[GitHub] [incubator-pagespeed-ngx] bigretromike commented on issue #1755: Issue with HTTPS only page and noscript support and beacon are injected as http.
bigretromike commented on issue #1755: URL: https://github.com/apache/incubator-pagespeed-ngx/issues/1755#issuecomment-1341816176 After downgrading pagespeed, trying it on fresh wordpress instalation, the beacon still point's to HTTP version of page when there is non, also the module try to access http://domain:443/ which is illegal. nginx 1.23.2 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@pagespeed.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
[GitHub] [incubator-pagespeed-ngx] bigretromike commented on issue #1755: Issue with HTTPS only page and noscript support and beacon are injected as http.
bigretromike commented on issue #1755: URL: https://github.com/apache/incubator-pagespeed-ngx/issues/1755#issuecomment-1336291903 I read about `RespectXForwardedProto` that if its not set it goes to http resources and mix content, even if im not using any cdn's or loadbalancer because its for those cases. Sadly no difference :( Found: `pagespeed UseNativeFetcher on; resolver 8.8.8.8;` Results: `Cannot fetch url 'https://mydomain.com/wp-content/plugins/total-gdpr-compliance/assets/js/frontend-script.js?ver=2.0.2': as https is not supported` Found (as page support gzip): `pagespeed FetchWithGzip on;` Results: Still http://mydomain.com in logs In doc's I found: `Setting the URL fetcher timeout [🔗](https://www.modpagespeed.com/doc/system#url_fetcher_timeout) When PageSpeed attempts to rewrite a resource for the first time, it must fetch it via HTTP. The default timeout for fetches is 5 seconds. A directive can be applied to change the timeout ` I hope HTTP is a typo and it should be HTTP/HTTPS -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@pagespeed.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
[GitHub] [incubator-pagespeed-ngx] bigretromike commented on issue #1755: Issue with HTTPS only page and noscript support and beacon are injected as http.
bigretromike commented on issue #1755: URL: https://github.com/apache/incubator-pagespeed-ngx/issues/1755#issuecomment-1336276712 As soon as I disable `LoadFromFileMatch` all of the converted images that point's too `https://mydomain/converted_imaga.pagespeed.ic.123456.webp` are 404 on me -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@pagespeed.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
[GitHub] [incubator-pagespeed-ngx] bigretromike commented on issue #1755: Issue with HTTPS only page and noscript support and beacon are injected as http.
bigretromike commented on issue #1755: URL: https://github.com/apache/incubator-pagespeed-ngx/issues/1755#issuecomment-1336271928 I'm using this: `pagespeed Domain https://mydomain.com;` I can change it to http? version but I dont serve http version at all, when you enter http://mydomain.com because there is no other www configured in nxginx and dns point to the server it defaults and redirect to https version. `http*://*.mydomain.com` im not serving page with `www` subdomain nor any other subdomain, will `https://mydomain.com` fall into that regex ? - Yes, this does not cover my domain `` > In my experience pagespeed can't fecht https resource mainly by 2 reasons: As you can see most resource are fetched via https only main page and few images aint, For images I found out that SmartSlider3 made static cache files for background and put those as `src=//mydomain.com/static/background.jpg` im unable to force it to be written as https, and from pagespeed docs `//` notation falls to `http` fetch - any ideas how to force it ? I disabled memcache for pagespeed and fastcgi_cache for page; still issue is there; Also I disabled (removed) memcached caching from wordpress - no luck also; -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@pagespeed.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
[GitHub] [incubator-pagespeed-ngx] bigretromike commented on issue #1755: Issue with HTTPS only page and noscript support and beacon are injected as http.
bigretromike commented on issue #1755:
URL:
https://github.com/apache/incubator-pagespeed-ngx/issues/1755#issuecomment-1336252941
> In the last config you posted:
>
> > > pagespeed RewriteLevel CoreFilters;
> > > pagespeed RewriteLevel OptimizeForBandwidth;
I comment out `CoreFilters` both could work without issue as one enable more
than second one.
