Timeline



06/06/20:

17:23 Ticket #812 (Fetch OCSP responses on startup, and store across restarts) updated by Maxim Dounin
See also #1998.
17:23 Ticket #1998 (SSL Stapling not preloading OCSP answer) closed by Maxim Dounin
duplicate: The OCSP stapling doesn't imply nor require that stapled OCSP response …
13:24 Ticket #1998 (SSL Stapling not preloading OCSP answer) created by Zocker1999NET@…
I use certificates by Let's Encrypt with OCSP MUST STAPLE enabled. …

06/05/20:

17:59 Changeset in nginx [8429:8fc9fcf18608]quic by Sergey Kandaurov <pluknet@…>
Stream ID handling in MAX_STREAM_DATA and STREAM_DATA_BLOCKED.
17:59 Changeset in nginx [8428:953cf44708b0]quic by Sergey Kandaurov <pluknet@…>
Stream ID handling in RESET_STREAM and STOP_SENDING frames.
17:59 Changeset in nginx [8427:d437ee1ce81e]quic by Sergey Kandaurov <pluknet@…>
Reject invalid STREAM ID with STREAM_STATE_ERROR connection error.
15:59 Ticket #1997 (Error nginx: [emerg] unknown "upstream_first_byte_time" variable) updated by opiumfor@…
Thanks, Maxim, it's clear now. But this should probably be covered …
15:43 Ticket #1997 (Error nginx: [emerg] unknown "upstream_first_byte_time" variable) closed by Maxim Dounin
invalid: The [http://nginx.org/r/$upstream_first_byte_time
14:31 Ticket #1997 (Error nginx: [emerg] unknown "upstream_first_byte_time" variable) created by opiumfor@…
Hello! I've added the $upstream_first_byte_time to my log format in …
10:20 Changeset in nginx [8426:6ea2f1daedb5]quic by Sergey Kandaurov <pluknet@…>
Introduced connection error APPLICATION_ERROR from draft-28.
10:20 Changeset in nginx [8425:3e38dad3a163]quic by Sergey Kandaurov <pluknet@…>
Receipt of CONNECTION_CLOSE in 0-RTT is permitted in draft-28.
10:20 Changeset in nginx [8424:c70446e3d771]quic by Sergey Kandaurov <pluknet@…>
Treat receipt of NEW_TOKEN as connection error PROTOCOL_VIOLATION.

06/04/20:

17:54 Ticket #1882 (Nginx does not handle asterisk in OPTIONS request) closed by Maxim Dounin
wontfix: From RFC point of view, 400 Bad Request is a valid response. Since …
17:12 Ticket #1996 (Why is there no Restart=on-failure in systemd unit) created by 131@…
So, nginx failed to start as an upstream DNS provider was not …
16:23 Ticket #1250 (Connection reset with low http2_max_requests) updated by Maxim Dounin
See also #1544, which is related. Both problems should be solved once …
16:23 Ticket #1544 (http/2 downloads broken during reload) updated by Maxim Dounin
See also #1250, which is related. Both problems should be solved once …
15:20 Ticket #1811 (proxy server,slice+limit_rate,keepalived connection will be delayed to ...) closed by Maxim Dounin
invalid: Feedback timeout. The description seems to suggest that limit_rate
14:27 Ticket #1988 (nginx: [emerg] too long parameter, probably missing terminating "'" ...) closed by Maxim Dounin
invalid: Feedback timeout.

06/03/20:

16:37 Ticket #1991 (Empty response of nginx with ngx_http_perl_module) closed by Maxim Dounin
invalid: The problem is that the perl handler sends a response, and then …
16:11 Changeset in nginx [7664:699f6e55bbb4] by Maxim Dounin <mdounin@…>
SSL: added verify callback to ngx_ssl_trusted_certificate(). This …
13:37 Ticket #1168 (Nginx не корректно обрабатывает опцию max_size в директиве proxy_cache_path) updated by Maxim Dounin
For the record, tested the details. On Linux, NFS client mounts …
09:37 Ticket #586 (variable support for client_max_body_size) updated by rubo77@…
Is there a simple workaround how to set a globaly and set it to a …
01:00 Ticket #1995 (Regular expression with Unicode property test doesn't match as expected) closed by Maxim Dounin
invalid: What you see it the result of the fact that URI characters aren't …

