Timeline



09/15/23:

14:59 Ticket #2542 (ssl_ecdh_curve is sometimes ignored in server blocks) updated by Maxim Dounin
Note that nginx makes no real distinction between name-based virtual …

09/14/23:

20:20 Changeset in nginx_org [3012:ac4191d05fdf] by Yaroslav Zhuravlev <yar@…>
Fixed link to the server directive in ssl_protocols.
15:38 Changeset in nginx_org [3011:55d49eb065ac] by Yaroslav Zhuravlev <yar@…>
Fixed example in the js_periodic directive.
10:15 Changeset in nginx [9162:f9845e4b5c14] by Roman Arutyunyan <arut@…>
QUIC: simplified setting close timer when closing connection. …
10:13 Changeset in nginx [9161:4939fd04737f] by Roman Arutyunyan <arut@…>
HTTP/3: postponed session creation to init() callback. Now the …

09/13/23:

13:59 Changeset in nginx [9158:ad3d34ddfdcc] by Roman Arutyunyan <arut@…>
QUIC: "handshake_timeout" configuration parameter. Previously QUIC …
13:57 Changeset in nginx [9159:6d3ca6f8db35] by Roman Arutyunyan <arut@…>
HTTP/3: moved variable initialization.
13:48 Changeset in nginx [9163:32b5aaebcca5] by Roman Arutyunyan <arut@…>
Modules compatibility: added QUIC to signature (ticket #2539). …

09/12/23:

22:59 Ticket #2542 (ssl_ecdh_curve is sometimes ignored in server blocks) updated by Avamander
I guess the default auto is totally fine in most cases, though when …
20:32 Changeset in nginx_org [3010:758e2e1dfd22] by Yaroslav Zhuravlev <yar@…>
njs-0.8.1.
20:32 Changeset in nginx_org [3009:2e8c1384d211] by Yaroslav Zhuravlev <yar@…>
Documented ngx.shared.SharedDict.items in njs Reference.
20:32 Changeset in nginx_org [3008:4470b2bff7b7] by Yaroslav Zhuravlev <yar@…>
Documented the js_periodic directive.
16:42 Milestone njs-0.8.1 completed
* introduced js_periodic directive. * fixed size() and keys() methods …
15:38 Ticket #2546 (Support RFC 8879: certificate compression) updated by Maxim Dounin
For the record, certificate compression was previously discussed in …
15:28 Ticket #2542 (ssl_ecdh_curve is sometimes ignored in server blocks) updated by Maxim Dounin
Aspects of how settings are applied to name-based virtual servers are …
01:59 Ticket #2546 (Support RFC 8879: certificate compression) created by Seirdy
[https://www.rfc-editor.org/rfc/rfc8879 RFC 8879 TLS Certificate …

09/10/23:

18:34 Ticket #2545 (TLS "Close Notify" warning) updated by Maxim Dounin
The "close notify" alert is a part of TLS protocol, and means that the …
15:41 Ticket #2449 (Allow using OpenSSL 3.0 "provider" API instead of deprecated "engine" API) updated by omayevskiy@…
It is possible to load providers via openssl.cnf For example […] …
00:35 Ticket #2545 (TLS "Close Notify" warning) created by Hay1tsme@…
I have an old application that uses TLS 1.0 that I was attempting to …

09/09/23:

15:21 Ticket #2544 (Cores on nginx-quiche while running curl command) updated by Karthikdasari0423@…
okay,got it i already built nginx with 1.25.2 version and i should …
12:25 Ticket #2544 (Cores on nginx-quiche while running curl command) closed by Maxim Dounin
invalid: The "steps to build" you've referenced contain a 140 KB patch file …
07:48 Ticket #2544 (Cores on nginx-quiche while running curl command) reopened by Karthikdasari0423@…
Just FYI,i am not using any modified nginx.nginx i am using is …

09/08/23:

19:26 Ticket #2544 (Cores on nginx-quiche while running curl command) closed by Maxim Dounin
invalid: It looks like you are having issues nginx with 3rd party …
06:53 Ticket #2544 (Cores on nginx-quiche while running curl command) updated by Karthikdasari0423@…
Bt for all cores are same ` (gdb) core-file core.nginx.240250 …
06:47 Ticket #2544 (Cores on nginx-quiche while running curl command) created by Karthikdasari0423@…
Hi , I tried to build nginx with quiche as explained below and tried …

