Timeline



10/28/19:

21:34 Ticket #1878 (Set ciphersuite list order for TLS 1.3) updated by IlyaIndigo@…
https://www.openssl.org/docs/man1.1.1/man5/config.html#EXAMPLES
13:08 Ticket #1878 (Set ciphersuite list order for TLS 1.3) updated by Maxim Dounin
You've put additional sections (currently commented) before your …
12:53 Ticket #1873 (possible memory leak in stream modules) closed by Maxim Dounin
invalid: So, clearly there is no memory leak here: in 1.png VIRT is 3.83G, in …

10/27/19:

17:02 Ticket #1878 (Set ciphersuite list order for TLS 1.3) updated by IlyaIndigo@…
> An obvious solution here is to fix errors in the openssl.cnf file. …

10/26/19:

05:51 Ticket #1873 (possible memory leak in stream modules) updated by honghaier250@…
To check if the system can reuse the memory occupied by nginx, I …

10/25/19:

15:32 Ticket #1873 (possible memory leak in stream modules) updated by honghaier250@…
The data is recorded as follows First Time …
15:32 3.png attached to Ticket #1873 by honghaier250@…
15:32 2.png attached to Ticket #1873 by honghaier250@…
15:32 1.png attached to Ticket #1873 by honghaier250@…
14:24 Ticket #1873 (possible memory leak in stream modules) updated by honghaier250@…
14:18 Ticket #1873 (possible memory leak in stream modules) updated by honghaier250@…
Yes, and I try it again with …

10/24/19:

18:47 Changeset in nginx_org [2450:a26a42699207] by Yaroslav Zhuravlev <yar@…>
Added note about max number of keepalive requests.
15:04 Changeset in nginx_org [2449:384211f17f5a] by Yaroslav Zhuravlev <yar@…>
Fixed default value for limit_req_dry_run.
14:08 Changeset in nginx_org [2448:ef449f80bbe4] by Yaroslav Zhuravlev <yar@…>
Updated with Netcraft October 2019 Web Server Survey stats.
13:58 Ticket #1873 (possible memory leak in stream modules) updated by Maxim Dounin
Could you please make sure you are seeing the same behaviour with …
12:42 Ticket #1873 (possible memory leak in stream modules) updated by honghaier250@…
Yes, I do run wrk again with 60k connections, heap grows again to 2+ …
12:00 Changeset in nginx-tests [1527:7676944968c1] by Sergey Kandaurov <pluknet@…>
Tests: proxy protocol server variables.
12:00 Changeset in nginx-tests [1526:b3bbb59dc324] by Sergey Kandaurov <pluknet@…>
Tests: merged $proxy_protocol_port tests with the rest for brevity.
11:55 Ticket #1206 (Proxy protocol server information is not surfaced) closed by Roman Arutyunyan
fixed
11:00 Ticket #1206 (Proxy protocol server information is not surfaced) updated by Roman Arutyunyan <arut@…>
In [changeset:"89adf49fe76ada86d84e2af8f5cee9ca8c3dca19/nginx"
10:47 Changeset in nginx [7589:486d2e0b1b6f] by Roman Arutyunyan <arut@…>
Version bump.

10/22/19:

18:34 Ticket #1529 (Could not configure TLS1.3 ciphers in OpenSSL 1.1.1 pre4) updated by Maxim Dounin
See also #1878.
18:34 Ticket #1878 (Set ciphersuite list order for TLS 1.3) closed by Maxim Dounin
duplicate: The error message ... section=system_default, cmd=HOME, arg=. ...
18:05 Changeset in nginx-tests [1525:ca0858ef7d3d] by Dmitry Volyntsev <xeioex@…>
Tests: added js keys tests.
16:18 Changeset in nginx-tests [1524:9bc1ca067449] by Sergey Kandaurov <pluknet@…>
Tests: js_return.t TODO remnants for old njs versions removed.
15:42 Changeset in nginx_org [2447:6d1fb7062460] by Sergey Kandaurov <pluknet@…>
Updated the list of tested Linux kernels.
15:29 Changeset in nginx_org [2446:32b945768dea] by Yaroslav Zhuravlev <yar@…>
njs-0.3.6
15:24 Changeset in nginx_org [2445:192d136633b5] by Maxim Dounin <mdounin@…>
nginx-1.17.5
15:24 Milestone njs-0.3.6 completed
Planned features: * Bug fixes * New Number's methods
15:23 Milestone nginx-1.17.5 completed
Status: scheduled Trunk: mainline * Bug fixes and …
15:16 Changeset in nginx [7588:f292a38a93f5] by Maxim Dounin <mdounin@…>
release-1.17.5 tag
15:16 Changeset in nginx [7587:9af0dddbddb2]release-1.17.5 by Maxim Dounin <mdounin@…>
nginx-1.17.5-RELEASE
07:30 Ticket #1879 (RHEL / CentOS 8 repository) created by remicollet@…
I notice nginx repository for RHEL / CentOS 8 is available. On EL-8 …

