Timeline



12/16/18:

22:41 Ticket #1654 (nginx does not honor ssl_protocols for TLSv1.3) closed by Maxim Dounin
fixed: We cannot selectively enable or disable TLSv1.3 without relying on the …
19:30 Ticket #1654 (nginx does not honor ssl_protocols for TLSv1.3) reopened by yura3d@…
I think the solution suggested by @mdounin above is strange. I have …

12/15/18:

14:16 Ticket #1690 (Add MITM detection) updated by Fabian Franz BSc
I got it working in njs: …

12/14/18:

17:18 Ticket #1684 (documentation for ngx_http_geo_module is inconsistent with the ...) closed by Maxim Dounin
fixed: Fix committed, thanks.
16:55 Ticket #1684 (documentation for ngx_http_geo_module is inconsistent with the ...) updated by Maxim Dounin <mdounin@…>
In [changeset:"286ae954009dd9249ba9652cb53461de908d9f10/nginx"

12/13/18:

14:27 Ticket #1692 (Zero level domain) closed by Maxim Dounin
invalid: The example.com and example.com. domains are syntactically …
12:53 Ticket #1692 (Zero level domain) updated by Highter87@…
Sorry... This […] to redirect example.com, but i can access …
12:48 Ticket #1692 (Zero level domain) created by Highter87@…
Why is open domain: "nginx.org." - point at the end of the line? I …

12/12/18:

17:58 Ticket #1690 (Add MITM detection) updated by Fabian Franz BSc
njs sounds like a good solution so i think it may work as the …
15:32 text.txt attached to Ticket #1689 by Nar
nginx -T
15:08 Ticket #68 (Include larger speed units for HttpLimitReqModule) updated by Maxim Dounin
The patch is wrong, it does not take into account that rates use fixed …
15:03 Ticket #1691 (ngx_http_browser_module treats amazon web service health checker as ...) updated by malarres@…
Thank you very much for the clarification
14:46 Ticket #1691 (ngx_http_browser_module treats amazon web service health checker as ...) closed by Maxim Dounin
invalid: The ancient_browser directive …
14:18 Ticket #1690 (Add MITM detection) updated by Maxim Dounin
I see at least two problems with this: 1. Detection of various TLS …
13:03 Ticket #1691 (ngx_http_browser_module treats amazon web service health checker as ...) created by malarres@…
Amazon Load Balancer performs a series of Health checks, and as user …
10:32 Ticket #68 (Include larger speed units for HttpLimitReqModule) updated by xdmitry@…
can we give it a go please? change is straightforward: […]
00:15 Ticket #1687 (Overrides system default minimum TLS version) updated by Kurt Roeckx
The nginx documentation currently says you can enable SSLv2 and SSLv3, …

12/11/18:

19:45 Ticket #1690 (Add MITM detection) created by Fabian Franz BSc
Caddy has a feature to detect TLS MITM attacks by comparing …
17:24 Ticket #1689 (Writing connections leak with http/2) updated by Maxim Dounin
Ok, so you observe open socket ... left in connection ... alerts on …
16:33 Ticket #1689 (Writing connections leak with http/2) created by Nar
Writing connections counter is gradually grow up as shown on munin …
15:29 Ticket #714 (Writing connection leak while SPDY enabled) closed by Maxim Dounin
duplicate: For most recent tickets about HTTP/2 issues, please refer to #1610, …
14:54 Ticket #1688 (want to get the socket port which use in nginx and upstream servers) updated by Maxim Dounin
Priority, Type changed
How do you expect to use such a variable?
03:11 Ticket #1688 (want to get the socket port which use in nginx and upstream servers) created by liutanrong@…
i can not log the backend_source_port,why nginx doesn't have a …

12/10/18:

22:04 Ticket #714 (Writing connection leak while SPDY enabled) reopened by Nar
Have same issue with nginx 1.15.7 [[Image(...)]] uname -a …
22:03 nginx_leak.jpg attached to Ticket #714 by Nar
14:54 Ticket #1687 (Overrides system default minimum TLS version) updated by Maxim Dounin
In theory. In practice, there are number of problems with this …

12/09/18:

16:56 Ticket #1687 (Overrides system default minimum TLS version) updated by Kurt Roeckx
The point of system wide defaults is so that there actually is 1 place …
00:37 Ticket #1684 (documentation for ngx_http_geo_module is inconsistent with the ...) updated by gdrbyKo1@…
Replying to mdounin: That makes sense, thank you. …

12/08/18:

19:41 Ticket #1684 (documentation for ngx_http_geo_module is inconsistent with the ...) updated by Maxim Dounin
Replying to gdrbyKo1@…: > Thanks for your response. I just …
18:57 Ticket #1687 (Overrides system default minimum TLS version) closed by Maxim Dounin
wontfix: Thank you for your feedback. Allowed SSL protocol versions are …
10:10 Ticket #1687 (Overrides system default minimum TLS version) created by Kurt Roeckx
In https://hg.nginx.org/nginx/rev/7ad0f4ace359
03:35 Ticket #1686 (Log files ownership) closed by Maxim Dounin
invalid: On startup and on reload, log files are opened by the master process …
02:27 Ticket #1686 (Log files ownership) created by https://stackoverflow.com/users/573152/bernard-rosset
On log rotation, nginx seems to process …

