Timeline



11/26/16:

19:56 Ticket #1145 (Can't set redirection port to the port from the "Host" request header field) created by exap@…
Currently you can't set the redirection port to the one that is …

11/24/16:

20:05 Ticket #1143 (http2 and auth_request corrupts first 32 bytes of POST request bodies ...) updated by jason.codeassassin.com@…
Setting client_body_in_file_only on; helps workaround the problem. …
18:37 Ticket #1143 (http2 and auth_request corrupts first 32 bytes of POST request bodies ...) updated by jason.codeassassin.com@…
Setting client_body_buffer_size 64k; definitely helps to workaround …
16:17 Ticket #1144 (BUG - cannot include files with * mask on windows server 2012r2) updated by Maxim Dounin
Priority, Keywords changed
On Windows, nginx uses FindFirstFile() / FindNextFile() functions …
15:39 Ticket #1142 (Location vars fails when use map variable in try_files) updated by Edu Herraiz
Thank you very much for your comments, very helpful. For the record, …
14:09 Ticket #1144 (BUG - cannot include files with * mask on windows server 2012r2) created by axos88@…
Adding include C:/nginx/nginx-1.10.1/conf/sites-enabled/*; to the …
13:14 Ticket #1142 (Location vars fails when use map variable in try_files) closed by Maxim Dounin
duplicate: You are using $1 and $2 variables which are from last regular …
13:09 Ticket #564 (map regex matching affects rewrite directive) updated by Maxim Dounin
See also #1142.
13:00 Ticket #564 (map regex matching affects rewrite directive) updated by Maxim Dounin
See also #1044.
13:00 Ticket #1044 (map break regexp numbered references) closed by Maxim Dounin
duplicate: Duplicate of #564.
11:35 Ticket #1143 (http2 and auth_request corrupts first 32 bytes of POST request bodies ...) updated by Valentin V. Bartenev
Thank you for the report. Please, try the following patch: […] …
05:22 Ticket #1143 (http2 and auth_request corrupts first 32 bytes of POST request bodies ...) updated by jason.codeassassin.com@…
May be related to #1128
05:22 nginx.conf attached to Ticket #1143 by jason.codeassassin.com@…
05:21 Ticket #1143 (http2 and auth_request corrupts first 32 bytes of POST request bodies ...) created by jason.codeassassin.com@…
nginx 1.10.2 and 1.11.6 on Ubuntu 16.04 and Debian Stretch will …

11/23/16:

17:45 Ticket #1142 (Location vars fails when use map variable in try_files) created by Edu Herraiz
Trying to use a map variable inside a try_files this way: […] We …

11/22/16:

20:34 Ticket #1088 (Add variable $ssl_dhe (possible values: curve name or dh<keylength>, ...) updated by Maxim Dounin
Keywords changed
20:34 Ticket #927 (Set $ssl_session_reused to "t" for session ticket reuse and set ...) updated by Maxim Dounin
Keywords changed
20:26 Ticket #224 (Args Delimiter) updated by Maxim Dounin
Sensitive changed
See also #1066.
20:25 Ticket #1066 (ngx_http_parse: query seperator bug (missing W3C recommended support ...) closed by Maxim Dounin
duplicate: Duplicate of #224.
20:17 Ticket #708 (Documentation improvement: SSL chain verification with SNI support) updated by Maxim Dounin
Component changed
20:13 Ticket #366 (Feature that return ssl_client_s_dn according to the RFC 2253) closed by Maxim Dounin
fixed: Format of the $ssl_client_s_dn and $ssl_client_i_dn variables was …
20:06 Ticket #762 (procol version integer overflow, downgrade to 0.9) closed by Maxim Dounin
fixed
18:43 Ticket #1038 (Nginx doesn't retry to start worker process when fork() error) closed by Maxim Dounin
wontfix
18:40 Ticket #1094 (CRL check for Estonian ID cards fails) updated by Maxim Dounin
The provided archive does not contain the client certificate used for …
14:31 Ticket #1141 (duplicate "60394" address and port pair in /etc/nginx/nginx.conf) closed by Maxim Dounin
duplicate: Duplicate of #1021.
14:24 Ticket #1140 (ssi module ignores "default" parameter of echo) closed by Maxim Dounin
invalid: Works fine here: […] […] Note that the check in question, `if …
13:11 Ticket #1141 (duplicate "60394" address and port pair in /etc/nginx/nginx.conf) created by wrfly@…
# nginx -t 2016/11/22 13:11:11 [emerg] 1#1: duplicate "60394" address …
12:50 Ticket #1102 (keepalive_requests is not supported for HTTP/2 connections) closed by Valentin V. Bartenev
fixed: The keepalive_requests directive isn't supposed to work with HTTP/2. …
12:46 Ticket #1138 (Module Request PageSpeed) closed by Maxim Dounin
wontfix: Мы не добавляем в репозиторий пакетов сторонние модули. Вы можете …
12:39 Ticket #1132 (preread post request body not returned for h2) updated by Valentin V. Bartenev
The request body in HTTP/2 comes in separate frames. If all such …
12:30 Ticket #1128 (HTTP/2 with ngx_http_auth_request_module causes some JSON payloads to ...) closed by Valentin V. Bartenev
worksforme: I wasn't able to reproduce it too with HTTP/2 and the auth request …
05:40 Changeset in nginx [6818:2b2239a1e0d4] by hucongcong <hucong.c@…>
Mp4: fixed setting wrong mdat atom size in very rare cases. Atom size …

11/21/16:

23:03 Ticket #1140 (ssi module ignores "default" parameter of echo) created by florian.dold@…
When using […] the default is never considered. The bug is in …
20:49 Ticket #1139 (Продвижение HTTPS и HTTP2 через автоматическую установку сертификатов) created by v.badalyan.open-bs.ru@…
Прошу рассмотреть возможность добавления функционала получения SSL …
20:46 Ticket #1138 (Module Request PageSpeed) created by v.badalyan.open-bs.ru@…
Прошу добавить в официальный репозиторий модуль от Google отдельным …
13:49 Changeset in nginx [6804:2c7a2d75938a] by Maxim Dounin <mdounin@…>
Configure: honor dependencies of dynamic modules. Dependencies of …
13:49 Changeset in nginx [6803:8bd659ff4231] by Maxim Dounin <mdounin@…>
Version bump.
13:41 Ticket #1137 (Default cipherlist contains HTTP/2 blacklisted ciphers (in first position)) closed by Maxim Dounin
duplicate: Duplicate of #794.
13:40 Ticket #1135 (Connections timing out after upgrading to 1.10.2) closed by Valentin V. Bartenev
invalid: According to the error log message, this issue is in the 3rd-party …
13:13 Ticket #1137 (Default cipherlist contains HTTP/2 blacklisted ciphers (in first position)) created by Valerian Saliou
Hello, Some people reported me not being able to connect to my HTTP/2 …
13:09 Changeset in nginx-tests [1081:cca0bff99733] by Andrey Zelenkov <zelenkov@…>
Tests: remove unused short port number mapping.
13:03 Changeset in nginx [6806:75dbab4ea930] by Dmitry Volyntsev <xeioex@…>
Events: improved error event handling for UDP sockets. Normally, the …
11:00 Ticket #1126 (No error logged when hitting upstream connect timeout over HTTPS) updated by Andrey Zelenkov <zelenkov@…>
In [changeset:"cd4395a68fc66cd434eaee6cbff727481229af7f/nginx-tests"
10:54 Changeset in nginx-tests [1080:cd4395a68fc6] by Andrey Zelenkov <zelenkov@…>
Tests: proxy ssl test with handshake timeout (ticket #1126).
10:41 Ticket #1136 (`ngx_stream_proxy_process_connection` does not terminate udp session ...) closed by Roman Arutyunyan
wontfix: What were you expecting by setting "proxy_timeout 0;" ? In your case …
03:16 Ticket #1136 (`ngx_stream_proxy_process_connection` does not terminate udp session ...) created by lrita@…
I have a service which collects some statistics informations by udp …
02:09 Ticket #1133 (ngx_http_limit_req_module . When zone storage is exhausted, all the ...) updated by antonyhong@…
Replying to mdounin: Thank you for solving my doubts.The …