10/21/19:

22:17 Ticket #1878 (Set ciphersuite list order for TLS 1.3) created by IlyaIndigo@…
In nginx there is no way to reorder ciphers for TLS 1.3. The option to …
17:22 Changeset in nginx [7591:89adf49fe76a] by Roman Arutyunyan <arut@…>
Parsing server PROXY protocol address and port (ticket #1206). New …
16:45 Ticket #1865 (error: cast between incompatible function types from 'FARPROC' on MinGW) closed by Maxim Dounin
fixed: Fix committed.
16:45 Ticket #1868 (wildcard include failing with FormatMessage() error:(15100)) closed by Maxim Dounin
invalid: The patch to improve error messages was committed, and will be …
16:15 Ticket #1865 (error: cast between incompatible function types from 'FARPROC' on MinGW) updated by Maxim Dounin <mdounin@…>
In [changeset:"4f6e315eef157e8e8982b4593aeb455db51604eb/nginx"
16:15 Ticket #1868 (wildcard include failing with FormatMessage() error:(15100)) updated by Maxim Dounin <mdounin@…>
In [changeset:"746567d633ac43998dff67bd33368c66bdfdb2b1/nginx"
16:07 Changeset in nginx [7586:4f6e315eef15] by Maxim Dounin <mdounin@…>
Win32: silenced -Wcast-function-type GCC warning (ticket #1865). With …
16:06 Changeset in nginx [7585:746567d633ac] by Maxim Dounin <mdounin@…>
Win32: improved fallback on FormatMessage() errors. FormatMessage() …
15:09 Ticket #1877 (Проблема с "log_format") closed by Maxim Dounin
invalid: Судя по ошибке - nginx не знает формат main. Это может быть либо …
15:06 Changeset in nginx [7590:06b01840bd42] by Roman Arutyunyan <arut@…>
Core: moved PROXY protocol fields out of ngx_connection_t. Now a new …
08:39 Ticket #798 (Implement http_brotli_static module) updated by ai@…
Right now all major browsers support Brotli including Safari. …

10/18/19:

14:17 Changeset in nginx-tests [1523:5a55da6aed13] by Sergey Kandaurov <pluknet@…>
Tests: extended proxy_ssl.t for more ngx_ssl_recv_chain() cases.
13:33 Changeset in nginx [9322:55c5701837a2] by Vladimir Homutov <vl@…>
Upstream: per-upstream resolver. The "resolver" and …
10:33 Changeset in nginx-tests [1522:d8684b300d22] by Sergey Kandaurov <pluknet@…>
Tests: ignore_invalid_headers, underscores_in_headers directives.
10:14 Ticket #1877 (Проблема с "log_format") updated by nickfoxxx1@…
Мой конфигурационный файл […]
10:05 Ticket #1877 (Проблема с "log_format") created by nickfoxxx1@…
Добрый день. Обнаружена ошибка связанная с "log_format" При …

10/17/19:

13:56 Ticket #1431 (Performance issue with wss and mod_proxy) closed by Maxim Dounin
fixed: Fix committed.
13:10 Ticket #1431 (Performance issue with wss and mod_proxy) updated by Maxim Dounin <mdounin@…>
In [changeset:"9d2ad2fb4423ab350cac3751df6bfa0ff96c6c0a/nginx"
13:10 Ticket #1431 (Performance issue with wss and mod_proxy) updated by Maxim Dounin <mdounin@…>
In [changeset:"efd71d49bde025a9d7df4a5b48bf7ed9bd919c27/nginx"
13:02 Changeset in nginx [7584:9d2ad2fb4423] by Maxim Dounin <mdounin@…>
SSL: available bytes handling (ticket #1431). Added code to track …
13:02 Changeset in nginx [7583:efd71d49bde0] by Maxim Dounin <mdounin@…>
Events: available bytes calculation via ioctl(FIONREAD). This makes …
13:02 Changeset in nginx [7582:70749256af79] by Maxim Dounin <mdounin@…>
SSL: improved ngx_ssl_recv_chain() to stop if c->read->ready is 0. As …
13:02 Changeset in nginx [7581:afceb32f3a8a] by Maxim Dounin <mdounin@…>
Event pipe: disabled c->read->available checking for SSL. In SSL …

