Timeline



12/08/13:

22:02 Ticket #466 (Sample nginx.con includes SSLv2, lacks TLSv1.1 and TLSv1.2 protocols) created by Jeffrey Walton
I think there's an opportunity for improvement in the nginx sample …
18:57 sub.class1.server.ca.pem attached to Ticket #465 by David Huang
Issuer Certificate
18:57 ssl.crt attached to Ticket #465 by David Huang
Server certificate
18:56 Ticket #465 (OCSP stapling fails to query StartCom's OCSP responder in HTTP 1.1) created by David Huang
Currently, Nginx's OCSP stapling doesn't work with StartCom's OCSP …
14:55 Ticket #464 (ngx_http_ssl_module and ssl_ciphers (use of RC4)) created by Jeffrey Walton
From http://nginx.org/en/docs/http/ngx_http_ssl_module.html: […] …
13:54 Ticket #459 (HTTP 304 NOT MODIFIED should not set Content-Length) reopened by robin.smidsrod.no
Reopened to clarify behavior on FastCGI proxying.
12:34 Ticket #463 (Server: OpenSSL options for modern OpenSSL) updated by Jeffrey Walton
> It tries to protect under version checks what don't need to be …
12:23 Ticket #462 (Server: OpenSSL Safari Workaround (SSL_OP_SAFARI_ECDHE_ECDSA_BUG)) updated by Jeffrey Walton
> Given the above, setting the option will likely cause more harm than …
12:15 Ticket #462 (Server: OpenSSL Safari Workaround (SSL_OP_SAFARI_ECDHE_ECDSA_BUG)) closed by Maxim Dounin
wontfix: It's not yet available in any released version of the OpenSSL, and …
11:55 Ticket #461 (Client: OpenSSL SSLv2 options set even with SSL_OP_NO_SSLv2) closed by Maxim Dounin
worksforme: It doesn't make sense. The SSL_OP_MICROSOFT_SESS_ID_BUG and …
11:39 Ticket #463 (Server: OpenSSL options for modern OpenSSL) closed by Maxim Dounin
worksforme: The patch is wrong. It tries to protect under version checks what …
11:12 Ticket #463 (Server: OpenSSL options for modern OpenSSL) created by Jeffrey Walton
A number of the bug workarounds applied to the server can be forgone …
06:41 Ticket #462 (Server: OpenSSL Safari Workaround (SSL_OP_SAFARI_ECDHE_ECDSA_BUG)) created by Jeffrey Walton
It appears there is an opportunity for improvement in the server for …
06:19 Ticket #461 (Client: OpenSSL SSLv2 options set even with SSL_OP_NO_SSLv2) created by Jeffrey Walton
SSL_OP_NO_SSLv2 precludes SSL_OP_MICROSOFT_SESS_ID_BUG and …

12/07/13:

21:07 scan-build.tar.gz attached to Ticket #460 by Jeffrey Walton
Clang 3.3 scan-build results
21:06 Ticket #460 (Clang reports use-after-free in core/ngx_resolver.c) created by Jeffrey Walton
Clang 3.3 flagged two use-after-free's in core/ngx_resolver.c. I'm …
18:35 Ticket #459 (HTTP 304 NOT MODIFIED should not set Content-Length) updated by robin.smidsrod.no
Okay. Thanks for clarifying. I guess I need to complain to the browser …
00:00 Changeset in nginx [5462:58716fd3bd2d] by Piotr Sikora <piotr@…>
Fixed incorrect ngx_str_set() usage, broken in c82b2e020b9f. Found by …

12/06/13:

21:31 Ticket #458 (Win32: autoindex module doesn't support Unicode names) updated by Kroward 1
I forgot to mention than behavior of autoindex module depends on …
19:38 Ticket #458 (Win32: autoindex module doesn't support Unicode names) updated by Maxim Dounin
Status changed
Ack, it needs to be fixed. The patch in question needs more work. (And …
19:33 Ticket #457 (Win32: ngx_utf8_to_utf16 doesn't allow file names outside U+FFFF) updated by Maxim Dounin
Keywords, Status changed
Correct, Windows 2000 and newer supports UTF-16, not just UCS-2. This …
15:58 Changeset in nginx [5461:1bdf906bba99] by Maxim Dounin <mdounin@…>
Contrib: added vim to README.
15:40 Ticket #459 (HTTP 304 NOT MODIFIED should not set Content-Length) closed by Maxim Dounin
invalid: The Content-Length header is not returned for 304 responses, it's …
15:12 Ticket #459 (HTTP 304 NOT MODIFIED should not set Content-Length) created by robin.smidsrod.no
Using nginx from the stable Ubuntu PPA. Had a long conversation with …
13:43 win32_read_dir.patch attached to Ticket #458 by Kroward 1
Win32: WCHAR support it ngx_read_dir() to enable Unicode in autoindex
13:43 Ticket #458 (Win32: autoindex module doesn't support Unicode names) created by Kroward 1
Functions for traversing directories use ANSI versions of …
10:30 Changeset in nginx [5476:950c9ed3e66f] by Ruslan Ermilov <ru@…>
Resolver: implemented IPv6 address to name resolving.
10:30 Changeset in nginx [5475:07dd5bd222ac] by Ruslan Ermilov <ru@…>
Changed resolver API to use ngx_addr_t.
10:30 Changeset in nginx [5473:d39ef821d03e] by Ruslan Ermilov <ru@…>
Core: externalized ngx_cmp_sockaddr(). It's also extended with the …
10:30 Changeset in nginx [5472:ab493c60d9ff] by Ruslan Ermilov <ru@…>
Resolver: fixes in PTR processing. Verify that class of RR is "IN". …
10:30 Changeset in nginx [5471:9c96782d9d05] by Ruslan Ermilov <ru@…>
Resolver: fixes in A processing. Verify that class of RR is "IN". …
10:30 Changeset in nginx [5470:aebdca7e8f8f] by Ruslan Ermilov <ru@…>
Resolver: fixed response processing. Stricten response header checks: …
10:30 Changeset in nginx [5469:b2fc466a11a7] by Ruslan Ermilov <ru@…>
Resolver: removed unnecessary casts.
10:30 Changeset in nginx [5468:5c410d6ca7dd] by Ruslan Ermilov <ru@…>
Resolver: improved code readability. Renamed ngx_resolver_query_t to …
09:16 Changeset in nginx [5459:fedf777c6b24] by Ruslan Ermilov <ru@…>
Configure: enable -Wconditional-uninitialized with clang.

12/05/13:

11:21 U29E8A.7z attached to Ticket #457 by Kroward 1
Example of a file with problematic unicode name (should be extracted …
11:20 Ticket #457 (Win32: ngx_utf8_to_utf16 doesn't allow file names outside U+FFFF) created by Kroward 1
Function ngx_utf8_to_utf16() in 'win32\ngx_files.c' return error on …

12/04/13:

22:45 Changeset in nginx [5460:f38043bd15f5] by Evan Miller <emmiller@…>
Contrib: add vim scripts to contrib/ directory. I've been maintaining …
20:16 Ticket #456 (ngx_random: random number generator initialized (srandom) to same ...) updated by Thomas Lochmatter
Great - thank you very much for the quick help.
19:13 Changeset in nginx [5458:4a71ef1aa36d] by Maxim Dounin <mdounin@…>
Fixed build without SSL, broken by c82b2e020b9f.
19:01 Changeset in nginx [5457:c82b2e020b9f] by Maxim Dounin <mdounin@…>
SSL support in the uwsgi module. Based on patch by Roberto De Ioris.
18:55 Ticket #456 (ngx_random: random number generator initialized (srandom) to same ...) updated by Maxim Dounin
Status changed
Initialization in question is done in a master process, and changing …
16:05 Ticket #456 (ngx_random: random number generator initialized (srandom) to same ...) created by Thomas Lochmatter
In src/os/unix/ngx_posix_init.c, the line srandom(ngx_time()); is …

12/03/13:

18:07 Changeset in nginx [5456:692afcea9d0d] by Mathew Rodley <mathew@…>
Added support for TCP_FASTOPEN supported in Linux >= 3.7.1. --- …
17:44 Changeset in nginx [5455:8f2c69418045] by Maxim Dounin <mdounin@…>
Fixed "setfib=" on non-first listening socket.
13:12 Changeset in nginx [5454:359f49a84f87] by Vladimir Homutov <vl@…>
Improved code readablity in ngx_http_upstream_init_round_robin(). …
11:11 Changeset in nginx [5453:b7b8e2fa7ebd] by Ruslan Ermilov <ru@…>
Fixed null pointer dereference with $upstream_cache_last_modified.

12/02/13:

14:56 Ticket #455 (nginx makes it hard to configure ipv4/6 default cases in listen statement) closed by Maxim Dounin
worksforme: As of nginx 1.3.4+, the ipv6only is on by default, and the following …
12:42 Ticket #455 (nginx makes it hard to configure ipv4/6 default cases in listen statement) created by Robert Buchholz
In a usual setup, where a web server is serving the public internet, …
11:24 Changeset in nginx_org [1028:e582a10b1917] by Vladimir Homutov <vl@…>
Documented the "proxy_cache_purge" and "fastcgi_cache_purge" directives.

11/29/13:

22:39 Ticket #454 (disable ngx_http_upstream_store for HEAD requests) closed by Maxim Dounin
wontfix: The method can be redefined using proxy_method directive in case of …
20:15 Ticket #454 (disable ngx_http_upstream_store for HEAD requests) created by Proforg M
it looks like you missed check for […] in […] so, if …
15:07 Ticket #353 (nginx 1.4.[0|1] empty reply from server) updated by Maxim Dounin
Backlog size doesn't really matters, the actual problem is how kernel …
14:23 Ticket #453 (Modules are initialized twice in single-process mode for Win32) closed by Maxim Dounin
fixed: Fix committed, thank you for report.
13:30 Ticket #453 (Modules are initialized twice in single-process mode for Win32) updated by Maxim Dounin <mdounin@…>
In b7bf4671bb7b8c455cf54fd39c0f87b7e4fbc312/nginx: […]
13:23 Changeset in nginx [5452:b7bf4671bb7b] by Maxim Dounin <mdounin@…>
Win32: fixed init_process without master process (ticket #453). Init …
13:23 Changeset in nginx [5451:e68af4e3396f] by Maxim Dounin <mdounin@…>
Upstream: skip empty cache headers. Notably this fixes …
13:16 Changeset in nginx [5450:9868c72f6f43] by Maxim Dounin <mdounin@…>
SSL: fixed c->read->ready handling in ngx_ssl_recv(). If …
13:11 Changeset in nginx [5449:8f3cf6776648] by Maxim Dounin <mdounin@…>
Version bump.

11/28/13:

23:29 Ticket #353 (nginx 1.4.[0|1] empty reply from server) updated by Alex Vorona
Hello, Now I can trigger the problem for some time by lowering listen …
11:52 Ticket #448 (merge_slashes off doesn't work inside server context) closed by Maxim Dounin
fixed: Documentation fix committed, thanks.
11:50 Ticket #448 (merge_slashes off doesn't work inside server context) updated by Maxim Dounin <mdounin@…>
In 375055da60fae22c8dfa6b385e1f72739fa0b9b6/nginx_org: […]

11/27/13:

14:56 Ticket #353 (nginx 1.4.[0|1] empty reply from server) updated by Maxim Dounin
I don't think that this is related to original issue reported, but …
10:59 Ticket #353 (nginx 1.4.[0|1] empty reply from server) updated by Alex Vorona
I got similar problem, not related to online upgrades. Cut from …

11/26/13:

14:10 Changeset in nginx-tests [358:ec9f4f2e67e8] by Sergey Kandaurov <pluknet@…>
Tests: check if fastcgi body is cached.
09:06 Ticket #453 (Modules are initialized twice in single-process mode for Win32) created by Kroward 1
There is feature of nginx to run Nginx as single process with …

11/25/13:

