Timeline



09/23/21:

13:25 Changeset in nginx [8890:b4c7853b0488]quic by Vladimir Homutov <vl@…>
QUIC: added shutdown support in stream proxy.

09/22/21:

15:26 Ticket #2236 (Unable to reach APT repository for nginx.org) updated by thresh
Owner, Status, Component changed
15:26 Ticket #2236 (Unable to reach APT repository for nginx.org) updated by thresh
Hi, What do you mean by unable to reach? Can you show the output of …
13:45 Ticket #2251 ("underscores_in_headers on" didn't work) updated by Maxim Dounin
Works fine here. Test configuration: […] Test with a header with …
12:45 Ticket #2251 ("underscores_in_headers on" didn't work) created by dangnhutoan@…
The custom header can not pass to backend although set …
11:10 Changeset in nginx [8864:ea9b645472b5]quic by Sergey Kandaurov <pluknet@…>
HTTP/3: fixed null pointer dereference with server push. See details …
11:08 Changeset in nginx [8863:33578b8d453d]quic by Roman Arutyunyan <arut@…>
HTTP/3: fixed ngx_stat_active counter. Previously the counter was not …
11:02 Changeset in nginx [8875:13cb758e6ac0]quic by Roman Arutyunyan <arut@…>
QUIC: reset stream only once.
11:01 Changeset in nginx [8861:630ecd703805]quic by Sergey Kandaurov <pluknet@…>
QUIC: set NGX_TCP_NODELAY_DISABLED for fake stream connections. …
10:49 Ticket #2250 (nginx does not response via TLSv1 and TLSv1.1 when built with OpenSSL 3.0.0) closed by Sergey Kandaurov
invalid: They are no longer enabled by default, see OpenSSL 3.0 CHANGES.md: …
08:46 Ticket #2250 (nginx does not response via TLSv1 and TLSv1.1 when built with OpenSSL 3.0.0) created by soukichi@…
nginx v1.21.3 does not response via TLSv1 and TLSv1.1 when built with …

09/21/21:

18:52 Ticket #2249 (nginx proxy makes grpc two-way authentication fail) closed by Maxim Dounin
invalid: Authentication with SSL certificates can be only used to authenticate …
15:56 Ticket #2249 (nginx proxy makes grpc two-way authentication fail) created by inaryart@…
When the nginx grpc proxy is not used, the grpc server will verify …
15:25 Changeset in nginx [8860:a2cef164a924]quic by Roman Arutyunyan <arut@…>
QUIC: simplified stream fd initialization.
13:24 Changeset in nginx [8876:1ead7d64e993]quic by Roman Arutyunyan <arut@…>
QUIC: send RESET_STREAM in response to STOP_SENDING. As per RFC 9000: …
11:46 Changeset in nginx [8859:65191b9151a9]quic by Ruslan Ermilov <ru@…>
Configure: USE_OPENSSL_QUIC=YES implies USE_OPENSSL=YES.
11:46 Changeset in nginx [8858:be269f1fc230]quic by Ruslan Ermilov <ru@…>
Configure: ordered directories.
11:46 Changeset in nginx [8857:678d1c7a3003]quic by Ruslan Ermilov <ru@…>
Configure: simplified condition.

09/20/21:

22:51 Ticket #2246 (Our QUIC implementation currently supports BoringSSL and the quictls ...) updated by bertusdebruin@…
Replying to Maxim Dounin: > Note though that …
19:52 Ticket #2247 (Broken link in ngx_http_mp4_module docs) updated by Maxim Dounin
Status changed
Thanks, indeed the page at …
09:04 Ticket #2248 (Stalled connection when using `aio_write on`) updated by aminvakil@…
Description changed
09:00 Ticket #2248 (Stalled connection when using `aio_write on`) created by aminvakil@…
Connection gets stalled most times and does not continue downloading …

09/19/21:

21:25 Ticket #2246 (Our QUIC implementation currently supports BoringSSL and the quictls ...) updated by Maxim Dounin
> As nginx-quic cannot be built with quic-OpenSSL, there is little to …

09/18/21:

03:08 Ticket #2246 (Our QUIC implementation currently supports BoringSSL and the quictls ...) updated by bertusdebruin@…
'Unfortunately, you didn't provide the trace' Which trace do you want? …

09/17/21:

21:28 Ticket #2247 (Broken link in ngx_http_mp4_module docs) created by jputrino@…
In the ngx_http_mp4_module docs, there is a link to a page that …
16:16 Changeset in nginx-tests [1734:f7170c7acf3a] by Sergey Kandaurov <pluknet@…>
Tests: added HTTP/2 tests for PUSH_PROMISE with CONTINUATION.
15:56 Changeset in nginx-tests [1733:e306bd77321d] by Sergey Kandaurov <pluknet@…>
Tests: handling of HTTP/2 PUSH_PROMISE frames with CONTINUATION.
13:32 Changeset in nginx [8856:6a383020d61e]quic by Roman Arutyunyan <arut@…>
HTTP/3: make ngx_http_log_error() static again. This function was …
12:28 Changeset in nginx [8862:3fdf0afd5d45]quic by Roman Arutyunyan <arut@…>
HTTP/3: fixed pushed request finalization in case of error. …
08:14 Ticket #2246 (Our QUIC implementation currently supports BoringSSL and the quictls ...) closed by Sergey Kandaurov
invalid: To build nginx with a custom variant of the OpenSSL library, you have …

09/16/21:

11:58 Ticket #2246 (Our QUIC implementation currently supports BoringSSL and the quictls ...) created by bertusdebruin@…
As written on (1) compiling nginx-quic seems to be supported by the …
10:13 Changeset in nginx [8854:7416d3b2fac5]quic by Sergey Kandaurov <pluknet@…>
HTTP/3: added CONNECT and TRACE methods rejection. It has got lost in …

09/15/21:

17:32 Changeset in nginx-tests [1732:41ca4b00c2d0] by Sergey Kandaurov <pluknet@…>
Tests: added absolute_redirect and Location tests for HTTP/2.
16:57 Ticket #2245 (HTTP/1 Connection closed instead of keep-alive with gzip on and ...) closed by Maxim Dounin
invalid: With [http://nginx.org/r/chunked_transfer_encoding chunked transfer …
16:02 Ticket #2245 (HTTP/1 Connection closed instead of keep-alive with gzip on and ...) created by andreas689@…
Hello, I found out keep-alive to clients is not working with enabled …
15:04 Changeset in nginx-tests [1731:c9b4c0ef5059] by Sergey Kandaurov <pluknet@…>
Tests: added server_name_in_redirect and port_in_redirect tests.
14:01 Changeset in nginx-tests [1735:8bdf548487f6] by Sergey Kandaurov <pluknet@…>
Tests: proxy_half_close tests in the stream module.
13:37 Changeset in nginx-tests [1730:696322b7e2c3] by Sergey Kandaurov <pluknet@…>
Tests: added proxy_max_temp_file_size tests.

09/14/21:

09:09 Changeset in nginx [8853:7603284f7af5]quic by Ruslan Ermilov <ru@…>
Removed NGX_OPENSSL_QUIC macro, NGX_QUIC is enough.

