Timeline



09/22/23:

23:11 Ticket #2545 (TLS "Close Notify" warning) closed by Maxim Dounin
worksforme: Feedback timeout.
22:11 Changeset in nginx_org [3013:1ad61bfc7630] by Konstantin Pavlov <thresh@…>
Linux packages: removed Ubuntu 22.10 'kinetic' due to EOL.
22:05 Ticket #2490 (the backup upstream response inherits the response value of the ...) updated by Maxim Dounin
Replying to Sergey Kandaurov: > Any way, inheriting the …
15:37 Ticket #2539 (--with-http_v3_module changes the layout of the ngx_connection_s ...) updated by Roman Arutyunyan <arut@…>
In [changeset:"32b5aaebcca51854de6e1f8a40798edb13662edb/nginx"
15:23 Changeset in nginx [9164:3db945fda515] by Vladimir Khomutov <vl@…>
QUIC: handle callback errors in compat. The error may be triggered in …

09/21/23:

15:32 Changeset in nginx [9160:dd5fd5719027] by Roman Arutyunyan <arut@…>
QUIC: do not call shutdown() when handshake is in progress. Instead, …

09/19/23:

07:28 Ticket #2547 (Support Partitioned Cookies for load balancing according to CHIPS) updated by schnieders@…
Hi Maxim Dounin, thank you for your reply. I will consider contacting …
02:03 Ticket #2547 (Support Partitioned Cookies for load balancing according to CHIPS) updated by Maxim Dounin
The sticky directive is only available in …

09/18/23:

14:06 Ticket #2490 (the backup upstream response inherits the response value of the ...) updated by Sergey Kandaurov
So you would like to cache 500 errors, but at the same time try next …
13:22 Ticket #2548 (Worker infinite loop in ngx_http_do_read_client_request_body()) created by anight@…
Consider the following location configuration: […] I figured out …
12:25 Ticket #2547 (Support Partitioned Cookies for load balancing according to CHIPS) created by schnieders@…
All browsers will (or already have) restrict their 3rd-Party-Cookie …

09/15/23:

14:59 Ticket #2542 (ssl_ecdh_curve is sometimes ignored in server blocks) updated by Maxim Dounin
Note that nginx makes no real distinction between name-based virtual …

09/14/23:

20:20 Changeset in nginx_org [3012:ac4191d05fdf] by Yaroslav Zhuravlev <yar@…>
Fixed link to the server directive in ssl_protocols.
15:38 Changeset in nginx_org [3011:55d49eb065ac] by Yaroslav Zhuravlev <yar@…>
Fixed example in the js_periodic directive.
10:15 Changeset in nginx [9162:f9845e4b5c14] by Roman Arutyunyan <arut@…>
QUIC: simplified setting close timer when closing connection. …
10:13 Changeset in nginx [9161:4939fd04737f] by Roman Arutyunyan <arut@…>
HTTP/3: postponed session creation to init() callback. Now the …

09/13/23:

13:59 Changeset in nginx [9158:ad3d34ddfdcc] by Roman Arutyunyan <arut@…>
QUIC: "handshake_timeout" configuration parameter. Previously QUIC …
13:57 Changeset in nginx [9159:6d3ca6f8db35] by Roman Arutyunyan <arut@…>
HTTP/3: moved variable initialization.
13:48 Changeset in nginx [9163:32b5aaebcca5] by Roman Arutyunyan <arut@…>
Modules compatibility: added QUIC to signature (ticket #2539). …

09/12/23:

22:59 Ticket #2542 (ssl_ecdh_curve is sometimes ignored in server blocks) updated by Avamander
I guess the default auto is totally fine in most cases, though when …
20:32 Changeset in nginx_org [3010:758e2e1dfd22] by Yaroslav Zhuravlev <yar@…>
njs-0.8.1.
20:32 Changeset in nginx_org [3009:2e8c1384d211] by Yaroslav Zhuravlev <yar@…>
Documented ngx.shared.SharedDict.items in njs Reference.
20:32 Changeset in nginx_org [3008:4470b2bff7b7] by Yaroslav Zhuravlev <yar@…>
Documented the js_periodic directive.
16:42 Milestone njs-0.8.1 completed
* introduced js_periodic directive. * fixed size() and keys() methods …
15:38 Ticket #2546 (Support RFC 8879: certificate compression) updated by Maxim Dounin
For the record, certificate compression was previously discussed in …
15:28 Ticket #2542 (ssl_ecdh_curve is sometimes ignored in server blocks) updated by Maxim Dounin
Aspects of how settings are applied to name-based virtual servers are …
01:59 Ticket #2546 (Support RFC 8879: certificate compression) created by Seirdy
[https://www.rfc-editor.org/rfc/rfc8879 RFC 8879 TLS Certificate …