22:07 Ticket #452 (Custom ETag is not honoured by not_modified_filter module) closed by Maxim Dounin
wontfix: The behaviour is expected. Moving headers filter to an earlier point …
15:46 Ticket #452 (Custom ETag is not honoured by not_modified_filter module) created by Gernot Vormayr
This is caused by the header processing order (not_modified_filter is …
15:23 Ticket #448 (merge_slashes off doesn't work inside server context) updated by Maxim Dounin
Status changed
When specified at server{} level, it only works if a server is a …
14:34 Ticket #451 (Turn NGX_SSL_BUFSIZE into a configuration directive) created by Steffen Weber
Nginx uses a hard-coded SSL buffer size of 16 KB (see NGX_SSL_BUFSIZE …
11:15 Ticket #450 (memory leak in src/os/win32/ngx_files.c.) closed by Maxim Dounin
invalid: This problem is already fixed by dea321e5c021 changeset.
10:28 Ticket #450 (memory leak in src/os/win32/ngx_files.c.) created by lichiyang
There is a memory leak in src/os/win32/ngx_files.c. The function …

11/23/13:

21:21 Ticket #449 (New variable for SubjectAltName in the client SSL certificate) created by openid.bcgl.fr/benjamin
Some new authentification systems like WebID-TLS [1] require to access …

11/22/13:

17:31 Ticket #448 (merge_slashes off doesn't work inside server context) created by Jason Barnabe
When I put merge_slashes off in the http context, it works. When I put …
11:20 Changeset in nginx-tests [357:e0c00e695cb5] by Sergey Kandaurov <pluknet@…>
Tests: removed Net::DNS dependency.

11/21/13:

16:33 Ticket #447 (X-Forwarded-For header incorrect sometimes when using nginx as proxy) updated by Jiri Horky
Just figured it out myself :-( Sorry for the noise.
16:30 Ticket #447 (X-Forwarded-For header incorrect sometimes when using nginx as proxy) closed by Maxim Dounin
invalid: Multiple IP addresses in X-Forwarded-For is normal, see …
16:24 Ticket #447 (X-Forwarded-For header incorrect sometimes when using nginx as proxy) updated by Jiri Horky
Forgot to mention - the request rate is about 4000 connections per …
16:22 nginx.conf attached to Ticket #447 by Jiri Horky
nginx configuration file
16:21 Ticket #447 (X-Forwarded-For header incorrect sometimes when using nginx as proxy) created by Jiri Horky
Hi, we found out that the nginx sometimes sets wrong IP addresses in …
13:56 Ticket #446 (Can't register on Nginx forum or mailing list!) closed by Sergey Budnevitch
invalid
12:30 Ticket #446 (Can't register on Nginx forum or mailing list!) created by maxmilhas.openid.org.cn
I have tried to register in Nginx forum, but I didn't receive the …
11:20 Changeset in nginx-tests [356:7a472e46772c] by Sergey Kandaurov <pluknet@…>
Tests: added http resolver test for CNAME + A combined answer.
11:07 Changeset in nginx-tests [355:14eba1ad0880] by Sergey Kandaurov <pluknet@…>
Tests: reduce race in mail resolver test.
09:47 Ticket #445 (RPM minor upgrade should not replace nginx.conf with default) closed by Sergey Budnevitch
invalid: All config files in nginx.spec are already marked as …
08:47 Ticket #444 (SSL error with Internet explorer clients) closed by Maxim Dounin
duplicate: Yes, this seems to be the same problem as in ticket #235. Closing this …
08:43 Ticket #443 (Checking for PCRE JIT support always successful) closed by Maxim Dounin
invalid: Ok, closing this as there is no problem.
08:30 Ticket #445 (RPM minor upgrade should not replace nginx.conf with default) created by Arne Kepp
Hi, I am using the prebuilt RPMs from …
01:22 Ticket #443 (Checking for PCRE JIT support always successful) updated by Den Ivanov
Хорошо, значит это просто косметическая проблема. Я скомпилировал PCRE …
00:27 Ticket #444 (SSL error with Internet explorer clients) updated by Nevins Bartolomeo
This seems to be related to http://trac.nginx.org/nginx/ticket/235
00:06 Ticket #355 (Proxy protocol support) updated by James Lin
+1 for this feature, pretty please, ASAP please.