09/13/21:

22:00 Changeset in nginx-tests [1729:14b5ee6eee6c] by Sergey Kandaurov <pluknet@…>
Tests: typo.
18:13 Ticket #2244 (`listen` not working inside `include`) updated by Thomas Landauer
I opened an issue at Debian: …
15:34 Ticket #2244 (`listen` not working inside `include`) closed by Maxim Dounin
invalid: The sites-enabled/* thing is a misconception specific to the …
15:11 Ticket #2244 (`listen` not working inside `include`) updated by Thomas Landauer
(I edited the description to include full paths.) Thanks! The root of …
13:54 Ticket #2244 (`listen` not working inside `include`) updated by Thomas Landauer
Description changed
13:34 Ticket #2244 (`listen` not working inside `include`) updated by Maxim Dounin
The sites-enabled/inc is not expected to be included by `include …
13:25 Changeset in nginx [8852:8fc9c7f2c533]quic by Sergey Kandaurov <pluknet@…>
HTTP/3: added debug logging of response fields. Because of QPACK …
13:25 Changeset in nginx [8851:051968b73c59]quic by Sergey Kandaurov <pluknet@…>
HTTP/3: Huffman encoding for the Location response field.
13:25 Changeset in nginx [8850:355461f0cc3b]quic by Sergey Kandaurov <pluknet@…>
HTTP/3: Huffman encoding for the Last-Modified response field.
13:25 Changeset in nginx [8849:2cb697e7d77f]quic by Sergey Kandaurov <pluknet@…>
HTTP/3: Huffman encoding for the Content-Type response field.
13:25 Changeset in nginx [8848:b5a305db30e0]quic by Sergey Kandaurov <pluknet@…>
HTTP/3: implemented QPACK Huffman encoding for response fields.

09/12/21:

14:34 Ticket #2244 (`listen` not working inside `include`) created by Thomas Landauer
With this being my sites-enabled/foo.conf […] ... and this my …

09/09/21:

16:12 Changeset in nginx [8846:cbbe901c199d]quic by Sergey Kandaurov <pluknet@…>
QUIC: removed Firefox workaround for trailing zeroes in datagrams. …
13:55 Changeset in nginx [8855:9ae239d2547d]quic by Roman Arutyunyan <arut@…>
QUIC: separate event handling functions. The functions …
12:47 Changeset in nginx [8847:e29c1ede905f]quic by Roman Arutyunyan <arut@…>
HTTP/3: reading body buffering in filters. This change follows …
12:40 Changeset in nginx [8845:4df9795fb77f]quic by Ruslan Ermilov <ru@…>
QUIC: macro style.
12:34 Changeset in nginx [8844:062080651d50]quic by Ruslan Ermilov <ru@…>
Changed the OpenSSL QUIC support detection. As was changed in …

09/08/21:

12:53 Changeset in nginx [8843:4ca8035c19a4]quic by Sergey Kandaurov <pluknet@…>
Merged with the default branch.

09/07/21:

15:35 Milestone nginx-1.21.3 completed
Status: scheduled Trunk: mainline * Bug fixes in the async …
15:21 Changeset in nginx [7926:a525013b8296] by Maxim Dounin <mdounin@…>
release-1.21.3 tag
15:21 Changeset in nginx [7925:2217a9c1d0b8]release-1.21.3 by Maxim Dounin <mdounin@…>
nginx-1.21.3-RELEASE
13:18 Ticket #2243 (grpc_socket_keepalive on; Doesn't work) closed by Maxim Dounin
invalid: The grpc_socket_keepalive
06:09 Ticket #2243 (grpc_socket_keepalive on; Doesn't work) updated by f4nff@…
[…]

09/06/21:

18:23 Ticket #2243 (grpc_socket_keepalive on; Doesn't work) created by f4nff@…
[…] After testing, turn on grpc_socket_keepalive on; the …
15:13 Ticket #2242 (DNS UDP proxy with UNIX socket is not working) updated by Maxim Dounin
Since each session needs to use an unique path, I don't think there is …
14:14 Ticket #2242 (DNS UDP proxy with UNIX socket is not working) updated by Vladislav Odintsov
Thanks for the feedback. Should we look for another solution to handle …
13:59 Changeset in nginx [8842:486c6a9be111]quic by Roman Arutyunyan <arut@…>
QUIC: store QUIC connection fd in stream fake connection. Previously …
13:19 Ticket #2242 (DNS UDP proxy with UNIX socket is not working) updated by Maxim Dounin
Status, Priority changed
For datagram unix socket to work for server-to-client communication, …
11:54 Changeset in nginx [7924:d9e009b39596] by Maxim Dounin <mdounin@…>
HTTP/2: optimized processing of small DATA frames. The request body …
11:54 Changeset in nginx [7923:4775c1d27378] by Maxim Dounin <mdounin@…>
HTTP/2: fixed timers left after request body reading. Following …
11:54 Changeset in nginx [7922:e9f402bfe37e] by Maxim Dounin <mdounin@…>
HTTP/2: fixed window updates when buffering in filters. In the body …