10/16/19:

16:31 Ticket #1876 (Some access log variables leak memory on HTTP/2 client connections) closed by Maxim Dounin
invalid: All connections in nginx are expected to be closed periodically, and …
16:02 Changeset in nginx_org [2444:d58fc33a0830] by Yaroslav Zhuravlev <yar@…>
Improved description of stream keyval types.
02:43 nginx_log_memleak_example.tar.gz attached to Ticket #1876 by Dylan Plecki
02:42 Ticket #1876 (Some access log variables leak memory on HTTP/2 client connections) created by Dylan Plecki
When used in the HTTP log_format directive, variables such as …

10/15/19:

23:54 Ticket #1865 (error: cast between incompatible function types from 'FARPROC' on MinGW) updated by Maxim Dounin
Thanks for the report. It looks like gcc fails to handle normal …
16:36 Changeset in nginx-tests [1521:b6699ffd9ddd] by Dmitry Volyntsev <xeioex@…>
Tests: added Cookie and X-Forwarded-For r.headersIn tests.
16:36 Changeset in nginx-tests [1520:9521130f6f22] by Dmitry Volyntsev <xeioex@…>
Tests: js TODO adjusted.
14:46 Changeset in nginx_org [2443:9d4b00f3ad2b] by Yaroslav Zhuravlev <yar@…>
Improved description of keyval types.
14:22 Ticket #1874 (Nginux 1.16/1.17 Perl Module Fails Ubuntu 18) closed by Maxim Dounin
duplicate: The ticket in question (#1463) has a patch in it. Unfortunately, the …
14:21 Ticket #1463 (Build in --builddir throws error on nginx.h) updated by Maxim Dounin
See also #1874.
14:13 Ticket #923 (Allow proxy_http_version 2.0) updated by Maxim Dounin
See also #1875.
14:13 Ticket #1875 (allow configuring upstreams as HTTP2 to prevent high latency for SSL ...) closed by Maxim Dounin
duplicate: To reduce latency of SSL handshakes, there is …
11:46 Changeset in nginx [7580:8f55cb5c7e79] by Ruslan Ermilov <ru@…>
Fixed header parsing with ignore_invalid_headers switched off. The …
09:36 Ticket #1875 (allow configuring upstreams as HTTP2 to prevent high latency for SSL ...) created by artheus@…
TL;DR; While configuring upstreams, one should be able to configure …
06:43 Ticket #1874 (Nginux 1.16/1.17 Perl Module Fails Ubuntu 18) updated by vanquish.security@…
Fixed using the old ticket https://trac.nginx.org/nginx/ticket/1463
05:46 Ticket #1874 (Nginux 1.16/1.17 Perl Module Fails Ubuntu 18) created by vanquish.security@…
Old ticket never fixed? https://trac.nginx.org/nginx/ticket/1463

10/14/19:

13:50 Ticket #1873 (possible memory leak in stream modules) updated by Maxim Dounin
So, you are seeing heap being large after processing a large number of …
11:29 Ticket #1872 (The official nginx-module-njs-dbg deb package lacks debuginfo for the ...) closed by Andrei Belov
fixed: Thanks for reporting. Fixed by …
10:53 Ticket #1872 (The official nginx-module-njs-dbg deb package lacks debuginfo for the ...) updated by Andrei Belov
Status changed
10:37 Ticket #1872 (The official nginx-module-njs-dbg deb package lacks debuginfo for the ...) updated by Andrei Belov
Status, Owner changed
00:47 Ticket #1870 (Large file download is not completed with sendfile option.) updated by jinyongchoi@…
Thanks for the explanation. I'm glad to know about a reason and best way.

10/13/19:

17:00 Ticket #1873 (possible memory leak in stream modules) updated by honghaier250@…
Sorry, correct spelling mistakes == Initiate 60,000 concurrent …
16:57 Ticket #1873 (possible memory leak in stream modules) created by honghaier250@…
Hello everyone, I found that the nginx( version 1.13.2 ~ 1.17.x) …
09:44 Ticket #1871 (Nginx will not accept the latter of two client certs if the subject is ...) updated by johannes.gehrs.moia.io@…
thanks for the explanation.

