Timeline



01/04/14:

20:47 Ticket #457 (Win32: ngx_utf8_to_utf16 doesn't allow file names outside U+FFFF) closed by Maxim Dounin
fixed: Fix committed, thanks.
20:47 Ticket #456 (ngx_random: random number generator initialized (srandom) to same ...) closed by Maxim Dounin
fixed: Fix committed, thanks.

01/03/14:

23:50 Ticket #457 (Win32: ngx_utf8_to_utf16 doesn't allow file names outside U+FFFF) updated by Maxim Dounin <mdounin@…>
In 1cd23ca84a9bbaa965160dba5ba62bda3e8a9e32/nginx: […]
23:50 Ticket #456 (ngx_random: random number generator initialized (srandom) to same ...) updated by Maxim Dounin <mdounin@…>
In b91bcba2935185ad1e0c2568b8d4450c5b94b9f2/nginx: […]
20:17 Ticket #481 (Executable missing platform security integrations) updated by Jeffrey Walton
Here are some examples of HowTo's that manage to miss every security …
19:47 Ticket #481 (Executable missing platform security integrations) updated by Jeffrey Walton
Replying to Sergey Budnevitch: > Replying to [comment:2
19:12 Ticket #481 (Executable missing platform security integrations) updated by Sergey Budnevitch
Replying to Jeffrey Walton: > > The --with-cc-opt and …
17:36 Ticket #481 (Executable missing platform security integrations) updated by Jeffrey Walton
> The --with-cc-opt and --with-ld-opt configure options can be used to …
13:36 Ticket #481 (Executable missing platform security integrations) closed by Maxim Dounin
worksforme: The --with-cc-opt and --with-ld-opt configure options can be used …
13:11 Ticket #480 (Unsigned Integers Mishandled) updated by Maxim Dounin
If you write incorrect code, including incorrect format string, …
13:09 Ticket #478 (open_file_cache doesn't invalidate cache entries when it should) updated by Maxim Dounin
This error isn't expect to occur on filesystems with normal Unix …
08:16 Ticket #478 (open_file_cache doesn't invalidate cache entries when it should) updated by Ilari Stenroth
OK, I understand the reasoning for using a proxy on a NFS mount. But …
06:03 Ticket #481 (Executable missing platform security integrations) created by Jeffrey Walton
Modern Linux and Unix platfroms provide a number of platform security …
05:21 Ticket #480 (Unsigned Integers Mishandled) updated by Scott
Ah ok, thanks. I didn't see that. I must ask though: even if I give it …
03:24 Ticket #480 (Unsigned Integers Mishandled) closed by Maxim Dounin
invalid: The %u format is invalid for ngx_conf_log_error(). Please note that …
02:33 Ticket #478 (open_file_cache doesn't invalidate cache entries when it should) closed by Maxim Dounin
wontfix: The open_file_cache subsystem caches file descriptors for a specified …
01:01 Ticket #480 (Unsigned Integers Mishandled) created by Scott
There is an error in ngx_string.c::ngx_vslprintf(). At the minimum it …

01/02/14:

21:40 Ticket #479 (Add mimetype for XSPF) created by Lauri Võsandi
Hi, could you please add following entry to mime.types so XSPF …
14:30 Ticket #478 (open_file_cache doesn't invalidate cache entries when it should) created by Ilari Stenroth
We have an XML file that is requested frequently (multiple times in a …

12/30/13:

23:07 Ticket #476 (ignoring stale global SSL error) updated by Maxim Dounin
By "same behavior" you mean the alert logged? Please show one. If you …
21:39 Ticket #476 (ignoring stale global SSL error) updated by devrandom.pip.verisignlabs.com
Replying to Maxim Dounin: I've gone back to my …
20:09 Ticket #477 (gunzip does not decompress gzip static content for clients that do not ...) closed by Maxim Dounin
invalid: There is gzip_static always to do …
19:57 Ticket #476 (ignoring stale global SSL error) closed by Maxim Dounin
invalid: Errors you see are caused by duplicate certificates loaded as trusted …
14:59 Ticket #437 (Add Support for SPDY/3) updated by Valentin V. Bartenev
Version, nginx -V changed
That is a version with which original feature request was opened. …
14:30 Ticket #437 (Add Support for SPDY/3) updated by openid.yandex.ru/kalinin-mic
why only for 1.3.x ? spdy 3 will be on 1.4.x or greater ? thanks
13:01 Ticket #477 (gunzip does not decompress gzip static content for clients that do not ...) created by Nick B
Using the following directives in the http section of the conf file: …

12/28/13:

19:15 firefoxDebug_BROKEN.txt attached to Ticket #476 by devrandom.pip.verisignlabs.com
Debug from Firefox sesssion (i.e. broken)
19:15 safariDebug_WORKSOK.txt attached to Ticket #476 by devrandom.pip.verisignlabs.com
Debug from Safari session (i.e. works ok)
19:13 Ticket #476 (ignoring stale global SSL error) created by devrandom.pip.verisignlabs.com
(uname -a , nginx -V and conf at the bottom ...debug log will be …

12/25/13:

11:19 mp4-bug-dump.txt attached to Ticket #475 by MP4Man
11:19 Ticket #475 (http_mp4_module seeking problem: "start time is out mp4 stts samples") created by MP4Man
Sometimes I have problem with seeking MP4 files. Files were …

12/24/13:

16:24 Ticket #454 (disable ngx_http_upstream_store for HEAD requests) reopened by Proforg M
Thanks for the explanation! Can you please explicitly describe this …

12/23/13:

17:24 Ticket #472 (ssl_client_verify fails in Safari) closed by Maxim Dounin
invalid: For me it looks like you are right and it's Safari problem. If you …
14:20 Ticket #240 (cannot find files when ssi subrequest ended by a interrogation mark) closed by Ruslan Ermilov
fixed: You should use URI escaping for a file name that includes the "?" …
14:17 Ticket #316 (X-Accel-Redirect should accept escaped URI) closed by Ruslan Ermilov
fixed: Fix committed.
14:15 Tickets #240,​316 batch updated by Ruslan Ermilov <ru@…>
In 74bfa803a5aade632e15cc05eb8d4c52c85abe9c/nginx: […]
11:19 Ticket #474 (in a vhost,hostname can not be "res") closed by Maxim Dounin
worksforme: Most likely, it's a configuration error somewhere else. First of all, …

12/22/13:

13:45 Ticket #474 (in a vhost,hostname can not be "res") created by 成 张
i want to have a vhost to autoindex the files,so i add a vhost in …

12/21/13:

23:24 Ticket #473 (proxy_cache_revalidate does not distinguish through the cache key) closed by Maxim Dounin
invalid: If you bypass the cache, the proxy_cache_revalidate doesn't do …
17:37 Ticket #473 (proxy_cache_revalidate does not distinguish through the cache key) updated by Juan Carlos Bauza
Adding to the cache key an identifier for the user agent group worked. …
17:27 Ticket #473 (proxy_cache_revalidate does not distinguish through the cache key) updated by Juan Carlos Bauza
My bad, as I bypass for mobile the key does not have the user agent …
17:25 Ticket #473 (proxy_cache_revalidate does not distinguish through the cache key) created by Juan Carlos Bauza
I have setup my proxy cache to separate desktop and mobile clients via …

12/20/13:

20:30 Ticket #472 (ssl_client_verify fails in Safari) updated by Catchall Account
Deleting the certificate and key in OSX solves this issue, but it is …
19:56 Ticket #472 (ssl_client_verify fails in Safari) created by Catchall Account
nginx version: nginx/1.4.1 (Ubuntu), client: Safari 7.0.1 …
13:26 Ticket #451 (Turn NGX_SSL_BUFSIZE into a configuration directive) closed by Maxim Dounin
fixed: The ssl_buffer_size directive added by a297b7ad6f94. Not that it …
13:22 Ticket #449 (New variable for SubjectAltName in the client SSL certificate) closed by Maxim Dounin
worksforme: A client certificate can be obtained via $ssl_client_cert and …

