Timeline



11/18/16:

17:10 Ticket #1134 (CVE-2016-1247) updated by Maxim Dounin
Or you may even disable symlinks in your OS completely. The fact is …
16:33 Ticket #1134 (CVE-2016-1247) updated by mikhirev@…
Well, there is a much simpler solution: open logs with O_NOFOLLOW.
15:35 Ticket #1134 (CVE-2016-1247) updated by Maxim Dounin
Type changed
Better solution would be to implement passing open file descriptors …
15:06 Ticket #1134 (CVE-2016-1247) created by mikhirev@…
Hi! Recently there was a vulnerability reported against Debian nginx …
13:49 Ticket #1133 (ngx_http_limit_req_module . When zone storage is exhausted, all the ...) updated by Maxim Dounin
Component changed
The behaviour is as expected: when a memory allocation from a shared …
13:04 Ticket #1131 (No error about wrong config) closed by Maxim Dounin
duplicate: To see full configuration loaded use nginx -T. Duplicate of #933.
09:47 Ticket #1133 (ngx_http_limit_req_module . When zone storage is exhausted, all the ...) updated by antonyhong@…
The OS is windows server 2008 R2 64bit
07:50 Ticket #1133 (ngx_http_limit_req_module . When zone storage is exhausted, all the ...) created by antonyhong@…
Hi,I want to validated 'If the zone storage is exhausted, the server …
00:15 Ticket #1132 (preread post request body not returned for h2) created by malini.kothapalli@…
I am experimenting with POST over h2. The use case is to read full …

11/17/16:

20:20 Ticket #1131 (No error about wrong config) created by KES777@…
When you in your http { } section do: include …
15:51 Ticket #1130 (GeoIP module does not work on 1.10.2) closed by Maxim Dounin
invalid
15:50 Ticket #1130 (GeoIP module does not work on 1.10.2) updated by hristo.iliev@…
Ouch that's right. I forgot fastcgi_params. I'm really sorry. Thank …
15:45 Ticket #1130 (GeoIP module does not work on 1.10.2) updated by Maxim Dounin
The GEOIP_COUNTRY_CODE is not something that is expected to appear …
15:35 Ticket #1130 (GeoIP module does not work on 1.10.2) updated by hristo.iliev@…
I have two installations of nginx - 1.10.1 and 1.10.2 on same server …
15:14 Ticket #1130 (GeoIP module does not work on 1.10.2) updated by Maxim Dounin
The geoip module is not expected to set GEOIP_COUNTRY_CODE. If you see …
14:57 Ticket #936 (For security purposes it is necessary to remove or change the "server" ...) updated by Valentin V. Bartenev
Replying to BenBE@…: > @vbart: Not displaying the software …
14:46 Ticket #936 (For security purposes it is necessary to remove or change the "server" ...) updated by BenBE@…
As the headers-more module isn't included with the default …
14:36 Ticket #1130 (GeoIP module does not work on 1.10.2) created by hristo.iliev@…
http_geoip_module stopped working in version 1.10.2 . With same …
13:11 Ticket #1129 (Allow overriding/clearing Server HTTP response header) closed by Maxim Dounin
duplicate: Duplicate of #936.

11/16/16:

21:27 Ticket #1127 (set_real_ip_from not working in 1.10.x) updated by exobuzz@…
Looks like it is a problem specific to the dotdeb packages so will …
19:59 Ticket #1129 (Allow overriding/clearing Server HTTP response header) created by BenBE@…
nginx should provide for a sensible way to override the value returned …
17:52 Ticket #1128 (HTTP/2 with ngx_http_auth_request_module causes some JSON payloads to ...) updated by kcannon.gaikai.com@…
We are not able to reproduce this issue without using 3-rd party …
14:50 Ticket #857 (Problem with multiline $ssl_client_cert HTTP header in proxy mode) updated by dren.dk@…
I've been bitten by this exact problem, here's my proposed fix, which …
14:29 Ticket #1128 (HTTP/2 with ngx_http_auth_request_module causes some JSON payloads to ...) updated by Valentin V. Bartenev
Are you able to reproduce the issue without 3-rd party modules?