06/02/20:

23:55 Ticket #1989 (Nginx not displaying progressive image when in http2) updated by Maxim Dounin
Regardless of the protocol used, nginx does not "serve jpg files …
22:56 Ticket #1992 (Websocket over HTTP/2 support) updated by Maxim Dounin
First of all, two basic things to understand: 1. nginx does not talk …
21:38 Ticket #1994 ($CPPFLAGS lost and handling of C++ files broken) closed by Maxim Dounin
invalid: The CPPFLAGS variable is to set flags to CPP, C preprocessor (see, for …
21:17 Ticket #1993 (--with-ld-opt fails with multiple options) closed by Maxim Dounin
invalid: > Has no one ever linked two libraries to nginx? The --with-ld-opt
20:19 Ticket #1995 (Regular expression with Unicode property test doesn't match as expected) created by funkyfuture@…
with this server configuration, whose regex pattern relies on Unicode …
14:46 Ticket #1994 ($CPPFLAGS lost and handling of C++ files broken) created by asher.strong.ai@…
The handling of cpp files and corresponding flags seems to have …
14:38 Ticket #1993 (--with-ld-opt fails with multiple options) updated by asher.strong.ai@…
Well this shouldn't be under documentation, but once it's created …
14:22 Ticket #1993 (--with-ld-opt fails with multiple options) created by asher.strong.ai@…
I have been compiling successfully with --with-ld-opt='-lc++', now I …
12:59 Changeset in nginx [8423:833898b35b24]quic by Roman Arutyunyan <arut@…>
Decoupled validation of Host and :authority for HTTP/2 and HTTP/3. …
11:30 Changeset in nginx-tests [1573:d7e83ce613c2] by Sergey Kandaurov <pluknet@…>
Tests: unix sockets removal tests on master process exit.
11:15 Ticket #1992 (Websocket over HTTP/2 support) created by ckmichael8@…
Hello, Will NGINX ever support Websocket over HTTP/2? …

06/01/20:

19:34 Ticket #753 (Nginx leaves UNIX domain sockets after SIGQUIT) closed by Ruslan Ermilov <ru@…>
fixed: In [changeset:"7cbf6389194b9170514e514ca7ee495369c9c8ac/nginx"
19:31 Changeset in nginx [7663:7cbf6389194b] by Ruslan Ermilov <ru@…>
Fixed SIGQUIT not removing listening UNIX sockets (closes #753). …
17:54 Ticket #1991 (Empty response of nginx with ngx_http_perl_module) created by https://stackoverflow.com/users/1520793/sotona
I have to run a very simplistic piece of perl code in response to HTTP …
17:19 Changeset in nginx [7662:9c038f5e0464] by Ruslan Ermilov <ru@…>
Fixed removing of listening UNIX sockets when "changing binary". When …
16:53 Changeset in nginx [8422:90b02ff6b003]quic by Sergey Kandaurov <pluknet@…>
Compatibility with BoringSSL master branch. Recently BoringSSL …
16:16 Changeset in nginx [8421:c206233d9c29]quic by Sergey Kandaurov <pluknet@…>
Fixed transport parameters on a new connection with a valid token. …
11:36 Changeset in nginx-tests [1572:f5a3b70c0f2f] by Sergey Kandaurov <pluknet@…>
Tests: fixed ssl_verify_client.t with LibreSSL. LibreSSL started …
03:05 Ticket #1480 (Automatic Let's Encrypt certificate provisioning and renewal) updated by fawaf@…
any traction on this yet? this would be great to have, especially to …

05/31/20:

17:00 Ticket #1990 (proxy_cache_min_uses not counted per variant on initial requests) updated by chrisd8088@…
I should note that these examples assume a simple caching proxy …
07:44 Ticket #1990 (proxy_cache_min_uses not counted per variant on initial requests) created by chrisd8088@…
When proxy_cache_min_uses is set to a value greater than 1, and …

05/30/20:

01:46 Ticket #1989 (Nginx not displaying progressive image when in http2) created by jobs-git@…
When I add ssl http2 in listen tag, nginx does not serve jpg files …

05/29/20:

20:10 Changeset in nginx-tests [1571:1b4ceab9cb1c] by Sergey Kandaurov <pluknet@…>
Tests: fixed ssl_certificate.t with LibreSSL client. …
12:07 Changeset in nginx [8418:8b4a0a752723]quic by Sergey Kandaurov <pluknet@…>
Made NGX_QUIC_DRAFT_VERSION tunable from configure parameters. Now it …
12:06 Changeset in nginx [8417:6633f17044eb]quic by Sergey Kandaurov <pluknet@…>
QUIC draft-28 transport parameters support. Draft-27 and draft-28 …
10:29 Changeset in nginx [8419:cb149fa03367]quic by Vladimir Homutov <vl@…>
Added propagation of the "wildcard" flag to c->listening. The flags …
10:05 Changeset in nginx [8416:78e362f0b081]quic by Sergey Kandaurov <pluknet@…>
Introduced macros for building length-value transport parameters.
09:56 Changeset in nginx [8415:125cbfa77013]quic by Sergey Kandaurov <pluknet@…>
Renamed max_packet_size to max_udp_payload_size, from draft-28. No …
09:55 Changeset in nginx [8414:49a98760afd2]quic by Sergey Kandaurov <pluknet@…>
Rejected forbidden transport parameters with TRANSPORT_PARAMETER_ERROR.
09:50 Changeset in nginx [8413:f27fdf86275d]quic by Sergey Kandaurov <pluknet@…>
Fixed return codes in ngx_quic_add_handshake_data() callback.
09:42 Changeset in nginx [8420:2bf17a829ddc]quic by Roman Arutyunyan <arut@…>
Require ":authority" or "Host" in HTTP/3 and HTTP/2 requests. Also, …

05/28/20:

22:17 Changeset in nginx_org [2550:43e87e973560] by Artem Konev <artem.konev@…>
Added info about the Unit 1.18.0 release.
17:49 Milestone unit-1.18 completed
Planned features and enhancements: * URI enconding support * "target" …
14:05 Ticket #1988 (nginx: [emerg] too long parameter, probably missing terminating "'" ...) updated by Maxim Dounin
The message suggests there is an error in your configuration file: a …
04:03 Ticket #1988 (nginx: [emerg] too long parameter, probably missing terminating "'" ...) created by aggarwal.sidh@…
Hello Team, I am getting this error when trying to reload my nginx …

05/27/20:

18:08 Ticket #1523 (large_client_header_buffers directive is ignored in server context) updated by Maxim Dounin
See also #1987 to emphasize "might instead be a source of confusion" …
18:04 Ticket #1987 (underscores_in_headers directive seems to be specific to each server block) updated by Maxim Dounin
The comment is an inaccurate attempt to explain that …
17:28 Ticket #1987 (underscores_in_headers directive seems to be specific to each server block) created by ken.russo6.com@…
The following comment: If the directive is specified on the server …
04:38 Ticket #1982 (Zero length UDP packets aren't forwarded to upstreams but a lack of ...) updated by d0x2f@…
The issue came from a production deployment of a radius service. An …

05/26/20:

19:03 Changeset in nginx [7660:d33e17499088] by Maxim Dounin <mdounin@…>
Version bump.
17:41 Changeset in nginx [8412:4ea302a47d28]quic by Sergey Kandaurov <pluknet@…>
README: update after merging 1.19.0.
17:26 Changeset in nginx [8411:7995cd199b52]quic by Sergey Kandaurov <pluknet@…>
Merged with the default branch.
16:17 Changeset in nginx [7661:8cadaf7e7231] by Gena Makhomed <gmm@…>
Contrib: vim syntax, update core and 3rd party module directives.
15:06 Milestone nginx-1.19.0 completed
Status: scheduled Trunk: mainline * OCSP validation for the …
15:05 Changeset in nginx_org [2549:c13a55aae487] by Maxim Dounin <mdounin@…>
nginx-1.19.0
15:00 Changeset in nginx [7659:d78400b2fa93] by Maxim Dounin <mdounin@…>
release-1.19.0 tag
15:00 Changeset in nginx [7658:cbe6ba650211]release-1.19.0 by Maxim Dounin <mdounin@…>
nginx-1.19.0-RELEASE
14:01 Ticket #1981 (no logging of HTTP/1.x requests to a plain text HTTP/2 listening socket) closed by Maxim Dounin
fixed: Patch committed, 7114d21bc2b1. Thanks for prodding this.
13:52 Ticket #1330 (OCSP stapling non-functional on IPv6-only host) updated by Maxim Dounin
For the record. It looks like my initial analysis in comment:1 was …
06:44 Ticket #1330 (OCSP stapling non-functional on IPv6-only host) closed by Roman Arutyunyan
fixed