10/12/19:

07:02 Ticket #1872 (The official nginx-module-njs-dbg deb package lacks debuginfo for the ...) created by agentzh@…
I've been playing with the official open source ubuntu repositories of …

10/11/19:

15:41 Ticket #1870 (Large file download is not completed with sendfile option.) updated by Maxim Dounin
From the numbers — connection closed at 2G point — it looks like the …
15:07 Ticket #1871 (Nginx will not accept the latter of two client certs if the subject is ...) closed by Maxim Dounin
invalid: You are using two self-signed certificates with identical subjects, …
14:01 Ticket #1871 (Nginx will not accept the latter of two client certs if the subject is ...) created by johannes.gehrs.moia.io@…
Nginx will not accept the latter of two client certs if the subject is …
08:13 Ticket #1870 (Large file download is not completed with sendfile option.) created by jinyongchoi@…
Hi there. I found some issue in downloading test. the problem is only …
06:08 Ticket #1867 (Cached TLS 1.2+ECDSA OCSP must staple validation is not used to serve ...) updated by Дилян Палаузов
This way of operation (OCSP must staple + more than one worker …

10/10/19:

15:15 Changeset in nginx-tests [1519:787d904bdfe0] by Sergey Kandaurov <pluknet@…>
Tests: fixed reading chunked body in HTTP/2 unbuffered body tests. …
14:17 Ticket #1869 (Wrong client IP in errors logged early in request processing when ...) closed by Maxim Dounin
wontfix: Further, the realip module changes client address based on a …
13:54 Ticket #1869 (Wrong client IP in errors logged early in request processing when ...) updated by Roman Arutyunyan
The realip module kicks in at the POST_READ phase. This is the first …
12:55 Ticket #1869 (Wrong client IP in errors logged early in request processing when ...) created by Dustin Breuer
Setup Client -[HTTP(S)]-> HAProxy -[PROXY]-> nginx -[HTTPS]-> …
11:49 Changeset in nginx-tests [1518:fca71a8ebf6d] by Sergey Kandaurov <pluknet@…>
Tests: adjusted worker_shutdown_timeout_h2.t shutdown delay more. A …

10/09/19:

20:44 Ticket #1868 (wildcard include failing with FormatMessage() error:(15100)) updated by Maxim Dounin
On Windows, FindFirstFile() interface only support wildcards in a …
17:25 Ticket #1868 (wildcard include failing with FormatMessage() error:(15100)) created by fliespl@…
Hello, I have tried adding wildcards on windows with include like I do …
16:03 Changeset in nginx-tests [1517:ec8d3f623358] by Sergey Kandaurov <pluknet@…>
Tests: adjusted worker_shutdown_timeout_h2.t delay for NetBSD.
13:46 Changeset in nginx-tests [1516:420aaeb40c09] by Sergey Kandaurov <pluknet@…>
Tests: merge_slashes tests.
12:53 Ticket #1867 (Cached TLS 1.2+ECDSA OCSP must staple validation is not used to serve ...) closed by Maxim Dounin
invalid: Ok, thanks for confirming. So you are connecting to a different worker …
08:25 Changeset in nginx-tests [1515:eb33558f731d] by Sergey Kandaurov <pluknet@…>
Tests: URI normalization tests.

10/08/19:

18:56 Changeset in nginx [7579:6208c5418c88] by Maxim Dounin <mdounin@…>
Fixed URI normalization with merge_slashes switched off. Previously, …
18:56 Changeset in nginx [7578:79bcbe7cd3f2] by Ruslan Ermilov <ru@…>
The "/." and "/.." at the end of URI should be normalized.
18:56 Changeset in nginx [7577:5a3426683251] by Ruslan Ermilov <ru@…>
Improved detection of broken percent encoding in URI.
17:39 Ticket #1867 (Cached TLS 1.2+ECDSA OCSP must staple validation is not used to serve ...) updated by Дилян Палаузов
> Then I obtain from Nginx for TLS1.3 the EC certificate and ask for …
13:32 Ticket #1867 (Cached TLS 1.2+ECDSA OCSP must staple validation is not used to serve ...) updated by Maxim Dounin
How many worker processes do you have? Do you see the same behaviour …
12:12 Ticket #1867 (Cached TLS 1.2+ECDSA OCSP must staple validation is not used to serve ...) created by Дилян Палаузов
I have Nginx 1.16.1 serving both TLS 1.3 and TLS 1.2 and offering RSA …
11:34 Ticket #1520 (HTTP/2 connection dropped when URL has large numbers of same parameter) updated by Maxim Dounin
See also #1866.
11:34 Ticket #1866 (nginx does not log error if packet exceeds http2_max_field_size) closed by Maxim Dounin
duplicate: The error, much like most of the client-related errors, is logged to …
08:53 Ticket #1866 (nginx does not log error if packet exceeds http2_max_field_size) created by sjuhasz.chemaxon.com@…
We are using nginx as reverse proxy in front of a sonarqube …