09/07/23:

17:12 Ticket #2543 (wrong "host" header when using upstreams) closed by Sergey Kandaurov
invalid: This is the default behaviour of the proxy_set_header directive. See …
14:38 Ticket #2543 (wrong "host" header when using upstreams) updated by girsch.ventx.de@…
Description changed
14:34 Ticket #2543 (wrong "host" header when using upstreams) created by girsch.ventx.de@…
Hi, we have a reverse proxy setup with 2 upstreams, the decision to …

09/06/23:

17:55 Ticket #2542 (ssl_ecdh_curve is sometimes ignored in server blocks) updated by Avamander
Description changed
17:52 Ticket #2542 (ssl_ecdh_curve is sometimes ignored in server blocks) created by Avamander
Consider a scenario when a single IP x.y.z.q has two server blocks. …
10:56 Ticket #2526 (wrong gpg key for nginx-stable repo) updated by nadkamo@…
anyway thanks for help, i thought this was root cause of my issue, i …
08:17 Ticket #2526 (wrong gpg key for nginx-stable repo) updated by nadkamo@…
Hi, I am following ur docu: http://nginx.org/en/linux_packages.html

09/01/23:

17:34 Ticket #2541 (TLS 1.2 connection on TLS 1.3 only site) closed by Maxim Dounin
invalid: Thanks for the feedback, closing this.
16:31 Changeset in nginx [9157:daf8f5ba23d8] by Sergey Kandaurov <pluknet@…>
QUIC: removed use of SSL_quic_read_level and SSL_quic_write_level. As …
16:31 Changeset in nginx [9156:36b59521a41c] by Sergey Kandaurov <pluknet@…>
QUIC: refined sending CONNECTION_CLOSE in various packet types. As …
04:01 Ticket #2541 (TLS 1.2 connection on TLS 1.3 only site) updated by vp1981@…
Thanks for the explanations and suggestions! I implemented your idea …

08/31/23:

19:59 Changeset in nginx [9155:35bb47f65cab] by Maxim Dounin <mdounin@…>
Upstream: fixed handling of Status headers without reason-phrase. …
15:54 Changeset in nginx [9168:ff98ae7d261e] by Sergey Kandaurov <pluknet@…>
QUIC: split keys availability checks to read and write sides. Keys …
10:29 Ticket #2540 (nginx stable 1.24 issues with cache file deletion under heavy load) closed by Maxim Dounin
invalid: Thanks for confirming, closing this.
10:28 Ticket #2532 (Nginx close connection immeadiately when handle quic connection migration) closed by Roman Arutyunyan
fixed
10:28 Ticket #2532 (Nginx close connection immeadiately when handle quic connection migration) updated by Roman Arutyunyan <arut@…>
In [changeset:"f6b6f3dd7ca0653fc5ffe4f32dc806460eb6c64e/nginx"
09:10 Ticket #2540 (nginx stable 1.24 issues with cache file deletion under heavy load) updated by p4rancesc0@…
Hi, by removing those two directives: […] out problems is …
08:43 Ticket #2541 (TLS 1.2 connection on TLS 1.3 only site) updated by Maxim Dounin
By default, nginx 1.25.2 accepts connections with …
08:14 Ticket #2540 (nginx stable 1.24 issues with cache file deletion under heavy load) updated by p4rancesc0@…
Hi, thanks for the reply. I can confirm that there is no traffic on …
08:01 Ticket #2541 (TLS 1.2 connection on TLS 1.3 only site) updated by Maxim Dounin
See also #2538.
08:01 Ticket #2538 (Site has TLS 1.2 connection despite being configured with TLS 1.3 only) closed by Maxim Dounin
duplicate: Duplicate of #2541.
07:46 Ticket #2540 (nginx stable 1.24 issues with cache file deletion under heavy load) updated by Maxim Dounin
There is no any traffic on nginx after the test stopped, correct? …
06:54 Changeset in nginx [9154:f6b6f3dd7ca0] by Roman Arutyunyan <arut@…>
QUIC: ignore path validation socket error (ticket #2532). Previously, …
05:39 Ticket #2541 (TLS 1.2 connection on TLS 1.3 only site) updated by vp1981@…
It looks like there was a problem with the nginx configuration. …
00:13 Ticket #2541 (TLS 1.2 connection on TLS 1.3 only site) created by vp1981@…
I configured nginx to accept only TLS 1.3 connections and up to …