09/04/21:

11:50 Changeset in nginx-tests [1728:6d5ecf445e57] by Sergey Kandaurov <pluknet@…>
Tests: added HTTP/2 test with big request body. Notably, it is useful …

09/03/21:

14:19 Changeset in nginx [7920:2b2607d13fe9] by Roman Arutyunyan <arut@…>
Version bump.
12:27 Ticket #2242 (DNS UDP proxy with UNIX socket is not working) created by Vladislav Odintsov
Hi, things go in such a way, that I need to pass DNS traffic from LXC …
11:23 Changeset in nginx [8841:1f7f98638dc2]quic by Mariano Di Martino <mariano.dimartino@…>
QUIC: fixed null pointer dereference in MAX_DATA handler. If a …

09/02/21:

19:30 Changeset in nginx-tests [1727:bdefe70ae1a7] by Dmitry Volyntsev <xeioex@…>
Tests: removed negative fetch API test for HTTPS schema. HTTPS …
09:25 Changeset in nginx [7921:2245324a507a] by Roman Arutyunyan <arut@…>
Fixed debug logging.

09/01/21:

13:33 Ticket #2234 (NGINX 1.19.2 TCP RST/ACK TLSv1.0 Client Hello of Tor Relay ORPort ...) closed by Maxim Dounin
invalid: As previously suggested, if you need help with configuring nginx, …
13:07 Ticket #2234 (NGINX 1.19.2 TCP RST/ACK TLSv1.0 Client Hello of Tor Relay ORPort ...) reopened by garycnew@…
Maxim, After pouring through debug logs, which Nginx debug logs …
08:12 Changeset in nginx [8840:4d871baeacd2]quic by Sergey Kandaurov <pluknet@…>
README: HTTP/3 trailers are now supported.
07:57 Changeset in nginx [8839:fac88e160653]quic by Sergey Kandaurov <pluknet@…>
Merged with the default branch.
04:53 Ticket #2234 (NGINX 1.19.2 TCP RST/ACK TLSv1.0 Client Hello of Tor Relay ORPort ...) updated by garycnew@…
@mikhail.isachenkov > We are unable to reproduce this issue with …

08/31/21:

15:57 Milestone njs-0.6.2 completed
Planned features and enhancements: * Promise.all(), …
15:56 Milestone nginx-1.21.2 completed
Status: scheduled Trunk: mainline * OpenSSL 3.0 …
15:13 Changeset in nginx [7919:b2d1a602b241] by Maxim Dounin <mdounin@…>
release-1.21.2 tag
15:13 Changeset in nginx [7918:bfbc52374adc]release-1.21.2 by Maxim Dounin <mdounin@…>
nginx-1.21.2-RELEASE
14:54 Changeset in nginx [7967:5de6a960632e]stable-1.20 by Maxim Dounin <mdounin@…>
Updated OpenSSL used for win32 builds.
14:54 Changeset in nginx [7917:f0ab1db646d5] by Maxim Dounin <mdounin@…>
Updated OpenSSL used for win32 builds.
13:44 Changeset in nginx [7916:29795b697e14] by Maxim Dounin <mdounin@…>
HTTP/2: avoid memcpy() with NULL source and zero length. Prodded by …
13:17 Ticket #2234 (NGINX 1.19.2 TCP RST/ACK TLSv1.0 Client Hello of Tor Relay ORPort ...) updated by mikhail.isachenkov
Gary, We are unable to reproduce this issue with official nginx and …
13:15 Ticket #2234 (NGINX 1.19.2 TCP RST/ACK TLSv1.0 Client Hello of Tor Relay ORPort ...) closed by Maxim Dounin
invalid: Sorry, this is not how it works. If you need help with your …
04:46 Ticket #2234 (NGINX 1.19.2 TCP RST/ACK TLSv1.0 Client Hello of Tor Relay ORPort ...) reopened by garycnew@…
Maxim, Points omitted from your facts-summary: The test environment …