Still the issue even with almost everything comment out is that its fetching
or thinking that it fetch `http`://mydomain.com, when in realyty its
`https`://mydomain.com because http version is not available (there is not even
301 on new server)
The only thing that I have on mind is that pagespeed does work in that way
(but I would assume you guys or another user would just say `That is the way
pagespeed works` and that would end the topic, but then I don't think its the
case, so only one thing (other than wordpress files and database) taken from
old server that act the same way is nginx-site-configuration, maybe someone
more knowledgeable than me can spot the cupric - (I omitted include as those
are posted higher):
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name mydomain.com www.mydomain.com;
root /var/www/mydomain.com/web;
index index.php index.html index.htm;
if ($host = www.mydomain.com) {
return 301 https://mydomain.com$request_uri;
}
set $no_cache 0;
include snippets/20-pagespeed_server.conf;
add_header X-Content-Type-Options nosniff;
add_header X-XSS-Protection "1; mode=block";
gzip on;
autoindex off;
access_log /var/www/mydomain.com/logs/access.log compression2
buffer=32k flush=5m;
error_log /var/www/mydomain.com/logs/error.log; # debug;
keepalive_timeout 10;
keepalive_disable msie6;
keepalive_requests 200;
include snippets/30-csp.conf;
location /ngx_pagespeed_statistics { allow 127.0.0.1; allow
my.ip.address.here; deny all; }
location /ngx_pagespeed_global_statistics { allow 127.0.0.1; allow
my.ip.address.here; deny all; }
location /ngx_pagespeed_message { allow 127.0.0.1; allow
my.ip.address.here; deny all; }
location /pagespeed_console { allow 127.0.0.1; allow
my.ip.address.here; deny all; }
location ~ ^/pagespeed_admin { allow 127.0.0.1; allow
my.ip.address.here; deny all; }
location ~ ^/pagespeed_global_admin { allow 127.0.0.1; allow
my.ip.address.here; deny all; }
location ~ "\.pagespeed\.([a-z]\.)?[a-z]{2}\.[^.]{10}\.[^.]+" {
set $no_cache 1;
add_header "" "";
}
location ~ "^/pagespeed_static/" { }
location ~ "^/ngx_pagespeed_beacon$" { }
location = /nekomata {
allow 127.0.0.1;
allow my.ip.address.here;
allow my.second.address.here;
deny all;
stub_status;
}
location ~ ^/(status001|ping|nxg_nekomata)$ {
access_log /var/www/mydomain.com/logs/access-status.log;
allow 127.0.0.1;
allow my.ip.address.here;
allow my.second.address.here;
deny all;
include snippets/fastcgi-mydomain.conf;
}
location ~* /xmlrpc.php$ {
allow 127.0.1.1;
allow 127.0.0.1;
allow ::1;
allow my.second.address.here;
deny all;
include snippets/fastcgi-mydomain.conf;
}
location ~*
/(?:uploads|files|wp-content|wp-includes|akismet)/.*.php$ {
deny all;
}
location ~ /\.(svn|git)/* { deny all; }
location ~ /\. {deny all; }
location ~ ([^/]*)sitemap(.*)\.x(m|s)l$ {
rewrite ^.*/sitemaps\.xml$ /index.php?seopress_sitemap=1
last;
rewrite ^.*/news.xml$ /index.php?seopress_news=$1 last;
rewrite ^.*/video.xml$ /index.php?seopress_video=$1 last;
rewrite ^.*/author.xml$ /index.php?seopress_author=$1 last;
rewrite ^.*/sitemaps_xsl\.xsl$
/index.php?seopress_sitemap_xsl=1 last;
rewrite ^.*/([^/]+?)-sitemap([0-9]+)?.xml$
/index.php?seopress_cpt=$1&seopress_paged=$2 last;
}
location /wp-json/ {
try_files $uri $uri/ /index.php$is_args$args;
}
location ~* ^/wp-content/uploads/.*.(html|htm|shtml|php|js|swf)$
{deny all;}
location ~* ^/(wp-content)/(.*?)\.(zip|tar|bzip2|7z)\$ {d
[GitHub] [incubator-pagespeed-ngx] bigretromike commented on issue #1755: Issue with HTTPS only page and noscript support and beacon are injected as http.
bigretromike commented on issue #1755: URL: https://github.com/apache/incubator-pagespeed-ngx/issues/1755#issuecomment-1336218387 > In the last config you posted: > > > > pagespeed RewriteLevel CoreFilters; > > > pagespeed RewriteLevel OptimizeForBandwidth; > > Both at the same time, don¡t know what is the result. > > In the config directives you have > > > > pagespeed **CacheFragment web-cache-fragment;** > > But in the error logs there is > > > > HTTPCache key=http://mydomain.com/wp-content/uploads/2022/06/aot_manga.png f**ragment=ohayo-cache-fragment:** > > > remembering recent failure for 119 seconds. W > > Seems to be from another server config. Nah they are the same, I just redacted that name out for my reasones sorry. ``` pagespeed RewriteLevel CoreFilters; pagespeed RewriteLevel OptimizeForBandwidth; ``` Yes I can change that, let me read about it -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@pagespeed.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
[GitHub] [incubator-pagespeed-ngx] bigretromike commented on issue #1755: Issue with HTTPS only page and noscript support and beacon are injected as http.