05/25/20:

19:53 Ticket #1986 (Proxy SSL Verify) updated by sakshamnsit66@…
Description changed
19:52 Ticket #1986 (Proxy SSL Verify) closed by Maxim Dounin
invalid: For questions, please use [http://nginx.org/en/support.html support …
19:50 Ticket #1986 (Proxy SSL Verify) created by sakshamnsit66@…
What are the verification steps involved in the …
19:10 Changeset in nginx [7657:02f2f129abc0] by Maxim Dounin <mdounin@…>
Updated OpenSSL used for win32 builds.
17:39 Ticket #1330 (OCSP stapling non-functional on IPv6-only host) updated by Roman Arutyunyan
In 7652:7cffd81015e7/nginx: OCSP stapling: iterate over all responder …
17:37 Ticket #1534 (OCSP client certificate validation) closed by Roman Arutyunyan
fixed: Fix committed.
17:36 Ticket #1534 (OCSP client certificate validation) updated by Roman Arutyunyan
In 7653:8409f9df6219/nginx: SSL: client certificate validation with …
15:37 Changeset in nginx [8410:c7d1b500bd0a]quic by Vladimir Homutov <vl@…>
Updated README with "Contributing" section and draft details.
15:33 Changeset in nginx [7656:7114d21bc2b1] by Maxim Dounin <mdounin@…>
HTTP/2: invalid connection preface logging (ticket #1981). …

05/23/20:

14:15 Ticket #1535 (proxy_bind and resolver IP version mismatch) updated by poige@…
Replying to [comment:4
12:53 Changeset in nginx [7655:bd4d1b9db0ee] by Sergey Kandaurov <pluknet@…>
Fixed format specifiers.
11:41 Changeset in nginx [8402:af22b60a905b]quic by Sergey Kandaurov <pluknet@…>
README: documented Retry, 0-RTT, TLSv1.3 configuration.

05/22/20:

17:35 Changeset in nginx [7652:7cffd81015e7] by Roman Arutyunyan <arut@…>
OCSP stapling: iterate over all responder addresses. Previously only …
17:17 Ticket #196 (Inconsistent behavior on uri's with unencoded spaces followed by H) updated by Maxim Dounin
uname -a changed
See also #1985.
17:17 Ticket #1985 (No header response in 400 Bad Request) closed by Maxim Dounin
duplicate: As already explained in …
15:29 Ticket #1985 (No header response in 400 Bad Request) created by Seena Fallah
When sending bad requests like […] Nginx will response 400 Bad …
15:22 Changeset in nginx [8396:94c06fe6e159]quic by Sergey Kandaurov <pluknet@…>
README: pointed out Alt-Svc "ma" parameter useful with curl.
15:16 Changeset in nginx [8395:578563babbd1]quic by Vladimir Homutov <vl@…>
Fixed a typo.
15:14 Changeset in nginx [8400:d96ddef458cd]quic by Vladimir Homutov <vl@…>
Added sending of extra CONNECTION_CLOSE frames. According to …
15:08 Changeset in nginx [8399:ffd362e87eb2]quic by Vladimir Homutov <vl@…>
Added more context to CONNECTION CLOSE frames. Now it is possible to …
14:30 Changeset in nginx [7653:8409f9df6219] by Roman Arutyunyan <arut@…>
SSL: client certificate validation with OCSP (ticket #1534). OCSP …
14:25 Changeset in nginx [7654:b56f725dd4bb] by Roman Arutyunyan <arut@…>
OCSP: certificate status cache. When enabled, certificate status is …
14:06 Ticket #1984 (Nginx module installation issue) closed by Sergey Kandaurov
wontfix: nginx-0.8.54 is an old enough version, you'd need at least nginx-1.5.2.
13:41 Ticket #1984 (Nginx module installation issue) created by amit000790@…
- When I want to install the Nginx module that time accrued issue. …
11:18 Ticket #1808 (Inconsistent encoding in rewrites) updated by wknapik@…
See https://github.com/kubernetes/ingress-nginx/issues/5576 for a …
11:14 Ticket #1535 (proxy_bind and resolver IP version mismatch) updated by https://stackoverflow.com/users/9252236/mayank-j
Hi! Been there done that ! proxy_bind does randomly behave weird …
09:47 Ticket #1808 (Inconsistent encoding in rewrites) updated by wknapik@…
You can do this for redirects: […] and this for proxying […] …