11/20/13:

23:12 Ticket #444 (SSL error with Internet explorer clients) updated by Nevins Bartolomeo
core dump is larger than allowed, output: #0 0x00000000004265be in …
23:10 Ticket #444 (SSL error with Internet explorer clients) created by Nevins Bartolomeo
This bug is probably an issue with openssl but wanted verification. …
11:53 Ticket #443 (Checking for PCRE JIT support always successful) updated by Maxim Dounin
And what's the problem? This check is expected to fail if PCRE JIT …
07:40 Ticket #443 (Checking for PCRE JIT support always successful) created by Den Ivanov
Checking for PCRE JIT support always successful. This patch may help: …

11/19/13:

15:16 Milestone 1.5.7 completed
Status: released [[http://nginx.org/en/CHANGES-1.5 | 1.5.7 …
15:14 Milestone 1.4.4 completed
Status: released [[http://nginx.org/en/CHANGES-1.4 | 1.4.4 …
12:47 Ticket #442 (proxy) closed by Maxim Dounin
invalid
12:44 Ticket #442 (proxy) created by Rustam Yusubahmedov
Настроен прокси client->SSL->nginx->SSL->tomcat7 1. Версия http по …
10:03 Changeset in nginx [5444:48d6aaf6bf30] by Maxim Dounin <mdounin@…>
release-1.5.7 tag
10:03 Changeset in nginx [5443:9ba2542d75bf]release-1.5.7 by Maxim Dounin <mdounin@…>
nginx-1.5.7-RELEASE
02:57 Changeset in nginx [5442:63f960bbc52f] by Ruslan Ermilov <ru@…>
Proper backtracking after space in a request line.

11/18/13:

20:17 Ticket #355 (Proxy protocol support) updated by Nate Mackey
Is anyone working on getting this integrated? I'd be happy to help. …
17:37 Changeset in nginx-tests [354:fb366c51eac6] by Maxim Dounin <mdounin@…>
Tests: reduce race in cache revalidate test.
16:48 Changeset in nginx [5441:43ccaf8e8728] by Maxim Dounin <mdounin@…>
Upstream: cache revalidation with conditional requests. The following …
15:47 Ticket #353 (nginx 1.4.[0|1] empty reply from server) updated by Maxim Dounin
Just a quick note: the d8ee8ef5dcde changeset may be related. If a …
10:20 Ticket #441 ("Как предотвратить обработку запросов без имени сервера" - не работает) closed by Valentin V. Bartenev
invalid: Цитата из RFC 2616: …
09:24 Ticket #441 ("Как предотвратить обработку запросов без имени сервера" - не работает) created by openid.yandex.ru/Iremel36
В документации http://nginx.org/ru/docs/http/request_processing.html

11/17/13:

23:06 Changeset in nginx [5676:fbfdf8017748] by Valentin Bartenev <vbart@…>
Proxy: fixed possible uninitialized memory access. The …

11/14/13:

13:24 Changeset in nginx-tests [353:19f58e91617a] by Maxim Dounin <mdounin@…>
Tests: proxy cache revalidate tests.
13:09 Ticket #298 (Support X-accel-redirect with webdav PUT) closed by Maxim Dounin
wontfix: As of nginx 1.5.4, the …
12:24 Ticket #440 (Nginx write content to client instead of 504 when fastcgi timeout ...) updated by Maxim Dounin
The HTTP protocol allows to detect if a response isn't complete as …
12:17 Changeset in nginx-tests [352:145c37f27c5a] by Sergey Kandaurov <pluknet@…>
Tests: added resolver tests.
11:19 Ticket #440 (Nginx write content to client instead of 504 when fastcgi timeout ...) updated by Zhe Yang
I agree. In general, this is the only way to fix the problem. But a …
11:10 Ticket #440 (Nginx write content to client instead of 504 when fastcgi timeout ...) closed by Maxim Dounin
invalid: Much like with …
08:05 Ticket #440 (Nginx write content to client instead of 504 when fastcgi timeout ...) created by Zhe Yang
I wrote a multi-thread fastcgi application which print http header, …

