Timeline



08/28/21:

07:23 Ticket #2234 (NGINX 1.19.2 TCP RST/ACK TLSv1.0 Client Hello of Tor Relay ORPort ...) reopened by garycnew@…
07:20 Ticket #2234 (NGINX 1.19.2 TCP RST/ACK TLSv1.0 Client Hello of Tor Relay ORPort ...) updated by garycnew@…
Maxim, I believe this ticket was closed prematurely. The resets you …

08/27/21:

22:08 Ticket #2238 (Difference in ssl_verify_depth and ssl_verify_client optional_no_ca ...) updated by Maxim Dounin
In OpenSSL 1.1.0, verification of certificates was changed. In …
18:55 Ticket #2239 (Unterminated string result in ngx_sock_ntop()) closed by Maxim Dounin
invalid: > ... will leave the resulting text unterminated. In nginx, strings …
16:12 Ticket #2239 (Unterminated string result in ngx_sock_ntop()) created by GregIthaca@…
I've been studying/running your code for security research, and I've …

08/26/21:

16:04 Ticket #2238 (Difference in ssl_verify_depth and ssl_verify_client optional_no_ca ...) created by Malte Schmidt
Hello, upgrading from Ubuntu 16.04 to 20.04 (meaning nginx 1.16 to …

08/25/21:

23:25 Ticket #2237 (get host in http stream) closed by Maxim Dounin
wontfix: There are no plans to implement something like this. If for some …
17:14 Ticket #2237 (get host in http stream) created by xqdoo00o@…
Hi, the code below: stream { server { listen 80; …
05:52 Ticket #2236 (Unable to reach APT repository for nginx.org) created by seanking2919@…
I'm not sure if my server is blacklisted for some reason or if this is …

08/24/21:

19:38 Ticket #2235 (Allow setting TLS handshake timeouts for http(/2)) closed by Maxim Dounin
wontfix: SSL handshake time in the HTTP module is limited by the …
19:33 Ticket #1388 (Implement TLS Dynamic Record Sizing (CloudFlare patch ready)) updated by Maxim Dounin
> Lower ssl_buffer_size (<1400 bytes) help, but are not optimal after …
17:13 Ticket #2235 (Allow setting TLS handshake timeouts for http(/2)) created by ltning@…
Currently only the stream_ssl module supports any kind of tuning of …
17:06 Ticket #1388 (Implement TLS Dynamic Record Sizing (CloudFlare patch ready)) updated by ltning@…
We run a service that is seeing traffic from devices all over the …
15:15 Ticket #2234 (NGINX 1.19.2 TCP RST/ACK TLSv1.0 Client Hello of Tor Relay ORPort ...) closed by Maxim Dounin
invalid: First connection attempt as seen in the nginx-to-backend dump …
03:16 Ticket #2234 (NGINX 1.19.2 TCP RST/ACK TLSv1.0 Client Hello of Tor Relay ORPort ...) updated by garycnew@…
Maxim, We have uploaded the nginx-tor-tcpdumps to github as you …

08/23/21:

16:02 Ticket #2234 (NGINX 1.19.2 TCP RST/ACK TLSv1.0 Client Hello of Tor Relay ORPort ...) updated by Maxim Dounin
> I'd be happy to provide the raw, unfiltered packet-traces, but your …
08:31 Changeset in nginx-tests [1725:f4c79ee52d8f] by Sergey Kandaurov <pluknet@…>
Tests: added grpcs tests with flow control (ticket #2229). The tests …
08:28 Ticket #2233 (Packages for Debian Bullseye should include 32-bit x86 binaries) updated by Laurence 'GreenReaper' Parry
Well, I can do this. It's a hassle, but little more than the kernels I …
07:05 Ticket #2233 (Packages for Debian Bullseye should include 32-bit x86 binaries) updated by thresh
Indeed, we provide no 32bit binaries for new platforms anymore - this …
05:41 Ticket #2234 (NGINX 1.19.2 TCP RST/ACK TLSv1.0 Client Hello of Tor Relay ORPort ...) updated by garycnew@…
Hi Maxim! Thank you for your prompt reply to this ticket. > First of …
Note: See TracTimeline for information about the timeline view.