05/21/20:

12:48 Changeset in nginx [8401:d3aa54242c37]quic by Vladimir Homutov <vl@…>
Style. Rephrased error message and removed trailing space. Long …
12:41 Changeset in nginx [8398:8bec0ac23cf9]quic by Vladimir Homutov <vl@…>
Fixed retransmission of frames after closing connection. Frames in …
12:38 Changeset in nginx [8397:1245e274b9ba]quic by Vladimir Homutov <vl@…>
Avoided excessive definitions for connection state. There is no need …
12:11 Ticket #1982 (Zero length UDP packets aren't forwarded to upstreams but a lack of ...) updated by vl
Status changed
Yes, indeed such packets aren't forwarded currently. Did you hit the …
11:53 Ticket #1808 (Inconsistent encoding in rewrites) updated by zingaburga@…
Bug still exists in 1.18.0. It seems that it's only the first …

05/20/20:

14:06 Ticket #724 (Init script does not check config on reload for Ubuntu mainline packages) updated by Maxim Dounin
See also #1983.
14:06 Ticket #1983 (nginx.service unit-file in rpm (CentOS 7,8)) closed by Maxim Dounin
duplicate: The "nginx -s reload" does not have an exit code either, it's just a …
13:32 Ticket #1983 (nginx.service unit-file in rpm (CentOS 7,8)) created by aleksandr.yakimov@…
Hi In an unit-file nginx.server (from RPM packages for CentOS 7,8) I …
12:36 Changeset in nginx [8394:df18ae7161b8]quic by Sergey Kandaurov <pluknet@…>
Assorted fixes. Found by Clang Static Analyzer.
12:04 Changeset in nginx-tests [1570:0077b80ef745] by Sergey Kandaurov <pluknet@…>
Tests: ssl_ocsp tests.
07:00 Ticket #1982 (Zero length UDP packets aren't forwarded to upstreams but a lack of ...) created by d0x2f@…
Using wireshark I can see that zero length packets aren't forwarded to …

05/19/20:

14:05 Changeset in nginx_org [2547:baf8cbfa3df1] by Yaroslav Zhuravlev <yar@…>
njs-0.4.1.
14:05 Changeset in nginx_org [2546:6093e9f3615e] by Yaroslav Zhuravlev <yar@…>
Documented rawHeadersIn and rawHeadersOut in njs.
14:05 Changeset in nginx_org [2545:dca5a7053a6c] by Yaroslav Zhuravlev <yar@…>
Sorted alphabetically njs http methods.
14:05 Changeset in nginx_org [2544:33347df1da9c] by Yaroslav Zhuravlev <yar@…>
Relocated sentence in r.headers.Out, added dot, corrected quotes.
14:05 Changeset in nginx_org [2543:f39c4724c0f8] by Yaroslav Zhuravlev <yar@…>
Described multi-value headers in r.headersIn.
13:36 Milestone njs-0.4.1 completed
Planned features and enhancements: * headersIn and raw headers API * …
13:20 Changeset in nginx [8408:5b367070cc9c]quic by Roman Arutyunyan <arut@…>
Fixed client buffer reallocation for HTTP/3. Preserving pointers …
12:47 Changeset in nginx [8407:d6feece1288a]quic by Roman Arutyunyan <arut@…>
Fixed $request_length for HTTP/3. New field r->parse_start is …
12:41 Changeset in nginx [8403:c101438c69a4]quic by Roman Arutyunyan <arut@…>
HTTP/3: prevent array access by negative index for unknown streams. …
12:34 Changeset in nginx [8406:66feab03d9b7]quic by Roman Arutyunyan <arut@…>
HTTP/3: restricted symbols in header names. As per HTTP/3 draft 27, a …
12:29 Changeset in nginx [8405:d2759e4cc437]quic by Roman Arutyunyan <arut@…>
HTTP/3: split header parser in two functions. The first one parses …
11:54 Changeset in nginx_org [2542:bde7cd9a1173] by Yaroslav Zhuravlev <yar@…>
Added examples of state path to keyval.
11:43 Changeset in nginx_org [2548:ffc4083f5c7e] by Yaroslav Zhuravlev <yar@…>
Documented ssl_ocsp, ssl_ocsp_cache, ssl_ocsp_responder directives.

