Timeline



10/02/18:

19:57 Ticket #1648 (Nginx compiled with Openssl 1.1.1 allow renegotiation) updated by delagen@…
After patch the same ((
19:56 Ticket #1648 (Nginx compiled with Openssl 1.1.1 allow renegotiation) created by delagen@…
Tested 1.15.5 with testssl.sh ` Secure Renegotiation …
16:07 Ticket #1285 (map regexp positional captures interfere with location regexp ...) updated by Maxim Dounin
See also #1647.
16:07 Ticket #1647 (Evaluation of multiple regexes brakes back references) closed by Maxim Dounin
duplicate: Duplicate of #1285.
15:45 Ticket #1646 (Nginx 1.15.4 segfault during normal ssllabs.com test) updated by Sergey Kandaurov <pluknet@…>
In [changeset:"f50c7d90f5c908a0caa7919e5d7050900840b810/nginx-tests"
15:41 Milestone 1.15.5 completed
Status: scheduled Trunk: mainline * Bugfix release
15:40 Changeset in nginx-tests [1380:f50c7d90f5c9] by Sergey Kandaurov <pluknet@…>
Tests: more https sni tests with renegotiation (ticket #1646).
15:30 Ticket #1646 (Nginx 1.15.4 segfault during normal ssllabs.com test) closed by Maxim Dounin
fixed: Thanks for testing. The fix was committed and now available in nginx …
15:23 Changeset in nginx_org [2243:8cc7642ba82e] by Maxim Dounin <mdounin@…>
nginx-1.15.5
15:15 Ticket #1647 (Evaluation of multiple regexes brakes back references) created by Andriy Melnyk
Prerequisite: map with regex, location with regex + capture …
15:15 Ticket #1646 (Nginx 1.15.4 segfault during normal ssllabs.com test) updated by Maxim Dounin <mdounin@…>
In [changeset:"bf1ac3dc1e6856371c60bc5c57084662926dba0e/nginx"
15:14 Ticket #1646 (Nginx 1.15.4 segfault during normal ssllabs.com test) updated by marcin.wanat@…
Thank you for fast reply! It looks like the patch has fixed problem …
15:13 Changeset in nginx [7369:64721be763b6] by Maxim Dounin <mdounin@…>
release-1.15.5 tag
15:13 Changeset in nginx [7368:f062e43d74fc]release-1.15.5 by Maxim Dounin <mdounin@…>
nginx-1.15.5-RELEASE
14:46 Changeset in nginx [7367:bf1ac3dc1e68] by Maxim Dounin <mdounin@…>
SSL: fixed segfault on renegotiation (ticket #1646). In e3ba4026c02d
14:26 Ticket #1646 (Nginx 1.15.4 segfault during normal ssllabs.com test) updated by Maxim Dounin
Status, Owner changed
Thanks for the report. The following patch should fix this: […]
11:40 Ticket #1646 (Nginx 1.15.4 segfault during normal ssllabs.com test) updated by marcin.wanat@…
I do apologize for lact of formatting, but it looks like i cannot edit …
11:37 Ticket #1646 (Nginx 1.15.4 segfault during normal ssllabs.com test) created by marcin.wanat@…
I have compiled latest nginx 1.15.4 and noticed that it segfault every …
10:32 Changeset in nginx [7366:7bf3c323cb6e] by Ruslan Ermilov <ru@…>
Fixed off-by-one error in shared zone initialization. On systems …

10/01/18:

12:44 Changeset in nginx_org [2242:c06151558e93] by Yaroslav Zhuravlev <yar@…>
Updated with Netcraft September 2018 Web Server Survey stats.