09/10/23:

18:34 Ticket #2545 (TLS "Close Notify" warning) updated by Maxim Dounin
The "close notify" alert is a part of TLS protocol, and means that the …
15:41 Ticket #2449 (Allow using OpenSSL 3.0 "provider" API instead of deprecated "engine" API) updated by omayevskiy@…
It is possible to load providers via openssl.cnf For example […] …
00:35 Ticket #2545 (TLS "Close Notify" warning) created by Hay1tsme@…
I have an old application that uses TLS 1.0 that I was attempting to …

09/09/23:

15:21 Ticket #2544 (Cores on nginx-quiche while running curl command) updated by Karthikdasari0423@…
okay,got it i already built nginx with 1.25.2 version and i should …
12:25 Ticket #2544 (Cores on nginx-quiche while running curl command) closed by Maxim Dounin
invalid: The "steps to build" you've referenced contain a 140 KB patch file …
07:48 Ticket #2544 (Cores on nginx-quiche while running curl command) reopened by Karthikdasari0423@…
Just FYI,i am not using any modified nginx.nginx i am using is …

09/08/23:

19:26 Ticket #2544 (Cores on nginx-quiche while running curl command) closed by Maxim Dounin
invalid: It looks like you are having issues nginx with 3rd party …
06:53 Ticket #2544 (Cores on nginx-quiche while running curl command) updated by Karthikdasari0423@…
Bt for all cores are same ` (gdb) core-file core.nginx.240250 …
06:47 Ticket #2544 (Cores on nginx-quiche while running curl command) created by Karthikdasari0423@…
Hi , I tried to build nginx with quiche as explained below and tried …

09/07/23:

17:12 Ticket #2543 (wrong "host" header when using upstreams) closed by Sergey Kandaurov
invalid: This is the default behaviour of the proxy_set_header directive. See …
14:38 Ticket #2543 (wrong "host" header when using upstreams) updated by girsch.ventx.de@…
Description changed
14:34 Ticket #2543 (wrong "host" header when using upstreams) created by girsch.ventx.de@…
Hi, we have a reverse proxy setup with 2 upstreams, the decision to …

09/06/23:

17:55 Ticket #2542 (ssl_ecdh_curve is sometimes ignored in server blocks) updated by Avamander
Description changed
17:52 Ticket #2542 (ssl_ecdh_curve is sometimes ignored in server blocks) created by Avamander
Consider a scenario when a single IP x.y.z.q has two server blocks. …
10:56 Ticket #2526 (wrong gpg key for nginx-stable repo) updated by nadkamo@…
anyway thanks for help, i thought this was root cause of my issue, i …
08:17 Ticket #2526 (wrong gpg key for nginx-stable repo) updated by nadkamo@…
Hi, I am following ur docu: http://nginx.org/en/linux_packages.html

09/01/23:

17:34 Ticket #2541 (TLS 1.2 connection on TLS 1.3 only site) closed by Maxim Dounin
invalid: Thanks for the feedback, closing this.
16:31 Changeset in nginx [9157:daf8f5ba23d8] by Sergey Kandaurov <pluknet@…>
QUIC: removed use of SSL_quic_read_level and SSL_quic_write_level. As …
16:31 Changeset in nginx [9156:36b59521a41c] by Sergey Kandaurov <pluknet@…>
QUIC: refined sending CONNECTION_CLOSE in various packet types. As …
04:01 Ticket #2541 (TLS 1.2 connection on TLS 1.3 only site) updated by vp1981@…
Thanks for the explanations and suggestions! I implemented your idea …