11/15/16:

22:38 app-error-log3.txt attached to Ticket #1128 by kcannon.gaikai.com@…
22:38 app-error-log2.txt attached to Ticket #1128 by kcannon.gaikai.com@…
22:37 app-error-log1.txt attached to Ticket #1128 by kcannon.gaikai.com@…
22:33 nginx-error-log.txt attached to Ticket #1128 by kcannon.gaikai.com@…
nginx error log
20:00 Ticket #1127 (set_real_ip_from not working in 1.10.x) closed by Maxim Dounin
duplicate: Both configurations provided work fine as well. Using $remote_addr
18:38 Ticket #1127 (set_real_ip_from not working in 1.10.x) updated by exobuzz@…
This might help - From another user from …
16:51 Ticket #1127 (set_real_ip_from not working in 1.10.x) updated by Maxim Dounin
Just tested, and it works fine here. Tested with the following …
15:25 Milestone 1.11.6 completed
Status: released Trunk: mainline * Small assorted …
14:43 Ticket #1128 (HTTP/2 with ngx_http_auth_request_module causes some JSON payloads to ...) updated by Valentin V. Bartenev
Could you provide [http://nginx.org/en/docs/debugging_log.html a …
00:35 Ticket #1128 (HTTP/2 with ngx_http_auth_request_module causes some JSON payloads to ...) created by kcannon.gaikai.com@…
We have an internal tool that requires all requests to be ran through …

11/14/16:

18:09 Ticket #1127 (set_real_ip_from not working in 1.10.x) created by exobuzz@…
nginx version: Linux 4.7.0-0.bpo.1-amd64 #1 SMP Debian …
14:56 Ticket #1126 (No error logged when hitting upstream connect timeout over HTTPS) closed by Maxim Dounin
fixed: Fix committed.
14:30 Ticket #1126 (No error logged when hitting upstream connect timeout over HTTPS) updated by Maxim Dounin <mdounin@…>
In [changeset:"d8d037f204840a98f0562a05c4d7565adb14c802/nginx"

11/10/16:

14:38 Ticket #1088 (Add variable $ssl_dhe (possible values: curve name or dh<keylength>, ...) updated by Maxim Dounin
Note that the patch to save the curve choice in nginx's session data …
14:25 Ticket #844 (Allow support for different protocols on different hosts (same machine)) updated by Maxim Dounin
Duplicate of #676.
14:24 Ticket #676 (Different ssl_protocols per server won`t work) updated by Maxim Dounin
See also #844.
04:42 Ticket #376 (log file reopen should pass opened fd from master process) updated by Jérôme Poulin
To make matter worse, the log is always opened using O_CREAT, …
00:56 Ticket #1088 (Add variable $ssl_dhe (possible values: curve name or dh<keylength>, ...) updated by bblack.wikimedia.org@…
Update on the above: I finally got around to digging into why the …

11/09/16:

15:49 Ticket #1126 (No error logged when hitting upstream connect timeout over HTTPS) updated by Maxim Dounin
Status changed
Thanks for tracing this. Additionally, the error should be 504, not …
13:34 Ticket #1126 (No error logged when hitting upstream connect timeout over HTTPS) created by moshisushi@…
It seems like no errors are logged, not even using "error_log …

11/08/16:

11:33 Ticket #1059 (syntax check error when an upstream is used in proxy_pass using both ...) updated by Ruslan Ermilov
In [changeset:"640e1e778de63f46fcd18ab5be149d6a39599868/nginx"

11/07/16:

21:51 Ticket #1125 (nginx package upgrade on ubuntu 14.04 rewrites ssl config) closed by Maxim Dounin
invalid
14:38 Ticket #1125 (nginx package upgrade on ubuntu 14.04 rewrites ssl config) updated by aljazceru@…
bug report submitted. …
13:40 Ticket #1125 (nginx package upgrade on ubuntu 14.04 rewrites ssl config) updated by Thomas Ward
Bugs in the Ubuntu packaging belong on Launchpad - it is not …
12:04 Ticket #1125 (nginx package upgrade on ubuntu 14.04 rewrites ssl config) created by aljazceru@…
When upgrading nginx packages on ubuntu 14.04 update rewrites …

11/02/16:

13:09 Ticket #1124 (4** pages cache don't appear in file cache) updated by Nyoroon@…
Replying to mdounin: > When using proxy_intercept_errors / …
12:51 Ticket #1124 (4** pages cache don't appear in file cache) closed by Maxim Dounin
invalid: When using proxy_intercept_errors / fastcgi_intercept_errors, …
09:27 config.txt attached to Ticket #1124 by Nyoroon@…
nginx config
09:27 Ticket #1124 (4** pages cache don't appear in file cache) created by Nyoroon@…
4-- error pages don't appear in file cache, but somehow cached (in …

11/01/16:

00:15 Ticket #1102 (keepalive_requests is not supported for HTTP/2 connections) updated by Alexey Ivanov
This should be fixed by: http://hg.nginx.org/nginx/rev/9027991e2f37 […]

10/31/16:

20:12 Ticket #1117 (ngx_http_v2_module documentation says HTTP/2 is experimental) updated by Jacques Chester
Sorry for the slow reply, I didn't realise Trac hadn't collected my …
09:39 Ticket #1123 (Include timezone in error logs) created by joshuaspence@…
Currently, nginx access logs include a timestamp (via $time_local) …

10/29/16:

19:13 Ticket #1122 (nginx appears to ignore add_header when 404 handling (possibly ...) closed by Maxim Dounin
invalid: Quoting docs: Adds the …
18:14 Ticket #1122 (nginx appears to ignore add_header when 404 handling (possibly ...) updated by mike503@…
Filed against the wrong version, but the behavior has been the same …
07:44 Ticket #860 (NGINX 1.9.9 fails to build against OpenSSL 1.1.0) updated by ctrochalakis@…
That's great. Thanks a lot Maxim.
00:43 Ticket #1122 (nginx appears to ignore add_header when 404 handling (possibly ...) created by mike503@…
No matter where I put in an add_header in my config, it seems like …

10/28/16:

18:32 Ticket #215 (SSL: decryption failed or bad record mac with upstream servers) updated by bblack.wikimedia.org@…
FYI in case anyone else searches up this ticket, filed upstream …
09:16 Ticket #1097 (Nginx worker process exited on signal 11) updated by begracyber@…
Replying to adushein.sports.ru@…: > I have 2 nginx …
04:56 Ticket #376 (log file reopen should pass opened fd from master process) updated by MTecknology@…
What would it take to get some attention drawn to this bug? In …

10/27/16:

21:52 Ticket #215 (SSL: decryption failed or bad record mac with upstream servers) updated by bblack.wikimedia.org@…
Update: taking some cues from older OpenSSL bug reports, I tried …
19:03 Ticket #215 (SSL: decryption failed or bad record mac with upstream servers) updated by Maxim Dounin
> It's not reported at the "error" level. For me it's reported at the …
18:36 Ticket #215 (SSL: decryption failed or bad record mac with upstream servers) updated by bblack.wikimedia.org@…
Probably deserves a new ticket at least, but in any case: I've …
15:12 Ticket #475 (http_mp4_module seeking problem: "start time is out mp4 stts samples") closed by Maxim Dounin
fixed: Fix committed.
15:10 Ticket #475 (http_mp4_module seeking problem: "start time is out mp4 stts samples") updated by Maxim Dounin <mdounin@…>
In [changeset:"b123eae3fd4e72e430247690e0cec5838b546055/nginx"