09/28/18:

22:50 Ticket #1645 (Some questions about slab_stat module?) closed by Maxim Dounin
invalid: This is a wrong place to ask questions about 3rd party modules. You …
12:44 Ticket #1643 (Proxy Protocol documentation has the wrong variables) closed by Yaroslav Zhuravlev
fixed
12:44 Ticket #1643 (Proxy Protocol documentation has the wrong variables) updated by Yaroslav Zhuravlev
Thanks, fixed: …
03:37 Ticket #1645 (Some questions about slab_stat module?) updated by huifeidexingyuner@…
00007FA62F65B000 Corresponding decimal 140351736492032
03:33 1.png attached to Ticket #1645 by huifeidexingyuner@…
Describe the screenshots
03:30 Ticket #1645 (Some questions about slab_stat module?) created by huifeidexingyuner@…
Why is the number of pages calculated based on the end address minus …

09/27/18:

10:05 Changeset in nginx [7364:5fa22beeaf11] by Ruslan Ermilov <ru@…>
Version bump.

09/26/18:

08:38 Ticket #1643 (Proxy Protocol documentation has the wrong variables) updated by maxim
Status, Owner changed

09/25/18:

23:05 Ticket #1644 (Educate people about the importance of "Server" HTTP header) created by Ivan Aksamentov
Nginx Inc. should consider increasing the visibility of the problem of …
21:53 Ticket #1641 (Possible buffer overflow in ngx_http_request (1.15.3)) updated by Ivan Aksamentov
Replying to vbart: Ah, I see. I was mislead by all these …
20:42 Changeset in nginx_org [2241:b7ac730b96f3] by Sergey Kandaurov <pluknet@…>
Documented TLS 1.3 early data support with OpenSSL. While here, …
16:56 Ticket #1643 (Proxy Protocol documentation has the wrong variables) created by pnickerson.cashstar.com@…
Looking at the documentation at: …
15:23 Milestone 1.15.4 completed
Status: scheduled Trunk: mainline * 0-RTT support (full)
15:21 Changeset in nginx_org [2240:a9bbf5fbec0b] by Maxim Dounin <mdounin@…>
nginx-1.15.4
15:11 Changeset in nginx [7363:dcd9303b0d73] by Maxim Dounin <mdounin@…>
release-1.15.4 tag
15:11 Changeset in nginx [7362:49d498356538]release-1.15.4 by Maxim Dounin <mdounin@…>
nginx-1.15.4-RELEASE
12:12 Ticket #1641 (Possible buffer overflow in ngx_http_request (1.15.3)) updated by Valentin V. Bartenev
Replying to ivan.aksamentov@…: > Replying to [comment:1
11:07 Changeset in nginx [7365:cd4fa2fab8d8] by Ruslan Ermilov <ru@…>
SSL: fixed unlocked access to sess_id->len.
11:00 Changeset in nginx [7361:c09c7d47acb9] by Maxim Dounin <mdounin@…>
SSL: logging level of "no suitable signature algorithm". The "no …
10:59 Changeset in nginx [7360:8f25a44d9add] by Maxim Dounin <mdounin@…>
SSL: logging level of "no suitable key share". The "no suitable key …
00:58 Ticket #1641 (Possible buffer overflow in ngx_http_request (1.15.3)) updated by Ivan Aksamentov
Replying to mdounin: Okay, sorry for the false alarm. Is …

09/24/18:

22:16 Ticket #1642 (HTTP2 proxy limits client body size even for streaming proxied protocols) closed by Maxim Dounin
wontfix: This is expected behaviour. The client_max_body_size is always …
22:08 Ticket #1641 (Possible buffer overflow in ngx_http_request (1.15.3)) closed by Maxim Dounin
invalid: The recv() call in question uses the buffer defined at the start of …
20:40 Ticket #1642 (HTTP2 proxy limits client body size even for streaming proxied protocols) created by jwatte@…
When we use NGINX for ingress to GRPC using HTTP2, after receiving a …
20:15 build_nginx.sh attached to Ticket #1641 by Ivan Aksamentov
Bash script to build nginx 1.15.3 with LTO
20:04 nginx-lto-build-log.txt.tar.gz attached to Ticket #1641 by Ivan Aksamentov
Full Nginx LTO build log
20:03 versions.txt attached to Ticket #1641 by Ivan Aksamentov
Version info of various tools used
20:01 build_binutils.sh attached to Ticket #1641 by Ivan Aksamentov
Bash script to build binutils 2.31.1 with gold plugin enabled
20:00 Ticket #1641 (Possible buffer overflow in ngx_http_request (1.15.3)) created by Ivan Aksamentov
When building Nginx 1.15.3 with Link-time optimization (LTO) and …
17:26 Changeset in nginx [7359:b5ea47df9bee] by Gena Makhomed <gmm@…>
Cache: status must be less then 599 in *_cache_valid directives. …
16:24 Changeset in nginx_org [2247:0f16ef9a8dbe] by Yaroslav Zhuravlev <yar@…>
Created "nginx objects" section in reference.xml.
16:24 Changeset in nginx_org [2246:32ba43abf9cd] by Yaroslav Zhuravlev <yar@…>
Renamed njs API, njs Changes.
16:10 Changeset in nginx_org [2245:87a0e2c73a25] by Yaroslav Zhuravlev <yar@…>
Refactored njs documentation.
16:10 Changeset in nginx_org [2244:467aef18bf12] by Yaroslav Zhuravlev <yar@…>
Renamed the "About njs" page.
11:40 Ticket #1635 (Nginx (1.13.6) does not ignore Host Header for absoluteURI) closed by Maxim Dounin
invalid: Replying to vic210blu@…: It makes no sense to reopening a …

09/22/18:

20:05 Ticket #1635 (Nginx (1.13.6) does not ignore Host Header for absoluteURI) reopened by Victor

09/21/18:

17:49 Changeset in nginx [7357:548a63b354a2] by Sergey Kandaurov <pluknet@…>
SSL: support for TLSv1.3 early data with OpenSSL. In collaboration …
17:31 Changeset in nginx [7356:e3ba4026c02d] by Maxim Dounin <mdounin@…>
SSL: disabled renegotiation checks with SSL_OP_NO_RENEGOTIATION. …
16:49 Changeset in nginx_org [2238:0761b770a94e] by Sergey Kandaurov <pluknet@…>
RFC8470.
15:44 Ticket #1640 (Question on handling NGX_HTTP_CLIENT_CLOSED_REQUEST) closed by Maxim Dounin
worksforme: This particular code always calls ngx_http_terminate_request() unless …
15:41 Ticket #1634 (No response from nginx) closed by Maxim Dounin
fixed: Fix committed, thanks for reporting this.
15:40 Ticket #274 (error_page 400 =444 /; утекают сокеты) closed by Maxim Dounin
fixed: Fix committed, thanks for reporting this.
14:47 Changeset in nginx_org [2239:fc5d2ab333a4] by Artem Konev <artem.konev@…>
Added Unit 1.4 release news.
14:40 Ticket #1634 (No response from nginx) updated by Maxim Dounin <mdounin@…>
In [changeset:"b64adc956643bdd4579e8a8f0b19fe31dca9a9df/nginx"
14:40 Tickets #274,​695 batch updated by Maxim Dounin <mdounin@…>
In [changeset:"1812f1d79d84a11247109f566c161002c0653a52/nginx"
14:33 Changeset in nginx-tests [1379:14bfd6643bbb] by Maxim Dounin <mdounin@…>
Tests: updated rewrite.t for the return r->err_status change.
12:59 Changeset in nginx [7355:b64adc956643] by Maxim Dounin <mdounin@…>
Rewrite: removed r->err_status special handling (ticket #1634). …
12:59 Changeset in nginx [7354:1812f1d79d84] by Maxim Dounin <mdounin@…>
Fixed socket leak with "return 444" in error_page (ticket #274). …
09:05 Ticket #1640 (Question on handling NGX_HTTP_CLIENT_CLOSED_REQUEST) created by jcornez@…
Hello and sorry if this is the wrong place to ask about this. I'm …
06:51 Milestone unit-1.4 completed
Planned features: - frontend ssl support - various bug fixes

09/20/18:

16:55 Ticket #1639 (Add support for writing PROXY protocol v2 to upstream) updated by ko.cloudflare.com@…
Fair enough. I also don't have any numbers at the moment and I guess I …
15:03 Ticket #812 (Fetch OCSP responses on startup, and store across restarts) updated by antoinep92@…
Hi, could someone provide some status on this ? As OCSP is being …
13:07 Ticket #1639 (Add support for writing PROXY protocol v2 to upstream) updated by Maxim Dounin
> I guess the main reason would be that it's faster to parse, …
11:59 Changeset in nginx-tests [1378:ba7e2e60f8b6] by Sergey Kandaurov <pluknet@…>
Tests: fixed grpc_ssl.t prerequisites.
10:25 Ticket #1639 (Add support for writing PROXY protocol v2 to upstream) updated by ko.cloudflare.com@…
I guess the main reason would be that it's faster to parse, especially …

09/19/18:

17:28 Ticket #1639 (Add support for writing PROXY protocol v2 to upstream) updated by Maxim Dounin
This was considered (and I believe there was a patch), yet there were …
16:29 Ticket #1639 (Add support for writing PROXY protocol v2 to upstream) created by ko.cloudflare.com@…
With nginx 1.13.11, support for reading version 2 of the PROXY …
14:26 Changeset in nginx [7358:170922952477] by Nova DasSarma <nova@…>
Removed bgcolor attribute on body in error pages and autoindex. The …
14:11 Ticket #1595 (http2 server can't send the Header [Upgrade] to backend) updated by Sergey Kandaurov
See also https://tools.ietf.org/html/rfc8441

09/18/18:

21:04 Ticket #1636 (CPU 100% with njs on simple base64 decode (2.3.1)) updated by 131@…
Switching to a non https url is a full win, ab -n 10000 -c 200 stays …
18:13 Ticket #1638 (Nginx Systemd is failing to start on reboot) updated by Maxim Dounin
From the details you've provided it looks like nginx hangs on start …
17:01 Milestone njs-0.2.4 completed
Planned features: * refactored njs/stream integration
16:36 Ticket #1638 (Nginx Systemd is failing to start on reboot) updated by saeohioalpha@…
Also, this has happened to me on both of the Linode 16.04.5 VMs that I …
16:34 Ticket #1638 (Nginx Systemd is failing to start on reboot) updated by saeohioalpha@…
There was also an issue here …
16:19 Ticket #1638 (Nginx Systemd is failing to start on reboot) created by saeohioalpha@…
I recently updated my linode VM (UB16.04.5, 4.17.17-x86_64-linode116) …
15:12 Ticket #1636 (CPU 100% with njs on simple base64 decode (2.3.1)) closed by Maxim Dounin
invalid: You are using variables in the proxy_pass directive, and this means …
14:55 Ticket #1637 (nginx:alpine latest (from 9/12/2018) uses alpine v3.7.1) closed by thresh
fixed: The alpine images were rebuilt with fixed apk and pushed to the docker …
14:36 Ticket #1637 (nginx:alpine latest (from 9/12/2018) uses alpine v3.7.1) updated by hairylime@…
Just for completeness - I'm looking at image …
14:29 Ticket #1637 (nginx:alpine latest (from 9/12/2018) uses alpine v3.7.1) created by hairylime@…
There's a critical security problem in apk that requires updates to …
12:26 Ticket #1636 (CPU 100% with njs on simple base64 decode (2.3.1)) updated by 131@…
[…]

09/17/18:

22:44 Ticket #1636 (CPU 100% with njs on simple base64 decode (2.3.1)) created by 131@…
I'm using a simple js_set to base64 decode (via String.bytesFrom) as …
14:24 Ticket #1635 (Nginx (1.13.6) does not ignore Host Header for absoluteURI) closed by Maxim Dounin
invalid: In terms of RFC7230, nginx is not a proxy, it is a server. Quoting …
13:40 Changeset in nginx-tests [1377:09c2291b2bab] by Sergey Kandaurov <pluknet@…>
Tests: relaxed test for no response on SSL renegotiation attempt.
12:01 Ticket #1634 (No response from nginx) updated by Maxim Dounin
Replying to huisuiwyn@…: > It doesn't work for me. With …
11:55 Changeset in nginx-tests [1376:92ba8ef8d6b2] by Sergey Kandaurov <pluknet@…>
Tests: adjusted grpc_ssl.t TODO to expectedly fail on Solaris. The …
11:29 Ticket #1635 (Nginx (1.13.6) does not ignore Host Header for absoluteURI) created by gspoosi@…
If Nginx receives a request with an absolute URI it still validates …
11:12 Ticket #1634 (No response from nginx) updated by huisuiwyn@…
It doesn't work for me. With your patch nginx returns index page …
06:59 Changeset in nginx_org [2236:9f0f4f5c1a30] by Maxim Konovalov <maxim@…>
Regenerated.
06:59 Changeset in nginx_org [2235:7590170efed7] by Maxim Konovalov <maxim@…>
The banner reverted back to nginx.conf-2018 promo.

09/15/18:

23:57 Ticket #1634 (No response from nginx) updated by Maxim Dounin
Status changed
Thanks for reporting this. Please try the following patch: […]
10:59 Ticket #195 (Close connection if SSL not enabled for vhost) updated by JemmyLoveJenny@…
Try this patch. You needn't set HTTPS default_server in the config …
00:49 Ticket #1630 (open_file_cache loses trailing newline on changed files) updated by Maxim Dounin
> OK, but would it also be possible to use something like inotify to …

09/14/18:

17:29 Ticket #1630 (open_file_cache loses trailing newline on changed files) updated by Sam Bull
OK, but would it also be possible to use something like inotify to get …
14:11 Ticket #1634 (No response from nginx) created by huisuiwyn@…
I have no responsa nginx from configuration followyn: […] […] 水雞

09/13/18:

18:10 Changeset in nginx_org [2237:5268c13196f2] by Yaroslav Zhuravlev <yar@…>
Documented njs changes triggered by njs-0.2.4.
15:21 Ticket #1633 (Zone configuration in upstream gives signal 11 on heavy loaded server) updated by https://stackoverflow.com/users/6797850/strangedata
Thank you for pointing that out. I'll talk to the sticky module developers.

09/12/18:

23:53 Ticket #1633 (Zone configuration in upstream gives signal 11 on heavy loaded server) closed by Maxim Dounin
invalid: To work with upstreams in shared memory zone, all upstream-related …
16:27 Ticket #1633 (Zone configuration in upstream gives signal 11 on heavy loaded server) updated by https://stackoverflow.com/users/6797850/strangedata
Forgot to add the error.log message: 2018/09/11 12:57:22 [alert] …
16:25 Ticket #1633 (Zone configuration in upstream gives signal 11 on heavy loaded server) created by https://stackoverflow.com/users/6797850/strangedata
I've been testing shared memory zone for an upstream configuration for …

09/11/18:

13:09 Ticket #1632 (Pool cleanups are not called in the daemonization) closed by Maxim Dounin
wontfix: The ngx_daemon() function is not expected to free ngx_cycle or any …
11:45 Changeset in nginx-tests [1375:f168fc46c7a4] by Dmitry Volyntsev <xeioex@…>
Tests: renamed JavaScript to njs.
11:45 Changeset in nginx-tests [1374:fd7766ab0a69] by Dmitry Volyntsev <xeioex@…>
Tests: stream njs module refactored.
11:45 Changeset in nginx-tests [1373:0569baf0cc4a] by Dmitry Volyntsev <xeioex@…>
Tests: style.
05:27 Ticket #1632 (Pool cleanups are not called in the daemonization) created by spacewanderlzx@…
When we run our testsuites with LeakSanitizer, we noticed lots of leak …

09/10/18:

15:57 Changeset in nginx [7353:87d2ea860f38] by Maxim Dounin <mdounin@…>
SSL: restore handlers after blocking. It is possible that after …
15:57 Changeset in nginx [7352:0de0b16a551c] by Maxim Dounin <mdounin@…>
SSL: corrected SSL_ERROR_WANT_WRITE / SSL_ERROR_WANT_READ logging. …
15:57 Changeset in nginx [7351:2b5528023f6b] by Maxim Dounin <mdounin@…>
Lingering close changed to handle NGX_AGAIN. The "do { c->recv() } …
12:30 Ticket #1630 (open_file_cache loses trailing newline on changed files) closed by Maxim Dounin
invalid: If you non-atomically modify a file being served by a web server, you …

09/08/18:

15:37 Ticket #1631 (feature request: support ALTSVC frame) created by wan-qy@…
http/2 has a ALTSVC frame feature that can tell client to send first …

09/07/18:

13:12 Changeset in nginx-tests [1372:4c0ea623343a] by Sergey Kandaurov <pluknet@…>
Tests: style.
11:14 Ticket #1630 (open_file_cache loses trailing newline on changed files) created by Sam Bull
When using open_file_cache, if I modify a file, the server starts …

09/06/18:

11:08 Changeset in nginx_org [2233:8f988cbe1296] by Konstantin Pavlov <thresh@…>
Linux packages: added SLES 15.

09/05/18:

23:12 Ticket #1629 (use variable in for proxy_ssl in stream module) created by James Callahan
I'd like to be able to use a variable to decide on proxy_ssl when …
13:35 Changeset in nginx_org [2232:9cfca60d8f42] by Maxim Konovalov <maxim@…>
Regenerated.
13:35 Changeset in nginx_org [2231:cda9e349cc22] by Maxim Konovalov <maxim@…>
nginx-plus-r16 promo.

09/04/18:

16:41 Changeset in nginx_org [2234:20a189bdb15f] by Yaroslav Zhuravlev <yar@…>
Updated SSL early data documentation.
11:22 Ticket #1628 ($ssl_session_id is not set when client connected via MSIE11) closed by Maxim Dounin
invalid: The $ssl_session_id variable represents SSL session id. It can be …
10:55 Ticket #1628 ($ssl_session_id is not set when client connected via MSIE11) updated by nskforward@…
Sorry, nginx version is not depended. The following setting solves the …
10:54 Ticket #1628 ($ssl_session_id is not set when client connected via MSIE11) updated by nskforward@…
I upgraded nginx version to 1.15.3 and issue solved
10:40 Ticket #1628 ($ssl_session_id is not set when client connected via MSIE11) updated by nskforward@…
The same wrong behavior in MS Edge browser
10:35 Ticket #1628 ($ssl_session_id is not set when client connected via MSIE11) created by nskforward@…
$ssl_session_id is not set when client connected via MSIE11 Steps: …

09/03/18:

18:26 Changeset in nginx-tests [1371:ece25f998f0d] by Sergey Kandaurov <pluknet@…>
Tests: adjusted TODO in grpc_ssl.t, fix committed. See 23e407a72fe9
18:21 Changeset in nginx-tests [1370:23e407a72fe9] by Sergey Kandaurov <pluknet@…>
Tests: upstream keepalive with grpc pending frames. This is a …
16:34 Changeset in nginx [7350:67c6cb7f477c] by Maxim Dounin <mdounin@…>
gRPC: disabled keepalive when sending control frames was blocked. If …
16:34 Changeset in nginx [7349:f6047a579ca1] by Maxim Dounin <mdounin@…>
gRPC: improved keepalive handling. The code is now able to parse …
16:17 Changeset in nginx [7348:f6e7831a17d4] by Maxim Dounin <mdounin@…>
Uwsgi: added a check on maximum uwsgi request size. Requested by …
16:17 Changeset in nginx [7347:b9b3518fa93b] by Maxim Dounin <mdounin@…>
Uwsgi: style.
08:39 Changeset in nginx-tests [1369:a37d8526e691] by Sergey Kandaurov <pluknet@…>
Tests: adjusted delay in upstream random tests.
Note: See TracTimeline for information about the timeline view.