08/31/23:

19:59 Changeset in nginx [9155:35bb47f65cab] by Maxim Dounin <mdounin@…>
Upstream: fixed handling of Status headers without reason-phrase. …
15:54 Changeset in nginx [9168:ff98ae7d261e] by Sergey Kandaurov <pluknet@…>
QUIC: split keys availability checks to read and write sides. Keys …
10:29 Ticket #2540 (nginx stable 1.24 issues with cache file deletion under heavy load) closed by Maxim Dounin
invalid: Thanks for confirming, closing this.
10:28 Ticket #2532 (Nginx close connection immeadiately when handle quic connection migration) closed by Roman Arutyunyan
fixed
10:28 Ticket #2532 (Nginx close connection immeadiately when handle quic connection migration) updated by Roman Arutyunyan <arut@…>
In [changeset:"f6b6f3dd7ca0653fc5ffe4f32dc806460eb6c64e/nginx"
09:10 Ticket #2540 (nginx stable 1.24 issues with cache file deletion under heavy load) updated by p4rancesc0@…
Hi, by removing those two directives: […] out problems is …
08:43 Ticket #2541 (TLS 1.2 connection on TLS 1.3 only site) updated by Maxim Dounin
By default, nginx 1.25.2 accepts connections with …
08:14 Ticket #2540 (nginx stable 1.24 issues with cache file deletion under heavy load) updated by p4rancesc0@…
Hi, thanks for the reply. I can confirm that there is no traffic on …
08:01 Ticket #2541 (TLS 1.2 connection on TLS 1.3 only site) updated by Maxim Dounin
See also #2538.
08:01 Ticket #2538 (Site has TLS 1.2 connection despite being configured with TLS 1.3 only) closed by Maxim Dounin
duplicate: Duplicate of #2541.
07:46 Ticket #2540 (nginx stable 1.24 issues with cache file deletion under heavy load) updated by Maxim Dounin
There is no any traffic on nginx after the test stopped, correct? …
06:54 Changeset in nginx [9154:f6b6f3dd7ca0] by Roman Arutyunyan <arut@…>
QUIC: ignore path validation socket error (ticket #2532). Previously, …
05:39 Ticket #2541 (TLS 1.2 connection on TLS 1.3 only site) updated by vp1981@…
It looks like there was a problem with the nginx configuration. …
00:13 Ticket #2541 (TLS 1.2 connection on TLS 1.3 only site) created by vp1981@…
I configured nginx to accept only TLS 1.3 connections and up to …

08/30/23:

20:16 Ticket #1665 (Minimum zone size for limit_req strangely high) updated by joshua.mccullough.teslagovernment.com@…
The above comment was my mistake, I did not include the unit in the …
20:13 Ticket #1665 (Minimum zone size for limit_req strangely high) updated by joshua.mccullough.teslagovernment.com@…
Could the docs be updated regarding this? It's very confusing. In my …
13:03 Ticket #2540 (nginx stable 1.24 issues with cache file deletion under heavy load) updated by p4rancesc0@…
Description changed
13:02 Ticket #2540 (nginx stable 1.24 issues with cache file deletion under heavy load) updated by p4rancesc0@…
Description changed
13:00 Ticket #2540 (nginx stable 1.24 issues with cache file deletion under heavy load) updated by p4rancesc0@…
Description changed
12:57 Ticket #2540 (nginx stable 1.24 issues with cache file deletion under heavy load) created by p4rancesc0@…
Hi, during some synthetic benchmarks on our nginx we faced a strange …
12:47 Changeset in nginx-tests [1939:24482e311749] by Sergey Kandaurov <pluknet@…>
Tests: added QUIC test with resending Initial packets on Retry.
11:36 Ticket #2539 (--with-http_v3_module changes the layout of the ngx_connection_s ...) updated by Roman Arutyunyan
Thanks for reporting this. QUIC indeed should be included in signature.
09:59 Ticket #2539 (--with-http_v3_module changes the layout of the ngx_connection_s ...) created by dmikhin@…
Nginx compiled with v3 support has following signature: […] Nginx …
07:09 Changeset in nginx [9153:8f7e6d8c061e] by Roman Arutyunyan <arut@…>
QUIC: use last client dcid to receive initial packets. Previously, …
04:11 Ticket #2538 (Site has TLS 1.2 connection despite being configured with TLS 1.3 only) updated by vp1981@…
(Continue 3) This is how I tested with curl: (see attachment).
04:10 Ticket #2538 (Site has TLS 1.2 connection despite being configured with TLS 1.3 only) updated by vp1981@…
(Continue) I configured nginx to establish only TLS 1.3 connections …
04:09 Ticket #2538 (Site has TLS 1.2 connection despite being configured with TLS 1.3 only) created by vp1981@…
Hello, I'm running nginx on Archlinux.