10/26/16:

17:48 Ticket #283 (proxy_method does not support variable dereferencing) closed by Maxim Dounin
fixed: Path by Dmitry committed, ca27074f8f0f.
17:47 Ticket #283 (proxy_method does not support variable dereferencing) reopened by Maxim Dounin
13:39 Ticket #1121 (Unexpected listen directive behaviour when 'listen PORT' and 'listen ...) closed by Maxim Dounin
invalid: In the configuration above site2.com is expected to answer requests on …
08:52 Ticket #1121 (Unexpected listen directive behaviour when 'listen PORT' and 'listen ...) created by agugnin@…
== Way to reproduce: == server IP: 10.11.12.13 site1.com -> …

10/25/16:

23:03 Ticket #283 (proxy_method does not support variable dereferencing) updated by dilaz03@…
Updated patches: nginx: …

10/24/16:

20:07 Ticket #1120 (ngx_http_redis doesn't support redis AUTH) closed by Maxim Dounin
invalid: There is no redis module in nginx. The page you are referring to is a …
20:01 Ticket #1120 (ngx_http_redis doesn't support redis AUTH) created by onnimonni@…
The default redis module: …
07:31 Ticket #1119 (Gzip_types support pattern matching) created by jshen.thoughtworks.com@…
We have a backend api which will return response content-type with …

10/21/16:

13:01 Ticket #1118 (Nginx refuses to allow access to WAR files) closed by Maxim Dounin
worksforme: Most likely you are facing SELinux restrictions, try disabling SELinux …
12:56 Ticket #1117 (ngx_http_v2_module documentation says HTTP/2 is experimental) updated by Maxim Dounin
The HTTP/2 protocol is new and known to have various implementation …
08:19 Ticket #1118 (Nginx refuses to allow access to WAR files) updated by Ilyas Bakirov
nginx is running under "nginx" user and file has permissions: […]

10/20/16:

20:46 Ticket #1118 (Nginx refuses to allow access to WAR files) updated by steowens@…
/etc/nginx/conf.d is empty /etc/nginx/default.d is empty
20:44 Ticket #1118 (Nginx refuses to allow access to WAR files) created by steowens@…
No matter what I do to enable access to a war file I am trying to use …
20:34 Ticket #1117 (ngx_http_v2_module documentation says HTTP/2 is experimental) updated by Jacques Chester
Sorry, should've filed against version 1.11.x. We also build binaries …
20:33 Ticket #1117 (ngx_http_v2_module documentation says HTTP/2 is experimental) created by Jacques Chester
Specifically: "The module is experimental, caveat emptor applies." …
13:20 Ticket #1106 (Stale workers not exiting after reload (with HTTP/2 long poll requests)) closed by Valentin Bartenev <vbart@…>
fixed: In [changeset:"5e95b9fb33b71d627daaeeded12f50c0b46fe965/nginx"
09:13 Ticket #1116 (sub_filter and addition - bug) closed by Roman Arutyunyan
fixed: This was fixed in 1.11.5. http://hg.nginx.org/nginx/rev/ebba2f980489
07:42 Ticket #1116 (sub_filter and addition - bug) created by gglater62@…
Addition with sub_filter and php-fpm is bogus. Here is fragment of …

10/19/16:

16:43 Ticket #1115 (Skeleton for dynamic module's config file shows invalid example) closed by Maxim Dounin
invalid: First of all, please note that you are reading a wiki, not a …
15:45 Ticket #1088 (Add variable $ssl_dhe (possible values: curve name or dh<keylength>, ...) updated by bblack.wikimedia.org@…
FWIW, we hacked up a local nginx-1.11 patch to log ECDHE curve choice …
12:51 Ticket #1115 (Skeleton for dynamic module's config file shows invalid example) created by Whissi@…
Hi, documentation at …
Note: See TracTimeline for information about the timeline view.