05/18/20:

19:10 Ticket #808 (Defining http2 without ssl leads to HTTP/1.1 client failure) updated by Maxim Dounin
See also #1981.
19:09 Ticket #1981 (no logging of HTTP/1.x requests to a plain text HTTP/2 listening socket) updated by Maxim Dounin
Status, Summary changed
You were given an explanation (see ticket:1979#comment:1), and …
17:49 Ticket #1981 (no logging of HTTP/1.x requests to a plain text HTTP/2 listening socket) created by Hans-Cees
Hi, two days ago you closed my ticket without offering me further …
14:11 Ticket #1980 (custom 401 error_page with auth_basic never shows the custom 401 page) updated by Maxim Dounin
Replying to mmattel@…: > One thing pop´s up. When …
11:41 Ticket #1980 (custom 401 error_page with auth_basic never shows the custom 401 page) updated by mmattel@…
Your example works. I do not know what went wrong on my side that this …
10:54 Changeset in nginx [8393:e169cce912c7]quic by Vladimir Homutov <vl@…>
Avoid retransmitting of packets with discarded keys. Sections 4.10.1 …
10:54 Changeset in nginx [8392:5ffb21c5c93d]quic by Vladimir Homutov <vl@…>
Fixed frame retransmissions. It was possible that retransmit timer …
01:03 Ticket #1869 (Wrong client IP in errors logged early in request processing when ...) updated by Maxim Dounin
See also #1978, which is somewhat similar.
01:02 Ticket #1978 (Logging real client IP on invalid request) closed by Maxim Dounin
wontfix: As long as there is a syntax error in the request line, nginx does not …

05/17/20:

16:17 Ticket #1980 (custom 401 error_page with auth_basic never shows the custom 401 page) closed by Maxim Dounin
worksforme: Works fine here. Example configuration: […] Test request: […] …
16:02 Ticket #808 (Defining http2 without ssl leads to HTTP/1.1 client failure) updated by Maxim Dounin
See also #1979.
16:02 Ticket #1979 (listen 80 http2; combined with proxy_pass http:// brakes website) closed by Maxim Dounin
duplicate: Using listen ... http2; without ssl configures listening socket to …
13:28 Ticket #1980 (custom 401 error_page with auth_basic never shows the custom 401 page) updated by mmattel@…
Not a documentation ticket -> core
13:16 Ticket #1980 (custom 401 error_page with auth_basic never shows the custom 401 page) created by mmattel@…
When using auth_basic (works great) and defining a custom 401 error …
11:24 Changeset in nginx [7651:6ca8e15caf1f] by Roman Arutyunyan <arut@…>
OCSP stapling: keep extra chain in the staple object.

