Timeline



11/22/16:

20:34 Ticket #1088 (Add variable $ssl_dhe (possible values: curve name or dh<keylength>, ...) updated by Maxim Dounin
Keywords changed
20:34 Ticket #927 (Set $ssl_session_reused to "t" for session ticket reuse and set ...) updated by Maxim Dounin
Keywords changed
20:26 Ticket #224 (Args Delimiter) updated by Maxim Dounin
Sensitive changed
See also #1066.
20:25 Ticket #1066 (ngx_http_parse: query seperator bug (missing W3C recommended support ...) closed by Maxim Dounin
duplicate: Duplicate of #224.
20:17 Ticket #708 (Documentation improvement: SSL chain verification with SNI support) updated by Maxim Dounin
Component changed
20:13 Ticket #366 (Feature that return ssl_client_s_dn according to the RFC 2253) closed by Maxim Dounin
fixed: Format of the $ssl_client_s_dn and $ssl_client_i_dn variables was …
20:06 Ticket #762 (procol version integer overflow, downgrade to 0.9) closed by Maxim Dounin
fixed
18:43 Ticket #1038 (Nginx doesn't retry to start worker process when fork() error) closed by Maxim Dounin
wontfix
18:40 Ticket #1094 (CRL check for Estonian ID cards fails) updated by Maxim Dounin
The provided archive does not contain the client certificate used for …
14:31 Ticket #1141 (duplicate "60394" address and port pair in /etc/nginx/nginx.conf) closed by Maxim Dounin
duplicate: Duplicate of #1021.
14:24 Ticket #1140 (ssi module ignores "default" parameter of echo) closed by Maxim Dounin
invalid: Works fine here: […] […] Note that the check in question, `if …
13:11 Ticket #1141 (duplicate "60394" address and port pair in /etc/nginx/nginx.conf) created by wrfly@…
# nginx -t 2016/11/22 13:11:11 [emerg] 1#1: duplicate "60394" address …
12:50 Ticket #1102 (keepalive_requests is not supported for HTTP/2 connections) closed by Valentin V. Bartenev
fixed: The keepalive_requests directive isn't supposed to work with HTTP/2. …
12:46 Ticket #1138 (Module Request PageSpeed) closed by Maxim Dounin
wontfix: Мы не добавляем в репозиторий пакетов сторонние модули. Вы можете …
12:39 Ticket #1132 (preread post request body not returned for h2) updated by Valentin V. Bartenev
The request body in HTTP/2 comes in separate frames. If all such …
12:30 Ticket #1128 (HTTP/2 with ngx_http_auth_request_module causes some JSON payloads to ...) closed by Valentin V. Bartenev
worksforme: I wasn't able to reproduce it too with HTTP/2 and the auth request …

11/21/16:

23:03 Ticket #1140 (ssi module ignores "default" parameter of echo) created by florian.dold@…
When using […] the default is never considered. The bug is in …
20:49 Ticket #1139 (Продвижение HTTPS и HTTP2 через автоматическую установку сертификатов) created by v.badalyan.open-bs.ru@…
Прошу рассмотреть возможность добавления функционала получения SSL …
20:46 Ticket #1138 (Module Request PageSpeed) created by v.badalyan.open-bs.ru@…
Прошу добавить в официальный репозиторий модуль от Google отдельным …
13:41 Ticket #1137 (Default cipherlist contains HTTP/2 blacklisted ciphers (in first position)) closed by Maxim Dounin
duplicate: Duplicate of #794.
13:40 Ticket #1135 (Connections timing out after upgrading to 1.10.2) closed by Valentin V. Bartenev
invalid: According to the error log message, this issue is in the 3rd-party …
13:13 Ticket #1137 (Default cipherlist contains HTTP/2 blacklisted ciphers (in first position)) created by Valerian Saliou
Hello, Some people reported me not being able to connect to my HTTP/2 …
11:00 Ticket #1126 (No error logged when hitting upstream connect timeout over HTTPS) updated by Andrey Zelenkov <zelenkov@…>
In [changeset:"cd4395a68fc66cd434eaee6cbff727481229af7f/nginx-tests"
10:41 Ticket #1136 (`ngx_stream_proxy_process_connection` does not terminate udp session ...) closed by Roman Arutyunyan
wontfix: What were you expecting by setting "proxy_timeout 0;" ? In your case …
03:16 Ticket #1136 (`ngx_stream_proxy_process_connection` does not terminate udp session ...) created by lrita@…
I have a service which collects some statistics informations by udp …
02:09 Ticket #1133 (ngx_http_limit_req_module . When zone storage is exhausted, all the ...) updated by antonyhong@…
Replying to mdounin: Thank you for solving my doubts.The …