11/20/16:

23:07 Changeset in nginx-tests [1079:cbc8641a204e] by Andrey Zelenkov <zelenkov@…>
Tests: fixed "proxy connect timeout" http tests. Previously, proxy …

11/19/16:

19:12 Ticket #1135 (Connections timing out after upgrading to 1.10.2) updated by otto.seravo.fi@…
Nchan has a somewhat similar report related to nchan crashing when …
17:34 Ticket #1134 (CVE-2016-1247) updated by mikhirev@…
Of course I agree that symlinks exist for good reason, but I don't see …
07:25 Ticket #1135 (Connections timing out after upgrading to 1.10.2) created by anttiviljami@…
After upgrading from 1.10.1 without ALPN support to 1.10.2 with ALPN …

11/18/16:

17:10 Ticket #1134 (CVE-2016-1247) updated by Maxim Dounin
Or you may even disable symlinks in your OS completely. The fact is …
16:33 Ticket #1134 (CVE-2016-1247) updated by mikhirev@…
Well, there is a much simpler solution: open logs with O_NOFOLLOW.
15:35 Ticket #1134 (CVE-2016-1247) updated by Maxim Dounin
Type changed
Better solution would be to implement passing open file descriptors …
15:06 Ticket #1134 (CVE-2016-1247) created by mikhirev@…
Hi! Recently there was a vulnerability reported against Debian nginx …
13:49 Ticket #1133 (ngx_http_limit_req_module . When zone storage is exhausted, all the ...) updated by Maxim Dounin
Component changed
The behaviour is as expected: when a memory allocation from a shared …
13:04 Ticket #1131 (No error about wrong config) closed by Maxim Dounin
duplicate: To see full configuration loaded use nginx -T. Duplicate of #933.
09:47 Ticket #1133 (ngx_http_limit_req_module . When zone storage is exhausted, all the ...) updated by antonyhong@…
The OS is windows server 2008 R2 64bit
07:50 Ticket #1133 (ngx_http_limit_req_module . When zone storage is exhausted, all the ...) created by antonyhong@…
Hi,I want to validated 'If the zone storage is exhausted, the server …
00:15 Ticket #1132 (preread post request body not returned for h2) created by malini.kothapalli@…
I am experimenting with POST over h2. The use case is to read full …

11/17/16:

20:20 Ticket #1131 (No error about wrong config) created by KES777@…
When you in your http { } section do: include …
15:51 Ticket #1130 (GeoIP module does not work on 1.10.2) closed by Maxim Dounin
invalid
15:50 Ticket #1130 (GeoIP module does not work on 1.10.2) updated by hristo.iliev@…
Ouch that's right. I forgot fastcgi_params. I'm really sorry. Thank …
15:45 Ticket #1130 (GeoIP module does not work on 1.10.2) updated by Maxim Dounin
The GEOIP_COUNTRY_CODE is not something that is expected to appear …
15:35 Ticket #1130 (GeoIP module does not work on 1.10.2) updated by hristo.iliev@…
I have two installations of nginx - 1.10.1 and 1.10.2 on same server …
15:14 Ticket #1130 (GeoIP module does not work on 1.10.2) updated by Maxim Dounin
The geoip module is not expected to set GEOIP_COUNTRY_CODE. If you see …
14:57 Ticket #936 (For security purposes it is necessary to remove or change the "server" ...) updated by Valentin V. Bartenev
Replying to BenBE@…: > @vbart: Not displaying the software …
14:46 Ticket #936 (For security purposes it is necessary to remove or change the "server" ...) updated by BenBE@…
As the headers-more module isn't included with the default …
14:36 Ticket #1130 (GeoIP module does not work on 1.10.2) created by hristo.iliev@…
http_geoip_module stopped working in version 1.10.2 . With same …
13:11 Ticket #1129 (Allow overriding/clearing Server HTTP response header) closed by Maxim Dounin
duplicate: Duplicate of #936.