12/06/18:

22:10 Ticket #1684 (documentation for ngx_http_geo_module is inconsistent with the ...) updated by gdrbyKo1@…
Replying to mdounin: > This seems to be a bug in the geo …
16:45 Ticket #1684 (documentation for ngx_http_geo_module is inconsistent with the ...) updated by Maxim Dounin
This seems to be a bug in the geo module, it doesn't know that there …
13:34 Ticket #1243 (Add primary media type for font) updated by Maxim Dounin
See also #1685.
13:33 Ticket #1685 (Update fonts mime types refer to IANA) closed by Maxim Dounin
duplicate: The only fonts in nginx's conf/mime.types are font/woff and …
08:37 Ticket #1685 (Update fonts mime types refer to IANA) created by bes.internal@…
Please update nginx/conf/mime.types refer to IANA. All fonts move to …

12/05/18:

09:46 Ticket #1057 (Google QUIC - statement) updated by maxim
Hello, We are planning to have this feature in our 2019 roadmap. …
09:39 Ticket #1057 (Google QUIC - statement) updated by raul.peixoto@…
Can someone on Nginx please take a look at supporting QUIC already?

12/04/18:

15:01 Milestone nginx-1.14.2 completed
Status: scheduled Trunk: stable * Bug fixes merge from the …
14:20 fetch_values.py attached to Ticket #1684 by gdrbyKo1@…
14:19 nginx.conf attached to Ticket #1684 by gdrbyKo1@…
14:19 Ticket #1684 (documentation for ngx_http_geo_module is inconsistent with the ...) created by gdrbyKo1@…
The documentation for ngx_http_geo_module states that "By default, the …
13:40 Ticket #1654 (nginx does not honor ssl_protocols for TLSv1.3) updated by Maxim Dounin <mdounin@…>
In [changeset:"11be3c0723bd808b03a1781a96e0b2cc09897fe9/nginx"
13:40 Ticket #1605 (nginx does not compile with LibreSSL 2.8.0) updated by Maxim Dounin <mdounin@…>
In [changeset:"2cf1d945bbb31b1c8294ad2533673753ff989305/nginx"
13:40 Ticket #1565 (Prematurely deleting request body temp files on fast response) updated by Maxim Dounin <mdounin@…>
In [changeset:"17ee239ae2e6caa8ec24d7626f5cc91b197e79cb/nginx"
13:40 Ticket #1469 (nginx won't build under libxcrypt due to missing 'current_salt' in ...) updated by Maxim Dounin <mdounin@…>
In [changeset:"b1a166ab7f04efc4205afc0bf56b89aab4e0d457/nginx"
13:40 Ticket #1546 (nginx/1.14.0 compilation with gcc 8.1.0 fails) updated by Sergey Kandaurov <pluknet@…>
In [changeset:"ed5b3c4c128421c13350a81978487c5c884626b1/nginx"
11:12 Ticket #1683 (ngx_parent in ngx_daemon() can not work properly?) closed by Maxim Dounin
invalid: The ngx_parent variable is expected to contain PID or original parent …
01:59 Ticket #1683 (ngx_parent in ngx_daemon() can not work properly?) created by chronolaw@…
In function ngx_daemon(), after fork the child would run ngx_parent = …

11/30/18:

19:04 Ticket #1682 (Nginx tries to open the html file and through error 404. I expected ...) updated by Maxim Dounin
Description changed
I've tested the configuration in question, and it seems to work fine …
18:48 Ticket #1678 (limit_rate and proxy_limit_rate broken from 1.14) closed by Maxim Dounin
wontfix: Thanks for testing. I'm not sure there is a good way to document all …
17:53 Ticket #1682 (Nginx tries to open the html file and through error 404. I expected ...) created by dertin@…
Hi, Nginx tries to open the html file and through error 404. I …
09:11 Ticket #1534 (OCSP client certificate validation) updated by boardbloke@…
+1 We have a number of use cases that require Mutual TLS with OCSP …

11/28/18:

13:19 Ticket #1681 (Default_type) updated by Maxim Dounin
> This isn't actually true right, if most installations are using the …
08:11 Ticket #1681 (Default_type) updated by Olaf van der Spek
> As for the keepalive_timeout, the default is 75s, and this is what …

11/27/18:

15:08 Milestone njs-0.2.6 completed
Planned features: * Stability fixes
15:07 Milestone nginx-1.15.7 completed
Status: scheduled Trunk: mainline * upstream_requests …
14:44 Ticket #1650 (Active connections not clear close session) closed by Maxim Dounin
invalid: Ok, thanks for confirming this.
10:48 Ticket #1678 (limit_rate and proxy_limit_rate broken from 1.14) updated by Ondřej Nový
Using larger buffers helps. Setting higher CONFIG_HZ or disabling …
06:46 Ticket #1650 (Active connections not clear close session) updated by kfir.snunit.org.il@…
I confirm that the bug was created because I used an old vesion of …