11/19/16:

19:12 Ticket #1135 (Connections timing out after upgrading to 1.10.2) updated by otto.seravo.fi@…
Nchan has a somewhat similar report related to nchan crashing when …
17:34 Ticket #1134 (CVE-2016-1247) updated by mikhirev@…
Of course I agree that symlinks exist for good reason, but I don't see …
07:25 Ticket #1135 (Connections timing out after upgrading to 1.10.2) created by anttiviljami@…
After upgrading from 1.10.1 without ALPN support to 1.10.2 with ALPN …

11/18/16:

17:10 Ticket #1134 (CVE-2016-1247) updated by Maxim Dounin
Or you may even disable symlinks in your OS completely. The fact is …
16:33 Ticket #1134 (CVE-2016-1247) updated by mikhirev@…
Well, there is a much simpler solution: open logs with O_NOFOLLOW.
15:35 Ticket #1134 (CVE-2016-1247) updated by Maxim Dounin
Type changed
Better solution would be to implement passing open file descriptors …
15:06 Ticket #1134 (CVE-2016-1247) created by mikhirev@…
Hi! Recently there was a vulnerability reported against Debian nginx …
13:49 Ticket #1133 (ngx_http_limit_req_module . When zone storage is exhausted, all the ...) updated by Maxim Dounin
Component changed
The behaviour is as expected: when a memory allocation from a shared …
13:04 Ticket #1131 (No error about wrong config) closed by Maxim Dounin
duplicate: To see full configuration loaded use nginx -T. Duplicate of #933.
09:47 Ticket #1133 (ngx_http_limit_req_module . When zone storage is exhausted, all the ...) updated by antonyhong@…
The OS is windows server 2008 R2 64bit
07:50 Ticket #1133 (ngx_http_limit_req_module . When zone storage is exhausted, all the ...) created by antonyhong@…
Hi,I want to validated 'If the zone storage is exhausted, the server …
00:15 Ticket #1132 (preread post request body not returned for h2) created by malini.kothapalli@…
I am experimenting with POST over h2. The use case is to read full …

11/17/16:

20:20 Ticket #1131 (No error about wrong config) created by KES777@…
When you in your http { } section do: include …
15:51 Ticket #1130 (GeoIP module does not work on 1.10.2) closed by Maxim Dounin
invalid
15:50 Ticket #1130 (GeoIP module does not work on 1.10.2) updated by hristo.iliev@…
Ouch that's right. I forgot fastcgi_params. I'm really sorry. Thank …
15:45 Ticket #1130 (GeoIP module does not work on 1.10.2) updated by Maxim Dounin
The GEOIP_COUNTRY_CODE is not something that is expected to appear …
15:35 Ticket #1130 (GeoIP module does not work on 1.10.2) updated by hristo.iliev@…
I have two installations of nginx - 1.10.1 and 1.10.2 on same server …
15:14 Ticket #1130 (GeoIP module does not work on 1.10.2) updated by Maxim Dounin
The geoip module is not expected to set GEOIP_COUNTRY_CODE. If you see …
14:57 Ticket #936 (For security purposes it is necessary to remove or change the "server" ...) updated by Valentin V. Bartenev
Replying to BenBE@…: > @vbart: Not displaying the software …
14:46 Ticket #936 (For security purposes it is necessary to remove or change the "server" ...) updated by BenBE@…
As the headers-more module isn't included with the default …
14:36 Ticket #1130 (GeoIP module does not work on 1.10.2) created by hristo.iliev@…
http_geoip_module stopped working in version 1.10.2 . With same …
13:11 Ticket #1129 (Allow overriding/clearing Server HTTP response header) closed by Maxim Dounin
duplicate: Duplicate of #936.

11/16/16:

21:27 Ticket #1127 (set_real_ip_from not working in 1.10.x) updated by exobuzz@…
Looks like it is a problem specific to the dotdeb packages so will …
19:59 Ticket #1129 (Allow overriding/clearing Server HTTP response header) created by BenBE@…
nginx should provide for a sensible way to override the value returned …
17:52 Ticket #1128 (HTTP/2 with ngx_http_auth_request_module causes some JSON payloads to ...) updated by kcannon.gaikai.com@…
We are not able to reproduce this issue without using 3-rd party …
14:50 Ticket #857 (Problem with multiline $ssl_client_cert HTTP header in proxy mode) updated by dren.dk@…
I've been bitten by this exact problem, here's my proposed fix, which …
14:29 Ticket #1128 (HTTP/2 with ngx_http_auth_request_module causes some JSON payloads to ...) updated by Valentin V. Bartenev
Are you able to reproduce the issue without 3-rd party modules?

