxim Dounin
If the goal is to trigger the same behaviour as on ssl_client_verify
11:19 Ticket #2525 (bug when try to return 496 error) updated by theundefined@…
Hm. But in "my" case - i would restrict to need of certificate only …

08/03/23:

16:38 Ticket #1152 (Custom error_page doesn't work for HTTP error 413) updated by Maxim Dounin
Just for the record, from my internal notes to ensure it's not …
16:13 Ticket #2408 (413 error_page directive in server or location context returns default ...) closed by Maxim Dounin
duplicate: See #1152, which turns out to be the same issue.
16:13 Ticket #1152 (Custom error_page doesn't work for HTTP error 413) updated by Maxim Dounin
See also #2408.
15:54 Ticket #2513 (nginx resolver issue) closed by Maxim Dounin
worksforme: Feedback timeout.
15:45 BadContent edited by Maxim Dounin
(diff)
11:45 Ticket #2526 (wrong gpg key for nginx-stable repo) created by nadkamo@…
Hi gpg key is invalid for nginx stable repo. It works only for …
Note: See TracTimeline for information about the timeline view.