08/29/23:

22:22 Changeset in nginx-tests [1938:e1059682aeef] by Sergey Kandaurov <pluknet@…>
Tests: fixed ClientHello with resending Initial QUIC packets. …
17:25 Ticket #2537 (Host not found in resolver "kube-dns.kube-system.svc.cluster.local". ...) updated by Maxim Dounin
There are no restrictions on DNS server name length in resolver. In …
07:36 Ticket #2532 (Nginx close connection immeadiately when handle quic connection migration) updated by Roman Arutyunyan
Please try the attached patch.
07:35 quic-old-path-validation attached to Ticket #2532 by Roman Arutyunyan
07:22 Ticket #2532 (Nginx close connection immeadiately when handle quic connection migration) updated by Roman Arutyunyan
Normally ICMP takes some time to arrive and error is not returned by …
07:06 Ticket #2536 (should we discard initial packet with zero-length odcid?) closed by Roman Arutyunyan
invalid: I looked deeper into this and I don't see how odcid can be empty. An …

08/27/23:

02:47 Ticket #2536 (should we discard initial packet with zero-length odcid?) updated by Roman Arutyunyan
Thanks for reporting this. We need to rely on client ip/port in this case.

08/26/23:

11:23 Ticket #2537 (Host not found in resolver "kube-dns.kube-system.svc.cluster.local". ...) created by yersan@…
Hi, I have the following simple configuration: […] Which gives …

08/25/23:

16:06 Ticket #2536 (should we discard initial packet with zero-length odcid?) created by pl080516@…
If a initial packet with zero-length odcid is accpeted, nginx will …
16:02 BadContent edited by Maxim Dounin
(diff)
14:12 Changeset in nginx-tests [1937:2a0a6035a1af] by Sergey Kandaurov <pluknet@…>
Tests: removed TODO and try_run() checks for legacy versions.
14:12 Changeset in nginx-tests [1936:716d7500317d] by Sergey Kandaurov <pluknet@…>
Tests: keep HTTP/2 test for "return 444" in error_page as TODO.
12:39 Changeset in nginx [9151:933f37273282] by Sergey Kandaurov <pluknet@…>
Version bump.
09:51 Changeset in nginx [9152:2880f60a80c3] by Sergey Kandaurov <pluknet@…>
QUIC: posted generating TLS Key Update next keys. Since at least …

08/24/23:

10:59 Changeset in nginx-tests [1935:6bafe9419126] by Sergey Kandaurov <pluknet@…>
Tests: allowed ssl_curve.t to run on BoringSSL. Recently BoringSSL …

08/23/23:

18:32 Ticket #2534 (Build error with clang 16 on Alpine) closed by Maxim Dounin
wontfix: That's a known issue with clang and musl, see here: …
16:48 Ticket #2533 (Variables does not work in error_log and ssl_certificate) closed by Maxim Dounin
duplicate: Duplicate of #2531.
16:48 Ticket #2531 (You cannot use variables in error_log and ssl_certificate) updated by Maxim Dounin
See also #2533.
15:54 Ticket #2534 (Build error with clang 16 on Alpine) updated by kenballus@…
Description changed
15:53 Ticket #2534 (Build error with clang 16 on Alpine) created by kenballus@…
Nginx's current default branch (revision hash …
14:26 Ticket #2533 (Variables does not work in error_log and ssl_certificate) created by EduardoRuizM@…
Variables does not work in directives. Sample: set $DOMAIN …
Note: See TracTimeline for information about the timeline view.