11/15/16:

22:38 app-error-log3.txt attached to Ticket #1128 by kcannon.gaikai.com@…
22:38 app-error-log2.txt attached to Ticket #1128 by kcannon.gaikai.com@…
22:37 app-error-log1.txt attached to Ticket #1128 by kcannon.gaikai.com@…
22:33 nginx-error-log.txt attached to Ticket #1128 by kcannon.gaikai.com@…
nginx error log
20:00 Ticket #1127 (set_real_ip_from not working in 1.10.x) closed by Maxim Dounin
duplicate: Both configurations provided work fine as well. Using $remote_addr
18:38 Ticket #1127 (set_real_ip_from not working in 1.10.x) updated by exobuzz@…
This might help - From another user from …
16:51 Ticket #1127 (set_real_ip_from not working in 1.10.x) updated by Maxim Dounin
Just tested, and it works fine here. Tested with the following …
15:25 Milestone 1.11.6 completed
Status: released Trunk: mainline * Small assorted …
14:43 Ticket #1128 (HTTP/2 with ngx_http_auth_request_module causes some JSON payloads to ...) updated by Valentin V. Bartenev
Could you provide [http://nginx.org/en/docs/debugging_log.html a …
00:35 Ticket #1128 (HTTP/2 with ngx_http_auth_request_module causes some JSON payloads to ...) created by kcannon.gaikai.com@…
We have an internal tool that requires all requests to be ran through …

11/14/16:

18:09 Ticket #1127 (set_real_ip_from not working in 1.10.x) created by exobuzz@…
nginx version: Linux 4.7.0-0.bpo.1-amd64 #1 SMP Debian …
14:56 Ticket #1126 (No error logged when hitting upstream connect timeout over HTTPS) closed by Maxim Dounin
fixed: Fix committed.
14:30 Ticket #1126 (No error logged when hitting upstream connect timeout over HTTPS) updated by Maxim Dounin <mdounin@…>
In [changeset:"d8d037f204840a98f0562a05c4d7565adb14c802/nginx"

11/10/16:

14:38 Ticket #1088 (Add variable $ssl_dhe (possible values: curve name or dh<keylength>, ...) updated by Maxim Dounin
Note that the patch to save the curve choice in nginx's session data …
14:25 Ticket #844 (Allow support for different protocols on different hosts (same machine)) updated by Maxim Dounin
Duplicate of #676.
14:24 Ticket #676 (Different ssl_protocols per server won`t work) updated by Maxim Dounin
See also #844.
04:42 Ticket #376 (log file reopen should pass opened fd from master process) updated by Jérôme Poulin
To make matter worse, the log is always opened using O_CREAT, …
00:56 Ticket #1088 (Add variable $ssl_dhe (possible values: curve name or dh<keylength>, ...) updated by bblack.wikimedia.org@…
Update on the above: I finally got around to digging into why the …

11/09/16:

15:49 Ticket #1126 (No error logged when hitting upstream connect timeout over HTTPS) updated by Maxim Dounin
Status changed
Thanks for tracing this. Additionally, the error should be 504, not …
13:34 Ticket #1126 (No error logged when hitting upstream connect timeout over HTTPS) created by moshisushi@…
It seems like no errors are logged, not even using "error_log …

11/08/16:

11:33 Ticket #1059 (syntax check error when an upstream is used in proxy_pass using both ...) updated by Ruslan Ermilov
In [changeset:"640e1e778de63f46fcd18ab5be149d6a39599868/nginx"

11/07/16:

21:51 Ticket #1125 (nginx package upgrade on ubuntu 14.04 rewrites ssl config) closed by Maxim Dounin
invalid
14:38 Ticket #1125 (nginx package upgrade on ubuntu 14.04 rewrites ssl config) updated by aljazceru@…
bug report submitted. …
13:40 Ticket #1125 (nginx package upgrade on ubuntu 14.04 rewrites ssl config) updated by Thomas Ward
Bugs in the Ubuntu packaging belong on Launchpad - it is not …
12:04 Ticket #1125 (nginx package upgrade on ubuntu 14.04 rewrites ssl config) created by aljazceru@…
When upgrading nginx packages on ubuntu 14.04 update rewrites …

11/02/16:

13:09 Ticket #1124 (4** pages cache don't appear in file cache) updated by Nyoroon@…
Replying to mdounin: > When using proxy_intercept_errors / …
12:51 Ticket #1124 (4** pages cache don't appear in file cache) closed by Maxim Dounin
invalid: When using proxy_intercept_errors / fastcgi_intercept_errors, …
09:27 config.txt attached to Ticket #1124 by Nyoroon@…
nginx config
09:27 Ticket #1124 (4** pages cache don't appear in file cache) created by Nyoroon@…
4-- error pages don't appear in file cache, but somehow cached (in …

11/01/16:

00:15 Ticket #1102 (keepalive_requests is not supported for HTTP/2 connections) updated by Alexey Ivanov
This should be fixed by: http://hg.nginx.org/nginx/rev/9027991e2f37 […]

10/31/16:

20:12 Ticket #1117 (ngx_http_v2_module documentation says HTTP/2 is experimental) updated by Jacques Chester
Sorry for the slow reply, I didn't realise Trac hadn't collected my …
09:39 Ticket #1123 (Include timezone in error logs) created by joshuaspence@…
Currently, nginx access logs include a timestamp (via $time_local) …

10/29/16:

19:13 Ticket #1122 (nginx appears to ignore add_header when 404 handling (possibly ...) closed by Maxim Dounin
invalid: Quoting docs: Adds the …
18:14 Ticket #1122 (nginx appears to ignore add_header when 404 handling (possibly ...) updated by mike503@…
Filed against the wrong version, but the behavior has been the same …
07:44 Ticket #860 (NGINX 1.9.9 fails to build against OpenSSL 1.1.0) updated by ctrochalakis@…
That's great. Thanks a lot Maxim.
00:43 Ticket #1122 (nginx appears to ignore add_header when 404 handling (possibly ...) created by mike503@…
No matter where I put in an add_header in my config, it seems like …

10/28/16:

18:32 Ticket #215 (SSL: decryption failed or bad record mac with upstream servers) updated by bblack.wikimedia.org@…
FYI in case anyone else searches up this ticket, filed upstream …
09:16 Ticket #1097 (Nginx worker process exited on signal 11) updated by begracyber@…
Replying to adushein.sports.ru@…: > I have 2 nginx …
04:56 Ticket #376 (log file reopen should pass opened fd from master process) updated by MTecknology@…
What would it take to get some attention drawn to this bug? In …

10/27/16:

21:52 Ticket #215 (SSL: decryption failed or bad record mac with upstream servers) updated by bblack.wikimedia.org@…
Update: taking some cues from older OpenSSL bug reports, I tried …
19:03 Ticket #215 (SSL: decryption failed or bad record mac with upstream servers) updated by Maxim Dounin
> It's not reported at the "error" level. For me it's reported at the …
18:36 Ticket #215 (SSL: decryption failed or bad record mac with upstream servers) updated by bblack.wikimedia.org@…
Probably deserves a new ticket at least, but in any case: I've …
15:12 Ticket #475 (http_mp4_module seeking problem: "start time is out mp4 stts samples") closed by Maxim Dounin
fixed: Fix committed.
15:10 Ticket #475 (http_mp4_module seeking problem: "start time is out mp4 stts samples") updated by Maxim Dounin <mdounin@…>
In [changeset:"b123eae3fd4e72e430247690e0cec5838b546055/nginx"

10/26/16:

17:48 Ticket #283 (proxy_method does not support variable dereferencing) closed by Maxim Dounin
fixed: Path by Dmitry committed, ca27074f8f0f.
17:47 Ticket #283 (proxy_method does not support variable dereferencing) reopened by Maxim Dounin
13:39 Ticket #1121 (Unexpected listen directive behaviour when 'listen PORT' and 'listen ...) closed by Maxim Dounin
invalid: In the configuration above site2.com is expected to answer requests on …
08:52 Ticket #1121 (Unexpected listen directive behaviour when 'listen PORT' and 'listen ...) created by agugnin@…
== Way to reproduce: == server IP: 10.11.12.13 site1.com -> …

10/25/16:

23:03 Ticket #283 (proxy_method does not support variable dereferencing) updated by dilaz03@…
Updated patches: nginx: …

10/24/16:

20:07 Ticket #1120 (ngx_http_redis doesn't support redis AUTH) closed by Maxim Dounin
invalid: There is no redis module in nginx. The page you are referring to is a …
20:01 Ticket #1120 (ngx_http_redis doesn't support redis AUTH) created by onnimonni@…
The default redis module: …
07:31 Ticket #1119 (Gzip_types support pattern matching) created by jshen.thoughtworks.com@…
We have a backend api which will return response content-type with …
Note: See TracTimeline for information about the timeline view.