08/30/23:

20:16 Ticket #1665 (Minimum zone size for limit_req strangely high) updated by joshua.mccullough.teslagovernment.com@…
The above comment was my mistake, I did not include the unit in the …
20:13 Ticket #1665 (Minimum zone size for limit_req strangely high) updated by joshua.mccullough.teslagovernment.com@…
Could the docs be updated regarding this? It's very confusing. In my …
13:03 Ticket #2540 (nginx stable 1.24 issues with cache file deletion under heavy load) updated by p4rancesc0@…
Description changed
13:02 Ticket #2540 (nginx stable 1.24 issues with cache file deletion under heavy load) updated by p4rancesc0@…
Description changed
13:00 Ticket #2540 (nginx stable 1.24 issues with cache file deletion under heavy load) updated by p4rancesc0@…
Description changed
12:57 Ticket #2540 (nginx stable 1.24 issues with cache file deletion under heavy load) created by p4rancesc0@…
Hi, during some synthetic benchmarks on our nginx we faced a strange …
12:47 Changeset in nginx-tests [1939:24482e311749] by Sergey Kandaurov <pluknet@…>
Tests: added QUIC test with resending Initial packets on Retry.
11:36 Ticket #2539 (--with-http_v3_module changes the layout of the ngx_connection_s ...) updated by Roman Arutyunyan
Thanks for reporting this. QUIC indeed should be included in signature.
09:59 Ticket #2539 (--with-http_v3_module changes the layout of the ngx_connection_s ...) created by dmikhin@…
Nginx compiled with v3 support has following signature: […] Nginx …
07:09 Changeset in nginx [9153:8f7e6d8c061e] by Roman Arutyunyan <arut@…>
QUIC: use last client dcid to receive initial packets. Previously, …
04:11 Ticket #2538 (Site has TLS 1.2 connection despite being configured with TLS 1.3 only) updated by vp1981@…
(Continue 3) This is how I tested with curl: (see attachment).
04:10 Ticket #2538 (Site has TLS 1.2 connection despite being configured with TLS 1.3 only) updated by vp1981@…
(Continue) I configured nginx to establish only TLS 1.3 connections …
04:09 Ticket #2538 (Site has TLS 1.2 connection despite being configured with TLS 1.3 only) created by vp1981@…
Hello, I'm running nginx on Archlinux.

08/29/23:

22:22 Changeset in nginx-tests [1938:e1059682aeef] by Sergey Kandaurov <pluknet@…>
Tests: fixed ClientHello with resending Initial QUIC packets. …
17:25 Ticket #2537 (Host not found in resolver "kube-dns.kube-system.svc.cluster.local". ...) updated by Maxim Dounin
There are no restrictions on DNS server name length in resolver. In …
07:36 Ticket #2532 (Nginx close connection immeadiately when handle quic connection migration) updated by Roman Arutyunyan
Please try the attached patch.
07:35 quic-old-path-validation attached to Ticket #2532 by Roman Arutyunyan
07:22 Ticket #2532 (Nginx close connection immeadiately when handle quic connection migration) updated by Roman Arutyunyan
Normally ICMP takes some time to arrive and error is not returned by …
07:06 Ticket #2536 (should we discard initial packet with zero-length odcid?) closed by Roman Arutyunyan
invalid: I looked deeper into this and I don't see how odcid can be empty. An …

08/27/23:

02:47 Ticket #2536 (should we discard initial packet with zero-length odcid?) updated by Roman Arutyunyan
Thanks for reporting this. We need to rely on client ip/port in this case.