11/26/18:

13:14 Ticket #1677 (nginx does not resolve hostnames if there is no route) closed by Maxim Dounin
wontfix: When you write a name in the proxy_pass directive, nginx uses all …
10:55 Ticket #1677 (nginx does not resolve hostnames if there is no route) reopened by wanneut@…
The for-loop is wrong if you want to use connect. How do you connect …

11/24/18:

14:09 Ticket #1681 (Default_type) updated by Olaf van der Spek
Having two different nginx defaults is confusing..
12:49 Ticket #1681 (Default_type) updated by Maxim Dounin
It is. And one of the goals of any stock conf is to show how to tune …
06:33 Ticket #1681 (Default_type) updated by Olaf van der Spek
So that file isn't supposed to be used as the stock conf for nginx?

11/23/18:

21:58 Ticket #1681 (Default_type) updated by Maxim Dounin
Because one of the goals of the example configuration is to show how …
20:48 Ticket #1681 (Default_type) updated by Olaf van der Spek
> and this is what most installations would normally use Then why …
15:24 Ticket #1681 (Default_type) closed by Maxim Dounin
wontfix: Thank you for your suggestion. You can use `default_type …
14:07 Ticket #1681 (Default_type) updated by Olaf van der Spek
Same for keepalive_timeout.
13:56 Ticket #1681 (Default_type) created by Olaf van der Spek
docs: Default: default_type text/plain; nginx.conf: default_type …
13:10 Ticket #1678 (limit_rate and proxy_limit_rate broken from 1.14) updated by Maxim Dounin
Well, CONFIG_HZ=100 explains what you observe, as …
10:46 Ticket #1678 (limit_rate and proxy_limit_rate broken from 1.14) updated by Ondřej Nový
It's LXC container on bare metal. CONFIG_HZ=100 I will try …

11/22/18:

21:09 Ticket #1680 (Nginx HTTP Proxy Module) closed by Maxim Dounin
invalid: For questions on how to configure nginx, please use …
19:46 Ticket #1680 (Nginx HTTP Proxy Module) created by adolfo.vivendo.com.mx@…
NGINX Reverse Proxy: How to download from referenced server, save and …

11/21/18:

15:46 Ticket #1677 (nginx does not resolve hostnames if there is no route) closed by Maxim Dounin
wontfix: While on some systems getaddrinfo() indeed does not return IPv6 …
14:25 Ticket #1679 (Possible infinite loop in function ngx_cache_manager_process_cycle and ...) closed by Maxim Dounin
invalid: The ngx_worker_process_cycle() function is not used in cache loader …
14:01 Ticket #1678 (limit_rate and proxy_limit_rate broken from 1.14) updated by Maxim Dounin
Could you please provide details on the system you are testing with, …
02:30 Ticket #1679 (Possible infinite loop in function ngx_cache_manager_process_cycle and ...) created by 92siuyang@…
Hi, There are two possible infinite loop vulnerabilities in function …

11/20/18:

17:22 Ticket #1677 (nginx does not resolve hostnames if there is no route) reopened by wanneut@…
[…] This is wrong. getaddrinfo dosen't return IPv6-addresses if …
11:54 Ticket #1678 (limit_rate and proxy_limit_rate broken from 1.14) created by Ondřej Nový
Hello, I have a problem with directives limit_rate and …

11/19/18:

15:05 Ticket #1677 (nginx does not resolve hostnames if there is no route) closed by Maxim Dounin
wontfix: It looks like due to no IPv4 connectivity getaddrinfo() on your OS …
14:33 Ticket #1677 (nginx does not resolve hostnames if there is no route) created by wanneut@…
In my configuration is the following line: {{{proxy_pass …
14:19 Ticket #1671 (nginx-tests fail in docker container) closed by thresh
invalid
10:03 Ticket #1676 (nginx.service for tmpfs /var/log) closed by thresh
wontfix: /var/log/nginx is created when the packages are installed, and the …
02:42 Ticket #1676 (nginx.service for tmpfs /var/log) created by lucserre@…
Description: When running /var/log on a tmpfs, the /var/log/nginx …

11/18/18:

08:49 Ticket #1650 (Active connections not clear close session) updated by kfir.snunit.org.il@…
Hello, After a thorough review of the problem I was able to find the …
01:17 Ticket #812 (Fetch OCSP responses on startup, and store across restarts) updated by Maxim Dounin
Replying to [comment:7

11/17/18:

18:30 Ticket #1675 (OCSP stapling not working in stream area) created by Tributh@…
I have set up a mail-proxy setup and wanted to use OCSP stapling for …
Note: See TracTimeline for information about the timeline view.