11/13/13:

18:33 Ticket #439 (auth_basic: username variable) closed by Maxim Dounin
worksforme: There is the …
18:19 Ticket #439 (auth_basic: username variable) created by openid.yandex.ru/x12ozmouse
I think it might be a good idea to have a variable which will contain …
10:38 Ticket #438 (Test audit) closed by Maxim Dounin
fixed: Quick look suggests all mentioned uses are fine.
04:54 Ticket #438 (Test audit) created by Alex Storn
./src/core/nginx.c:421: High: getenv …

11/12/13:

02:44 Ticket #435 (Не оптимальная работа proxy_store) updated by Виталий Хныкин
не понятно зачем на вопрос на русском языке вы даете ответ на …

11/11/13:

14:49 Changeset in nginx [5440:cbb9a6c7493c] by Valentin Bartenev <vbart@…>
SPDY: fixed request hang with the auth request module. We should just …
11:32 Ticket #436 (After authentication with auth I get a 401 timeut on socket proxy) closed by Maxim Dounin
invalid: This is a bug, but not in nginx. As per configuration and HTTP …
11:18 Ticket #437 (Add Support for SPDY/3) created by Edward Ackroyd
Please add support for spdy version 3. spdy/2 support has been removed …
09:59 Changeset in nginx [5439:9b3bbaddb1ef] by Piotr Sikora <piotr@…>
Configure: call "make distclean" for libatomic. Signed-off-by: Piotr …
09:37 Changeset in nginx_org [1119:15f48e365f43] by Vladimir Homutov <vl@…>
Documented the "max_conns" parameter of the "server" directive.

11/09/13:

17:28 Ticket #436 (After authentication with auth I get a 401 timeut on socket proxy) created by johannes amorosa
I use nginx as a ssl proxy with a meteor/node.js app Site is still in …

11/08/13:

17:19 Ticket #418 (memcached module returns a code 000 instead of the code 200) updated by Maxim Dounin
The $status variable is only available once a response was sent. It's …
17:03 Ticket #418 (memcached module returns a code 000 instead of the code 200) updated by sasha
[…] so it should not work properly, but it works as a will be …
16:16 Ticket #418 (memcached module returns a code 000 instead of the code 200) updated by Maxim Dounin
Again, works fine here. If you have problems, please provide more …
16:05 Ticket #432 (Source code release date is incorrect on install instructions (web)) closed by Maxim Dounin
fixed: Proper page to look into is http://nginx.org/en/download.html. I've …
15:43 Ticket #400 (ssl_verify_client per location basis) closed by Maxim Dounin
wontfix: There are no plans to implement this in foreseeable future.
15:40 Ticket #394 (gzip module doesn't handle all certain HTTP verbs/statuses) closed by Maxim Dounin
wontfix: Feedback timeout. Please reopen if there will be interoperability …
15:32 Ticket #418 (memcached module returns a code 000 instead of the code 200) updated by sasha
Memcached module when the request is successful, it returns the code …
12:11 Ticket #223 (when using proxy_buffer_size 0 instead proxy_buffering off gives bad ...) closed by Maxim Dounin
wontfix: I don't think it worth special handling.
12:06 Ticket #434 (try_files not honored when in location and if + rewrite) closed by Maxim Dounin
duplicate: Duplicate of #86.
11:56 Ticket #215 (SSL: decryption failed or bad record mac with upstream servers) updated by Maxim Dounin
Sensitive changed
Just for record, see …
11:53 Ticket #435 (Не оптимальная работа proxy_store) closed by Maxim Dounin
invalid: The proxy_store directive provides a mechanism to store all responses …
05:59 Ticket #435 (Не оптимальная работа proxy_store) created by Виталий Хныкин
есть следующая конструкция: […] проблема следующая: получается …
Note: See TracTimeline for information about the timeline view.