10/07/19:

18:02 Ticket #853 (Поведение cache_use_stale updating если новые ответы нельзя кешировать) updated by Maxim Dounin
See also #1862.
18:02 Ticket #1862 (Cache-Control:no-store should remove entry from cache (with ...) closed by Maxim Dounin
duplicate: Removing a cache entry if an update request returns a non-cacheable …
16:05 Changeset in nginx_org [2442:437350febcb7] by Maxim Konovalov <maxim@…>
Favicon updated to a new design.
13:19 Changeset in nginx-tests [1514:c6f27bcdd9d9] by Sergey Kandaurov <pluknet@…>
Tests: revised ssl.t.
13:16 Ticket #1863 ("ssl_stapling" ignored, host not found in OCSP responder ...) closed by Maxim Dounin
invalid: The error message suggests there is a problem with resolution of the …
12:43 Ticket #1864 (Tune documentation for ssl_session_tickets (supported RFC number)) closed by Sergey Kandaurov
wontfix
12:42 Ticket #1864 (Tune documentation for ssl_session_tickets (supported RFC number)) updated by Sergey Kandaurov
The directive was originally written for session tickets in TLSv1.2 …
11:41 Changeset in nginx_org [2441:080581ce888d] by Yaroslav Zhuravlev <yar@…>
Added note to r.headersIn in njs Reference.
09:10 1_Build.txt.gz attached to Ticket #1865 by kenhys@…
CI build log (compressed)
09:08 Ticket #1865 (error: cast between incompatible function types from 'FARPROC' on MinGW) created by kenhys@…
Problem: https://groonga.org bundles nginx to provide http server, …

10/06/19:

11:41 Ticket #1864 (Tune documentation for ssl_session_tickets (supported RFC number)) created by Дилян Палаузов
http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_tick

10/05/19:

14:06 Ticket #1057 (Google QUIC - statement) updated by suraj.tambe@…
@rfxn Please use link for tracking. …
13:40 Ticket #1863 ("ssl_stapling" ignored, host not found in OCSP responder ...) updated by actionmystique@…
Replacing in the domain certificate bundle the contents of …
13:02 Ticket #1863 ("ssl_stapling" ignored, host not found in OCSP responder ...) created by actionmystique@…
Nginx relevant config: […] domain.com.chained.crt is a bundle …

10/04/19:

09:58 Ticket #1862 (Cache-Control:no-store should remove entry from cache (with ...) created by Ondřej Nový
We are using proxy_cache_background_update+proxy_cache_use_stale. We …

10/03/19:

16:39 Changeset in nginx_org [2440:7a353370ffcd] by Artem Konev <artem.konev@…>
Added Unit 1.12.0 release news.
16:31 Milestone unit-1.12 completed
Planned features: * Bug fixes
10:53 Changeset in nginx_org [2439:12716b241230] by Yaroslav Zhuravlev <yar@…>
Updated versions and datastamps in the API reference.
10:53 Changeset in nginx_org [2438:86b0dd6e7208] by Yaroslav Zhuravlev <yar@…>
Updated API version in njs examples.
09:40 Ticket #1861 (Feature Request: Support `error_log off`) created by albertvaka@…
Since everybody is using it wrong [1] I thought it might be better to …

09/30/19:

13:43 Changeset in nginx [7575:d34a81b49214] by Vladimir Homutov <vl@…>
Version bump.
13:39 Changeset in nginx [7576:7fdcf308e0f0] by Vladimir Homutov <vl@…>
Core: removed dead code in ngx_rbtree_delete(). The result of …
12:30 Ticket #1859 (wildcard support in map used for stream?) closed by Maxim Dounin
invalid: For wildcards to work, you have to use special parameter hostnames
Note: See TracTimeline for information about the timeline view.