11/16/16:

21:27 Ticket #1127 (set_real_ip_from not working in 1.10.x) updated by exobuzz@…
Looks like it is a problem specific to the dotdeb packages so will …
19:59 Ticket #1129 (Allow overriding/clearing Server HTTP response header) created by BenBE@…
nginx should provide for a sensible way to override the value returned …
17:52 Ticket #1128 (HTTP/2 with ngx_http_auth_request_module causes some JSON payloads to ...) updated by kcannon.gaikai.com@…
We are not able to reproduce this issue without using 3-rd party …
14:50 Ticket #857 (Problem with multiline $ssl_client_cert HTTP header in proxy mode) updated by dren.dk@…
I've been bitten by this exact problem, here's my proposed fix, which …
14:29 Ticket #1128 (HTTP/2 with ngx_http_auth_request_module causes some JSON payloads to ...) updated by Valentin V. Bartenev
Are you able to reproduce the issue without 3-rd party modules?

11/15/16:

22:38 app-error-log3.txt attached to Ticket #1128 by kcannon.gaikai.com@…
22:38 app-error-log2.txt attached to Ticket #1128 by kcannon.gaikai.com@…
22:37 app-error-log1.txt attached to Ticket #1128 by kcannon.gaikai.com@…
22:33 nginx-error-log.txt attached to Ticket #1128 by kcannon.gaikai.com@…
nginx error log
20:00 Ticket #1127 (set_real_ip_from not working in 1.10.x) closed by Maxim Dounin
duplicate: Both configurations provided work fine as well. Using $remote_addr
18:38 Ticket #1127 (set_real_ip_from not working in 1.10.x) updated by exobuzz@…
This might help - From another user from …
16:51 Ticket #1127 (set_real_ip_from not working in 1.10.x) updated by Maxim Dounin
Just tested, and it works fine here. Tested with the following …
15:25 Milestone 1.11.6 completed
Status: released Trunk: mainline * Small assorted …
15:11 Changeset in nginx [6802:6a26016e9a13] by Maxim Dounin <mdounin@…>
release-1.11.6 tag
15:11 Changeset in nginx [6801:5e371426b3bc]release-1.11.6 by Maxim Dounin <mdounin@…>
nginx-1.11.6-RELEASE
14:43 Ticket #1128 (HTTP/2 with ngx_http_auth_request_module causes some JSON payloads to ...) updated by Valentin V. Bartenev
Could you provide [http://nginx.org/en/docs/debugging_log.html a …
00:35 Ticket #1128 (HTTP/2 with ngx_http_auth_request_module causes some JSON payloads to ...) created by kcannon.gaikai.com@…
We have an internal tool that requires all requests to be ran through …

11/14/16:

18:55 Changeset in nginx [6800:49d7dbd25a27] by Maxim Dounin <mdounin@…>
Fixed a typo, removed an empty line.
18:09 Ticket #1127 (set_real_ip_from not working in 1.10.x) created by exobuzz@…
nginx version: Linux 4.7.0-0.bpo.1-amd64 #1 SMP Debian …
14:56 Ticket #1126 (No error logged when hitting upstream connect timeout over HTTPS) closed by Maxim Dounin
fixed: Fix committed.
14:30 Ticket #1126 (No error logged when hitting upstream connect timeout over HTTPS) updated by Maxim Dounin <mdounin@…>
In [changeset:"d8d037f204840a98f0562a05c4d7565adb14c802/nginx"
14:21 Changeset in nginx [6799:d8d037f20484] by Maxim Dounin <mdounin@…>
Upstream: handling of upstream SSL handshake timeouts. Previously SSL …

11/10/16:

14:38 Ticket #1088 (Add variable $ssl_dhe (possible values: curve name or dh<keylength>, ...) updated by Maxim Dounin
Note that the patch to save the curve choice in nginx's session data …
14:25 Ticket #844 (Allow support for different protocols on different hosts (same machine)) updated by Maxim Dounin
Duplicate of #676.
14:24 Ticket #676 (Different ssl_protocols per server won`t work) updated by Maxim Dounin
See also #844.
04:42 Ticket #376 (log file reopen should pass opened fd from master process) updated by Jérôme Poulin
To make matter worse, the log is always opened using O_CREAT, …
02:44 Changeset in nginx [6798:2decd6b34306] by hucongcong <hucong.c@…>
Range filter: only initialize ctx->ranges in main request. It is not …
02:17 Changeset in nginx [6797:40c2f3e06d23] by hucongcong <hucong.c@…>
Core: slight optimization in ngx_chain_update_chains(). It is not …
00:56 Ticket #1088 (Add variable $ssl_dhe (possible values: curve name or dh<keylength>, ...) updated by bblack.wikimedia.org@…
Update on the above: I finally got around to digging into why the …

11/09/16:

15:49 Ticket #1126 (No error logged when hitting upstream connect timeout over HTTPS) updated by Maxim Dounin
Status changed
Thanks for tracing this. Additionally, the error should be 504, not …
13:34 Ticket #1126 (No error logged when hitting upstream connect timeout over HTTPS) created by moshisushi@…
It seems like no errors are logged, not even using "error_log …

11/08/16:

11:33 Ticket #1059 (syntax check error when an upstream is used in proxy_pass using both ...) updated by Ruslan Ermilov
In [changeset:"640e1e778de63f46fcd18ab5be149d6a39599868/nginx"

11/07/16:

21:51 Ticket #1125 (nginx package upgrade on ubuntu 14.04 rewrites ssl config) closed by Maxim Dounin
invalid
14:38 Ticket #1125 (nginx package upgrade on ubuntu 14.04 rewrites ssl config) updated by aljazceru@…
bug report submitted. …
13:40 Ticket #1125 (nginx package upgrade on ubuntu 14.04 rewrites ssl config) updated by Thomas Ward
Bugs in the Ubuntu packaging belong on Launchpad - it is not …
12:04 Ticket #1125 (nginx package upgrade on ubuntu 14.04 rewrites ssl config) created by aljazceru@…
When upgrading nginx packages on ubuntu 14.04 update rewrites …

11/04/16:

16:12 Changeset in nginx [6796:92ad1c92bcf9] by Ruslan Ermilov <ru@…>
Style: switch.

11/03/16:

14:10 Changeset in nginx [6795:1a917932db96] by Maxim Dounin <mdounin@…>
Cache: prefix-based temporary files. On Linux, the rename syscall can …
14:09 Changeset in nginx [6794:93b294c5d581] by Maxim Dounin <mdounin@…>
Upstream: avoid holding a cache node with upgraded connections. …
10:20 Changeset in nginx-tests [1078:36437be7b3f4] by Sergey Kandaurov <pluknet@…>
Tests: proxy_cache_max_range_offset tests.

11/02/16:

17:05 Changeset in nginx [6793:0fba3ed4e7eb] by Dmitry Volyntsev <xeioex@…>
Cache: proxy_cache_max_range_offset and friends. It configures a …
13:09 Ticket #1124 (4** pages cache don't appear in file cache) updated by Nyoroon@…
Replying to mdounin: > When using proxy_intercept_errors / …
12:51 Ticket #1124 (4** pages cache don't appear in file cache) closed by Maxim Dounin
invalid: When using proxy_intercept_errors / fastcgi_intercept_errors, …
09:27 config.txt attached to Ticket #1124 by Nyoroon@…
nginx config
09:27 Ticket #1124 (4** pages cache don't appear in file cache) created by Nyoroon@…
4-- error pages don't appear in file cache, but somehow cached (in …
08:47 Changeset in nginx [6792:45d553812055] by Sergey Kandaurov <pluknet@…>
HTTP/2: flow control debugging.