05/16/20:

20:42 Ticket #1979 (listen 80 http2; combined with proxy_pass http:// brakes website) updated by Hans-Cees
thank you for your wonderful server and hope I am not wasting your time.
20:40 guth-nginx.txt attached to Ticket #1979 by Hans-Cees
config
20:40 Ticket #1979 (listen 80 http2; combined with proxy_pass http:// brakes website) created by Hans-Cees
Hi, I do not know if this is how nginx should behave, but it …
16:36 Ticket #1535 (proxy_bind and resolver IP version mismatch) updated by poige@…
Hi! Adding support for several IPs would solve the whole issue. When …
06:51 Ticket #1978 (Logging real client IP on invalid request) created by miika.kankare.ocllo.fi@…
We run nginx behind a proxy, which sets the X-Forwarded-For header …

05/15/20:

15:22 Changeset in nginx_org [2541:0e6bbd8138c4] by Yaroslav Zhuravlev <yar@…>
Added article about TypeScript in njs.

05/14/20:

18:04 Ticket #1971 (Invalid 200 (OK) response code to range request) updated by Maxim Dounin
Any valid client is expected to handle 200 anyway, as servers are not …
17:39 Ticket #1971 (Invalid 200 (OK) response code to range request) updated by topoden@…
Frankly, this is a weird approach to use "...may ignore..." clause …
15:34 Ticket #1977 (Implement TLS 1.3 random record padding to mitigate BREACH) updated by Maxim Dounin
Priority changed
I believe it was demonstrated more than once that padding cannot …
15:10 Changeset in nginx [8391:2d5db7faa788]quic by Vladimir Homutov <vl@…>
Removed outdated debug.
14:22 Changeset in nginx [8390:70dbd7d0e466]quic by Vladimir Homutov <vl@…>
Fixed a typo.
13:33 Changeset in nginx [8389:2b580ac17a47]quic by Sergey Kandaurov <pluknet@…>
README: Retry support, protocol error messages implemented.
13:02 Changeset in nginx [8409:26cb2f3259b1]quic by Roman Arutyunyan <arut@…>
HTTP/3: reallocate strings inserted into the dynamic table. They …
12:54 Changeset in nginx [8385:fb7422074258]quic by Vladimir Homutov <vl@…>
Added generation of CC frames with error on connection termination. …
12:47 Changeset in nginx [8384:52d0c4832570]quic by Sergey Kandaurov <pluknet@…>
Address validation using NEW_TOKEN frame.
12:47 Changeset in nginx [8383:7ea34e13937f]quic by Sergey Kandaurov <pluknet@…>
Address validation using Retry packets. The behaviour is toggled with …
11:49 Changeset in nginx [8404:e5d4f057a6cb]quic by Roman Arutyunyan <arut@…>
HTTP/3: move body parser call out of ngx_http_parse_chunked(). The …
11:49 Changeset in nginx [8387:eebdda507ec3]quic by Vladimir Homutov <vl@…>
Added tests for connection id lengths in initial packet.
00:58 Ticket #1977 (Implement TLS 1.3 random record padding to mitigate BREACH) updated by Craig Andrews
Description changed
00:56 Ticket #1977 (Implement TLS 1.3 random record padding to mitigate BREACH) created by Craig Andrews
The TLS specification (RFC 8446) section 5.4 defines optional Record …

05/13/20:

22:06 Changeset in nginx [8386:81f85c479d7e]quic by Vladimir Homutov <vl@…>
Discard packets without fixed bit or reserved bits set. Section 17.2 …
21:17 Ticket #698 (Add an option to proxy_cache_path that allows to set group permissions) closed by Maxim Dounin
wontfix: Permissions are set on the cache directory and files in a such way …
15:34 Changeset in nginx [8382:b7704303a7e5]quic by Sergey Kandaurov <pluknet@…>
Server CID change refactored.
10:01 Ticket #1888 (Nginx cache has multiple formats, and many of them are invalid during ...) updated by yunoasgit@…
It is hoped that the cache file can be deleted through del, and key …

05/12/20:

21:06 Changeset in nginx_org [2540:b686736680e3] by Yaroslav Zhuravlev <yar@…>
Documented escaping rules in log_format.
15:45 Changeset in nginx [8388:a9cc1627cf1c]quic by Vladimir Homutov <vl@…>
Fixed time comparison.
15:18 Changeset in nginx [8381:6e100d8c138a]quic by Sergey Kandaurov <pluknet@…>
Preserve original DCID and unbreak parsing 0-RTT packets. As per QUIC …
14:54 Ticket #972 (Clarify $arg_name and $args in embedded variables documentation) closed by Maxim Dounin
wontfix: The $arg, also known as $query_string, represents query string as …