08/26/23:

11:23 Ticket #2537 (Host not found in resolver "kube-dns.kube-system.svc.cluster.local". ...) created by yersan@…
Hi, I have the following simple configuration: […] Which gives …

08/25/23:

16:06 Ticket #2536 (should we discard initial packet with zero-length odcid?) created by pl080516@…
If a initial packet with zero-length odcid is accpeted, nginx will …
16:02 BadContent edited by Maxim Dounin
(diff)
14:12 Changeset in nginx-tests [1937:2a0a6035a1af] by Sergey Kandaurov <pluknet@…>
Tests: removed TODO and try_run() checks for legacy versions.
14:12 Changeset in nginx-tests [1936:716d7500317d] by Sergey Kandaurov <pluknet@…>
Tests: keep HTTP/2 test for "return 444" in error_page as TODO.
12:39 Changeset in nginx [9151:933f37273282] by Sergey Kandaurov <pluknet@…>
Version bump.
09:51 Changeset in nginx [9152:2880f60a80c3] by Sergey Kandaurov <pluknet@…>
QUIC: posted generating TLS Key Update next keys. Since at least …

08/24/23:

10:59 Changeset in nginx-tests [1935:6bafe9419126] by Sergey Kandaurov <pluknet@…>
Tests: allowed ssl_curve.t to run on BoringSSL. Recently BoringSSL …

08/23/23:

18:32 Ticket #2534 (Build error with clang 16 on Alpine) closed by Maxim Dounin
wontfix: That's a known issue with clang and musl, see here: …
16:48 Ticket #2533 (Variables does not work in error_log and ssl_certificate) closed by Maxim Dounin
duplicate: Duplicate of #2531.
16:48 Ticket #2531 (You cannot use variables in error_log and ssl_certificate) updated by Maxim Dounin
See also #2533.
15:54 Ticket #2534 (Build error with clang 16 on Alpine) updated by kenballus@…
Description changed
15:53 Ticket #2534 (Build error with clang 16 on Alpine) created by kenballus@…
Nginx's current default branch (revision hash …
14:26 Ticket #2533 (Variables does not work in error_log and ssl_certificate) created by EduardoRuizM@…
Variables does not work in directives. Sample: set $DOMAIN …

08/22/23:

10:29 Changeset in nginx-tests [1934:4d13c9e74d04] by Sergey Kandaurov <pluknet@…>
Tests: added ability to setup QUIC TLS named group.

08/21/23:

13:26 Changeset in nginx-tests [1933:9bafe7cddd3c] by Sergey Kandaurov <pluknet@…>
Tests: improved QUIC key update tests with old keys. On unsuccessful …
13:10 Changeset in nginx-tests [1932:b68471aee5ad] by Sergey Kandaurov <pluknet@…>
Tests: improved test for a stream initiating QUIC path migration. …
02:40 Ticket #2351 (Support reading file ETag from additional sources) updated by Seirdy
I'd also like to encourage this. The Caddy ticket tracker had a …

08/18/23:

18:57 Ticket #2528 (nginx reload with quic reuseport: quic packet rejected rc:-1) updated by murilo.b.andrade@…
I am still testing the patches that you mentioned. I tested with …
13:10 Changeset in nginx-tests [1931:afe4af958e53] by Sergey Kandaurov <pluknet@…>
Tests: cleanup.
13:03 Changeset in nginx-tests [1930:0e8b5b442b1d] by Sergey Kandaurov <pluknet@…>
Tests: basic QUIC key update tests.
06:02 Ticket #2532 (Nginx close connection immeadiately when handle quic connection migration) updated by xhrlog@…
Description changed
05:58 Ticket #2532 (Nginx close connection immeadiately when handle quic connection migration) updated by xhrlog@…
Description changed
05:58 problem.jpg attached to Ticket #2532 by xhrlog@…
05:57 Ticket #2532 (Nginx close connection immeadiately when handle quic connection migration) created by xhrlog@…
Hi! After patch https://hg.nginx.org/nginx/rev/f3412ec3b6d1, I found …

08/17/23:

20:48 Ticket #2531 (You cannot use variables in error_log and ssl_certificate) closed by Maxim Dounin
invalid: Short answer: Variables are not macros, see …
11:42 Changeset in nginx-tests [1929:3408c20d2f24] by Sergey Kandaurov <pluknet@…>
Tests: unbreak reading QUIC stream received not from the beginning. …
06:00 Ticket #2531 (You cannot use variables in error_log and ssl_certificate) updated by EduardoRuizM@…
Description changed
05:59 Ticket #2531 (You cannot use variables in error_log and ssl_certificate) created by EduardoRuizM@…
Variables defined by SET are not processed internally SAMPLE: set …
Note: See TracTimeline for information about the timeline view.