08/30/21:

18:16 Ticket #2238 (Difference in ssl_verify_depth and ssl_verify_client optional_no_ca ...) closed by Maxim Dounin
invalid: Thanks for confirming, closing this.
17:17 Ticket #2234 (NGINX 1.19.2 TCP RST/ACK TLSv1.0 Client Hello of Tor Relay ORPort ...) closed by Maxim Dounin
invalid: Thanks for the feedback. So, to summarise, the following facts are …
13:42 Changeset in nginx-tests [1726:f66266cc82c8] by Maxim Dounin <mdounin@…>
Tests: additional HTTP/2 request body tests.
13:12 Ticket #196 (Inconsistent behavior on uri's with unencoded spaces followed by H) updated by Maxim Dounin
See also #2241.
13:11 Ticket #2241 (Under special circumstances cause http code 400) closed by Maxim Dounin
duplicate: Duplicate of #196.
11:45 Changeset in nginx [7915:09d15a2dbc6b] by Sergey Kandaurov <pluknet@…>
Give GCC atomics precedence over deprecated Darwin atomic(3). This …
10:31 Ticket #2238 (Difference in ssl_verify_depth and ssl_verify_client optional_no_ca ...) updated by Malte Schmidt
Hello, I re-evaluated the configs and found that the ssl_verify_depth …
10:29 Ticket #2234 (NGINX 1.19.2 TCP RST/ACK TLSv1.0 Client Hello of Tor Relay ORPort ...) updated by garycnew@…
Maxim, Is it possible to escalate this ticket to someone at Nginx …
02:09 Ticket #2241 (Under special circumstances cause http code 400) created by zhoulin1359@…
Incorrect: curl 'http://nginx.org?a=A H' normal:curl …

08/29/21:

21:22 Ticket #2240 (little endian not set when cross compilation for little endian targets) updated by Maxim Dounin
> this issue i'm reporting here is probably the cause of the #1928
20:35 Ticket #2240 (little endian not set when cross compilation for little endian targets) updated by nhed@…
but additionally - this issue i'm reporting here is probably the cause …
20:30 Ticket #2240 (little endian not set when cross compilation for little endian targets) updated by nhed@…
for context i'm building under buildroot Seeing the --crossbuild
19:22 Changeset in nginx [7914:9cf043a5d9ca] by Maxim Dounin <mdounin@…>
Request body: reading body buffering in filters. If a filter wants to …
19:21 Changeset in nginx [7913:185c86b830ef] by Maxim Dounin <mdounin@…>
Request body: introduced rb->last_saved flag. It indicates that the …
19:20 Changeset in nginx [7912:96e09beaa2cf] by Maxim Dounin <mdounin@…>
Request body: added alert to catch duplicate body saving. If due to …
19:20 Changeset in nginx [7911:d869e43643ac] by Maxim Dounin <mdounin@…>
Request body: missing comments about initialization.
19:20 Changeset in nginx [7910:1d78437dbc3f] by Maxim Dounin <mdounin@…>
HTTP/2: improved handling of preread unbuffered requests. Previously, …
19:20 Changeset in nginx [7909:f302c1096f7b] by Maxim Dounin <mdounin@…>
HTTP/2: improved handling of END_STREAM in a separate DATA frame. The …
19:20 Changeset in nginx [7908:0dcec8e5d50a] by Maxim Dounin <mdounin@…>
HTTP/2: reworked body reading to better match HTTP/1.x code. In …
19:20 Changeset in nginx [7907:51f463301f86] by Maxim Dounin <mdounin@…>
HTTP/2: improved body reading logging.
18:45 Ticket #2240 (little endian not set when cross compilation for little endian targets) closed by Maxim Dounin
invalid: Cross-compilation is not supported by nginx, and your attempts to …
04:23 Ticket #2240 (little endian not set when cross compilation for little endian targets) created by nhed@…
This causes corrupt http2 headers Default seems to be big endian and …
03:14 Ticket #2234 (NGINX 1.19.2 TCP RST/ACK TLSv1.0 Client Hello of Tor Relay ORPort ...) updated by Maxim Dounin
> I believe this ticket was closed prematurely. The resets you …