05/10/20:

17:32 Ticket #1970 (ssl_ecdh_curve avoid 0-RTT) closed by Maxim Dounin
duplicate: Duplicate of #1969.
17:32 Ticket #1969 (ssl_ecdh_curve avoid 0-RTT) closed by Maxim Dounin
invalid: This does not look like a bug in nginx, but rather a question about …
17:11 Ticket #1975 (Certificates in ssl_trusted_certificate doesn't have to be CA, docs ...) closed by Maxim Dounin
wontfix: While strictly speaking you are right, and this can be used as a …
16:46 Ticket #1976 (Nginx DNS cache issue. ngx_http_core_module valid config is not working.) closed by Maxim Dounin
invalid: Domain names used in nginx configuration are normally resolved during …
16:25 Ticket #1974 (Custom variable not written to access_log when nginx.status is 400) closed by Maxim Dounin
invalid: When a 400 error occurs before request processing starts - for …
16:17 Ticket #1384 (request body may be corrupted when content-length is not set in ...) updated by Maxim Dounin
See also #1973.
16:17 Ticket #1973 (Intermittent form body loss with concurrent HTTP2 POST requests) closed by Maxim Dounin
duplicate: The 1.10.3 is the version obsolete more than 3 years ago. Further, in …
15:48 Ticket #1972 (Use of IRIs in redirect responses causes nginx to violate HTTP RFCs) closed by Maxim Dounin
wontfix: It certainly shouldn't auto-punycode. The return directive return …

05/09/20:

14:41 Changeset in nginx [8380:efe1f104caf7]quic by Sergey Kandaurov <pluknet@…>
Removed redundant long packet type checks.
14:39 Changeset in nginx [8379:aecd8ec29c8e]quic by Sergey Kandaurov <pluknet@…>
Removed redundant SSL_do_handshake call before any handshake data.
11:19 Ticket #1976 (Nginx DNS cache issue. ngx_http_core_module valid config is not working.) created by aswin020@…
Setup: Ec2 instance with Nginx 1.12.2 behind an AWS Load balancer. …
07:38 Ticket #1975 (Certificates in ssl_trusted_certificate doesn't have to be CA, docs ...) created by Forkest@…
http://nginx.org/en/docs/http/ngx_http_ssl_module.html

05/08/20:

16:45 Changeset in nginx-tests [1569:cd6abbe0f989] by Sergey Kandaurov <pluknet@…>
Tests: added generic tests for $arg_ variables.
13:46 Ticket #1974 (Custom variable not written to access_log when nginx.status is 400) created by bxn-ts@…
TL;DR: A custom variable is not written to my access log file when the …
10:08 Changeset in nginx [8378:81a4f98a2556]quic by Vladimir Homutov <vl@…>
Cleaned up reordering code. The ordered frame handler is always …
02:24 Ticket #1971 (Invalid 200 (OK) response code to range request) closed by Maxim Dounin
invalid: As per [https://tools.ietf.org/html/rfc7233#section-3.1 RFC 7233, …

05/07/20:

17:51 Ticket #1973 (Intermittent form body loss with concurrent HTTP2 POST requests) created by mitaylor.mozilla.com@…
This was originally reported here: …
17:14 Ticket #1972 (Use of IRIs in redirect responses causes nginx to violate HTTP RFCs) created by Avamander
For example when you do this in a server block: ` return 301 …
09:34 Changeset in nginx [8377:2a94aaa70b33]quic by Vladimir Homutov <vl@…>
Cleaned up firefox workaround. The idea is to skip any zeroes that …
08:22 Ticket #1971 (Invalid 200 (OK) response code to range request) created by topoden@…
Observed behaviour: nginx responds with 200 (OK) to 0-10 ranged …
00:08 Ticket #972 (Clarify $arg_name and $args in embedded variables documentation) reopened by Eccenux@…
I respectfully disagree. It's not only the question of how HTTP …
Note: See TracTimeline for information about the timeline view.