12/19/13:

17:20 Ticket #329 (resolver: incorrect TTL used with A+CNAME response) closed by Ruslan Ermilov
fixed
17:20 Ticket #329 (resolver: incorrect TTL used with A+CNAME response) updated by Ruslan Ermilov <ru@…>
In 8958656a8060ff395b3f1a417266ebf261136625/nginx: […]
16:25 Ticket #471 (GZIP does not compress 201 Created Responses) updated by Craig Minihan
This seems like a major omission for running any REST API via NGiNX. …
15:43 Ticket #471 (GZIP does not compress 201 Created Responses) closed by Maxim Dounin
invalid: This is intended behaviour, see ticket #394.
15:25 Ticket #471 (GZIP does not compress 201 Created Responses) updated by Craig Minihan
I can confirm that changing ngx_http_gzip_filter_module.c as follows …
13:22 Ticket #471 (GZIP does not compress 201 Created Responses) updated by Craig Minihan
I just realised the -V above is actually -v, here is the real -V: …
13:20 Ticket #471 (GZIP does not compress 201 Created Responses) created by Craig Minihan
I have NGiNX running as a proxy for CouchDB. The CouchDB REST API …

12/18/13:

20:03 Ticket #409 (Move syslog support for the ngx_http_log_module into NGINX open source) updated by Николай Брыскин
+1
14:17 Ticket #279 (mime.types: audio/ogg for .opus files) closed by Maxim Dounin
wontfix: The decision is not related to support by any browsers, but rather to …
09:46 Ticket #279 (mime.types: audio/ogg for .opus files) reopened by Steffen Weber
09:46 Ticket #279 (mime.types: audio/ogg for .opus files) updated by Steffen Weber
Opus is supported by Firefox and Chrome (see …

12/17/13:

14:00 Milestone 1.5.8 completed
Status: released [[http://nginx.org/en/CHANGES-1.5 | 1.5.8 …
13:05 Ticket #437 (Add Support for SPDY/3) updated by maxim
Status, Owner changed
12:37 Ticket #465 (OCSP stapling fails to query StartCom's OCSP responder in HTTP 1.1) closed by Maxim Dounin
worksforme: Replying to Rich Midwinter <rich.midwinter@gmail.com>: > …
12:31 Ticket #465 (OCSP stapling fails to query StartCom's OCSP responder in HTTP 1.1) updated by Maxim Dounin
Replying to David Huang <linshunghuang@gmail.com>: > I'm …

12/16/13:

23:47 Ticket #465 (OCSP stapling fails to query StartCom's OCSP responder in HTTP 1.1) updated by Rich Midwinter
I've seen the same errors. However, with ssl_stapling_verify off; and …
12:09 Ticket #79 (if-modified-since etc. should be used to update cache) closed by Maxim Dounin
fixed: The …

12/14/13:

20:16 Ticket #377 (etag не отдается с gzip) updated by Michael Fischer
[comment retracted]

12/13/13:

11:47 Ticket #470 (http_mp4_module is not seeking) closed by Maxim Dounin
worksforme: Try looking into error log. Most likely, the mp4 file in question has …
11:22 Ticket #470 (http_mp4_module is not seeking) created by Serkan Kirmizi
I have 2 servers. One of them has nginx 1.2.4 installed and the other …

12/12/13:

01:20 Ticket #468 (X509_NAME_oneline and strings) updated by Jeffrey Walton
> ... it's just a question how do you define "properly". :)

12/11/13:

19:27 Ticket #469 (OpenSSL Static Locks Patch) closed by Maxim Dounin
wontfix
19:25 Ticket #468 (X509_NAME_oneline and strings) closed by Maxim Dounin
worksforme: Interesting, but looks unrelated. And, BTW, X509_NAME_oneline() …
17:33 ngx-openssl-locks.diff attached to Ticket #469 by Jeffrey Walton
OpenSSL static locks
17:33 Ticket #469 (OpenSSL Static Locks Patch) created by Jeffrey Walton
This should work for OpenSSL if/when nginx offers threads. My …
17:24 Ticket #377 (etag не отдается с gzip) updated by Maxim Dounin
No. As far as I understand, Apache approach is actually wrong as …
17:21 Ticket #468 (X509_NAME_oneline and strings) created by Jeffrey Walton
X509_NAME_oneline does not handle embedded NULLs properly (among other …
16:54 Ticket #377 (etag не отдается с gzip) updated by Michael Grosser
It looks like apache is just appending -gzip to the original etag to …

12/10/13:

17:23 Ticket #346 (Writing connection leak while SPDY enabled) closed by Valentin V. Bartenev
fixed: A writing connection leak was fixed in a279d2a33dbf (will be released …
11:28 Ticket #467 (Transfer-Encoding: chunked и proxy_pass) closed by Maxim Dounin
invalid: Простите, но это не то место, куда следует обращаться за помощью. …
03:26 Ticket #467 (Transfer-Encoding: chunked и proxy_pass) created by Александр Гурьянов
Добрый день у меня есть приложение на java которое использует в …

12/09/13:

12:19 Ticket #459 (HTTP 304 NOT MODIFIED should not set Content-Length) closed by Maxim Dounin
invalid: It's not an nginx responsibility to fix backend bugs.
12:02 Ticket #466 (Sample nginx.con includes SSLv2, lacks TLSv1.1 and TLSv1.2 protocols) updated by Jeffrey Walton
> Relevant comments in the configuration were already > adjusted to …
12:01 Ticket #464 (ngx_http_ssl_module and ssl_ciphers (use of RC4)) updated by Jeffrey Walton
> Documentation doesn't try to suggest any settings That's not how it …
11:50 Ticket #466 (Sample nginx.con includes SSLv2, lacks TLSv1.1 and TLSv1.2 protocols) closed by Maxim Dounin
invalid: Relevant comments in the configuration were already adjusted to more …
11:40 Ticket #464 (ngx_http_ssl_module and ssl_ciphers (use of RC4)) closed by Maxim Dounin
invalid: Documentation doesn't try to suggest any settings, it just shows how …
11:18 Ticket #460 (Clang reports use-after-free in core/ngx_resolver.c) closed by Ruslan Ermilov
invalid
10:12 Ticket #460 (Clang reports use-after-free in core/ngx_resolver.c) updated by Ruslan Ermilov
An existing cache entry (rn) can be in one of two queues: resend …
00:28 Ticket #465 (OCSP stapling fails to query StartCom's OCSP responder in HTTP 1.1) updated by David Huang
I'm not sure whether Nginx's OCSP query fails exactly because of the …

12/08/13:

22:02 Ticket #466 (Sample nginx.con includes SSLv2, lacks TLSv1.1 and TLSv1.2 protocols) created by Jeffrey Walton
I think there's an opportunity for improvement in the nginx sample …
18:57 sub.class1.server.ca.pem attached to Ticket #465 by David Huang
Issuer Certificate
18:57 ssl.crt attached to Ticket #465 by David Huang
Server certificate
18:56 Ticket #465 (OCSP stapling fails to query StartCom's OCSP responder in HTTP 1.1) created by David Huang
Currently, Nginx's OCSP stapling doesn't work with StartCom's OCSP …
14:55 Ticket #464 (ngx_http_ssl_module and ssl_ciphers (use of RC4)) created by Jeffrey Walton
From http://nginx.org/en/docs/http/ngx_http_ssl_module.html: […] …
13:54 Ticket #459 (HTTP 304 NOT MODIFIED should not set Content-Length) reopened by robin.smidsrod.no
Reopened to clarify behavior on FastCGI proxying.
12:34 Ticket #463 (Server: OpenSSL options for modern OpenSSL) updated by Jeffrey Walton
> It tries to protect under version checks what don't need to be …
12:23 Ticket #462 (Server: OpenSSL Safari Workaround (SSL_OP_SAFARI_ECDHE_ECDSA_BUG)) updated by Jeffrey Walton
> Given the above, setting the option will likely cause more harm than …
12:15 Ticket #462 (Server: OpenSSL Safari Workaround (SSL_OP_SAFARI_ECDHE_ECDSA_BUG)) closed by Maxim Dounin
wontfix: It's not yet available in any released version of the OpenSSL, and …
11:55 Ticket #461 (Client: OpenSSL SSLv2 options set even with SSL_OP_NO_SSLv2) closed by Maxim Dounin
worksforme: It doesn't make sense. The SSL_OP_MICROSOFT_SESS_ID_BUG and …
11:39 Ticket #463 (Server: OpenSSL options for modern OpenSSL) closed by Maxim Dounin
worksforme: The patch is wrong. It tries to protect under version checks what …
11:12 Ticket #463 (Server: OpenSSL options for modern OpenSSL) created by Jeffrey Walton
A number of the bug workarounds applied to the server can be forgone …
06:41 Ticket #462 (Server: OpenSSL Safari Workaround (SSL_OP_SAFARI_ECDHE_ECDSA_BUG)) created by Jeffrey Walton
It appears there is an opportunity for improvement in the server for …
06:19 Ticket #461 (Client: OpenSSL SSLv2 options set even with SSL_OP_NO_SSLv2) created by Jeffrey Walton
SSL_OP_NO_SSLv2 precludes SSL_OP_MICROSOFT_SESS_ID_BUG and …

12/07/13:

21:07 scan-build.tar.gz attached to Ticket #460 by Jeffrey Walton
Clang 3.3 scan-build results
21:06 Ticket #460 (Clang reports use-after-free in core/ngx_resolver.c) created by Jeffrey Walton
Clang 3.3 flagged two use-after-free's in core/ngx_resolver.c. I'm …
18:35 Ticket #459 (HTTP 304 NOT MODIFIED should not set Content-Length) updated by robin.smidsrod.no
Okay. Thanks for clarifying. I guess I need to complain to the browser …

12/06/13:

21:31 Ticket #458 (Win32: autoindex module doesn't support Unicode names) updated by Kroward 1
I forgot to mention than behavior of autoindex module depends on …
19:38 Ticket #458 (Win32: autoindex module doesn't support Unicode names) updated by Maxim Dounin
Status changed
Ack, it needs to be fixed. The patch in question needs more work. (And …
19:33 Ticket #457 (Win32: ngx_utf8_to_utf16 doesn't allow file names outside U+FFFF) updated by Maxim Dounin
Keywords, Status changed
Correct, Windows 2000 and newer supports UTF-16, not just UCS-2. This …
15:40 Ticket #459 (HTTP 304 NOT MODIFIED should not set Content-Length) closed by Maxim Dounin
invalid: The Content-Length header is not returned for 304 responses, it's …
15:12 Ticket #459 (HTTP 304 NOT MODIFIED should not set Content-Length) created by robin.smidsrod.no
Using nginx from the stable Ubuntu PPA. Had a long conversation with …
13:43 win32_read_dir.patch attached to Ticket #458 by Kroward 1
Win32: WCHAR support it ngx_read_dir() to enable Unicode in autoindex
13:43 Ticket #458 (Win32: autoindex module doesn't support Unicode names) created by Kroward 1
Functions for traversing directories use ANSI versions of …

12/05/13:

11:21 U29E8A.7z attached to Ticket #457 by Kroward 1
Example of a file with problematic unicode name (should be extracted …
11:20 Ticket #457 (Win32: ngx_utf8_to_utf16 doesn't allow file names outside U+FFFF) created by Kroward 1
Function ngx_utf8_to_utf16() in 'win32\ngx_files.c' return error on …
Note: See TracTimeline for information about the timeline view.