11/01/16:

17:39 Changeset in nginx [6791:cb4a4e9bba8e] by Maxim Dounin <mdounin@…>
Perl: fixed optimization in SSI command handler. As the pointer to …
00:15 Ticket #1102 (keepalive_requests is not supported for HTTP/2 connections) updated by Alexey Ivanov
This should be fixed by: http://hg.nginx.org/nginx/rev/9027991e2f37 […]

10/31/16:

20:38 Changeset in nginx [6790:727c6412673a] by Ruslan Ermilov <ru@…>
HTTP/2: slightly improved debugging.
20:12 Ticket #1117 (ngx_http_v2_module documentation says HTTP/2 is experimental) updated by Jacques Chester
Sorry for the slow reply, I didn't realise Trac hadn't collected my …
16:09 Changeset in nginx-tests [1077:13247bbc1f7d] by Sergey Kandaurov <pluknet@…>
Tests: HTTP/2 tests for max requests.
12:21 Changeset in nginx-tests [1076:4240cca68d1d] by Andrey Zelenkov <zelenkov@…>
Tests: whitespace fix.
12:21 Changeset in nginx-tests [1075:5513b68493e7] by Andrey Zelenkov <zelenkov@…>
Tests: added rewrite prerequisite in proxy_method.t.
09:39 Ticket #1123 (Include timezone in error logs) created by joshuaspence@…
Currently, nginx access logs include a timestamp (via $time_local) …

10/29/16:

20:35 Changeset in nginx-tests [1074:a2b6997b4d48] by Maxim Dounin <mdounin@…>
Tests: perl ssi tests.
19:13 Ticket #1122 (nginx appears to ignore add_header when 404 handling (possibly ...) closed by Maxim Dounin
invalid: Quoting docs: Adds the …
18:14 Ticket #1122 (nginx appears to ignore add_header when 404 handling (possibly ...) updated by mike503@…
Filed against the wrong version, but the behavior has been the same …
07:44 Ticket #860 (NGINX 1.9.9 fails to build against OpenSSL 1.1.0) updated by ctrochalakis@…
That's great. Thanks a lot Maxim.
00:43 Ticket #1122 (nginx appears to ignore add_header when 404 handling (possibly ...) created by mike503@…
No matter where I put in an add_header in my config, it seems like …

10/28/16:

18:32 Ticket #215 (SSL: decryption failed or bad record mac with upstream servers) updated by bblack.wikimedia.org@…
FYI in case anyone else searches up this ticket, filed upstream …
09:16 Ticket #1097 (Nginx worker process exited on signal 11) updated by begracyber@…
Replying to adushein.sports.ru@…: > I have 2 nginx …
04:56 Ticket #376 (log file reopen should pass opened fd from master process) updated by MTecknology@…
What would it take to get some attention drawn to this bug? In …

10/27/16:

21:52 Ticket #215 (SSL: decryption failed or bad record mac with upstream servers) updated by bblack.wikimedia.org@…
Update: taking some cues from older OpenSSL bug reports, I tried …
19:03 Ticket #215 (SSL: decryption failed or bad record mac with upstream servers) updated by Maxim Dounin
> It's not reported at the "error" level. For me it's reported at the …
18:36 Ticket #215 (SSL: decryption failed or bad record mac with upstream servers) updated by bblack.wikimedia.org@…
Probably deserves a new ticket at least, but in any case: I've …
18:02 Changeset in nginx_org [1886:6299f9cabfe4] by Yaroslav Zhuravlev <yar@…>
Changed <literal> to <value> in the slice directive.
16:45 Changeset in nginx-tests [1073:0179c2dcbab8] by Sergey Kandaurov <pluknet@…>
Tests: adjusted mp4 TODO.
16:29 Changeset in nginx-tests [1072:37c18a92115b] by Sergey Kandaurov <pluknet@…>
Tests: basic WebP tests in image filter.
15:12 Ticket #475 (http_mp4_module seeking problem: "start time is out mp4 stts samples") closed by Maxim Dounin
fixed: Fix committed.
15:10 Ticket #475 (http_mp4_module seeking problem: "start time is out mp4 stts samples") updated by Maxim Dounin <mdounin@…>
In [changeset:"b123eae3fd4e72e430247690e0cec5838b546055/nginx"
Note: See TracTimeline for information about the timeline view.