08/28/21:

07:23 Ticket #2234 (NGINX 1.19.2 TCP RST/ACK TLSv1.0 Client Hello of Tor Relay ORPort ...) reopened by garycnew@…
07:20 Ticket #2234 (NGINX 1.19.2 TCP RST/ACK TLSv1.0 Client Hello of Tor Relay ORPort ...) updated by garycnew@…
Maxim, I believe this ticket was closed prematurely. The resets you …

08/27/21:

22:08 Ticket #2238 (Difference in ssl_verify_depth and ssl_verify_client optional_no_ca ...) updated by Maxim Dounin
In OpenSSL 1.1.0, verification of certificates was changed. In …
18:55 Ticket #2239 (Unterminated string result in ngx_sock_ntop()) closed by Maxim Dounin
invalid: > ... will leave the resulting text unterminated. In nginx, strings …
16:12 Ticket #2239 (Unterminated string result in ngx_sock_ntop()) created by GregIthaca@…
I've been studying/running your code for security research, and I've …

08/26/21:

16:04 Ticket #2238 (Difference in ssl_verify_depth and ssl_verify_client optional_no_ca ...) created by Malte Schmidt
Hello, upgrading from Ubuntu 16.04 to 20.04 (meaning nginx 1.16 to …

08/25/21:

23:25 Ticket #2237 (get host in http stream) closed by Maxim Dounin
wontfix: There are no plans to implement something like this. If for some …
17:14 Ticket #2237 (get host in http stream) created by xqdoo00o@…
Hi, the code below: stream { server { listen 80; …
05:52 Ticket #2236 (Unable to reach APT repository for nginx.org) created by seanking2919@…
I'm not sure if my server is blacklisted for some reason or if this is …

08/24/21:

19:38 Ticket #2235 (Allow setting TLS handshake timeouts for http(/2)) closed by Maxim Dounin
wontfix: SSL handshake time in the HTTP module is limited by the …
19:33 Ticket #1388 (Implement TLS Dynamic Record Sizing (CloudFlare patch ready)) updated by Maxim Dounin
> Lower ssl_buffer_size (<1400 bytes) help, but are not optimal after …
17:13 Ticket #2235 (Allow setting TLS handshake timeouts for http(/2)) created by ltning@…
Currently only the stream_ssl module supports any kind of tuning of …
17:06 Ticket #1388 (Implement TLS Dynamic Record Sizing (CloudFlare patch ready)) updated by ltning@…
We run a service that is seeing traffic from devices all over the …
15:15 Ticket #2234 (NGINX 1.19.2 TCP RST/ACK TLSv1.0 Client Hello of Tor Relay ORPort ...) closed by Maxim Dounin
invalid: First connection attempt as seen in the nginx-to-backend dump …
03:16 Ticket #2234 (NGINX 1.19.2 TCP RST/ACK TLSv1.0 Client Hello of Tor Relay ORPort ...) updated by garycnew@…
Maxim, We have uploaded the nginx-tor-tcpdumps to github as you …
Note: See TracTimeline for information about the timeline view.