bigretromike commented on issue #1755: URL: https://github.com/apache/incubator-pagespeed-ngx/issues/1755#issuecomment-1335977544 Currently I have the biggest luck while adding `pagespeed LoadFromFileMatch "^https?://mydomain.com/([^/]*)" "/var/www/web/\\1"; While pagespeed fetch content thru http FileMatch handles that ? And I can access shrinked images like `images1-300x300.webp.pagespeed.ic.0AWUmE4KLo.webp` I still have no clue why pagespeed inssist to use **http** I double checked if something is wrong or not with port 80, but it looks like its all disabled: ` curl -sS -D- -o /dev/null "http://mydomain.com/wp-content/uploads/2021/08/ximage-1-150x146.webp.pagespeed.ic.DWGeCUiHFr.webp"` `curl: (7) Failed to connect to mydomain.com port 80: Connection refused` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@pagespeed.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
[GitHub] [incubator-pagespeed-ngx] bigretromike commented on issue #1755: Issue with HTTPS only page and noscript support and beacon are injected as http.
bigretromike commented on issue #1755:
URL:
https://github.com/apache/incubator-pagespeed-ngx/issues/1755#issuecomment-1335874518
I'm trying to make it not work with minimal setup;
```
http {
pagespeed on;
pagespeed PreserveUrlRelativity on;
pagespeed Statistics on;
pagespeed StatisticsLogging on;
pagespeed StatisticsLoggingIntervalMs 6;
pagespeed StatisticsLoggingMaxFileSizeKb 1024;
pagespeed LogDir /var/log/pagespeed;
pagespeed AdminPath /pagespeed_admin;
pagespeed StatisticsPath /nxg_nekomata;
pagespeed FileCacheSizeKb102400;
pagespeed FileCacheCleanIntervalMs 360;
pagespeed FileCacheInodeLimit50;
pagespeed LRUCacheKbPerProcess 10240;
pagespeed LRUCacheByteLimit16384;
pagespeed MemcachedThreads 1;
pagespeed MemcachedServers "127.0.0.1:11211";
pagespeed MemcachedTimeoutUs 100;
pagespeed RewriteLevel CoreFilters;
pagespeed UsePerVhostStatistics on;
pagespeed EnableFilters debug;
pagespeed MessageBufferSize 10;
pagespeed RewriteLevel OptimizeForBandwidth;
pagespeed HttpCacheCompressionLevel 9;
pagespeed InPlaceResourceOptimization off;
pagespeed CacheFragment web-cache-fragment;
pagespeed LogDir "/var/log/pagespeed";
pagespeed CreateSharedMemoryMetadataCache "/var/www/web/mod_pagespeed/"
1024000;
pagespeed NumRewriteThreads 6;
pagespeed ImageMaxRewritesAtOnce 3;
pagespeed EnableCachePurge on;
pagespeed ListOutstandingUrlsOnError on;
pagespeed Domain https://mydomain.com;
server {
pagespeed FileCachePath /run/nginx-pagespeed-web;
pagespeed FetchHttps
enable,allow_unknown_certificate_authority,allow_self_signed,allow_certificate_not_yet_valid;
pagespeed SslCertDirectory /etc/pki/tls/certs;
pagespeed SslCertFile /etc/pki/tls/cert.pem;
pagespeed FetcherTimeoutMs 1;
pagespeed AddResourceHeader "x-content-type-options" "nosniff";
pagespeed Allow "*";
pagespeed Disallow "*/wp-includes/js/wp-util.js*";
pagespeed Disallow "https://mydomain.com/*.pagespeed.*.js";;
pagespeed Disallow "*/js/jquery/jquery.js*";
pagespeed Disallow "*/js/jquery/jquery.min.js*";
pagespeed Disallow "*/wp-content/plugins/smart-slider-3/*";
pagespeed Disallow "*/seal.js";
pagespeed Disallow
"*/kirki/modules/webfont-loader/vendor-typekit/webfontloader.js";
pagespeed Disallow "*/wp-includes/js/dist/*";
pagespeed Disallow "*/wp-includes/js/tinymce/*";
pagespeed Disallow "*/wp-content/plugins/wc-poczta/*";
pagespeed Disallow "*/wp-content/cache/*";
pagespeed Disallow "*/wp-content/uploads/*";
pagespeed Allow "*/wp-content/uploads/2021/*";
pagespeed Allow "*/wp-content/uploads/2022/*";
pagespeed Allow "*/wp-content/uploads/2023/*";
pagespeed Disallow "*/admin-bar.min.css";
pagespeed Disallow "*/dashicons.min.css";
pagespeed Disallow "/wp-admin/*";
pagespeed InPlaceResourceOptimization off;
pagespeed StatisticsPath /ngx_pagespeed_statistics;
pagespeed MessagesPath /ngx_pagespeed_message;
pagespeed ConsolePath /pagespeed_console;
pagespeed AdminPath /pagespeed_admin;
pagespeed EnableFilters rewrite_javascript; # minify js
```
Console say:
`I[Fri, 02 Dec 2022 21:31:45 GMT] [Info] [231995] HTTPCache
key=http://mydomain.com/wp-content/uploads/2022/06/aot_manga.png
fragment=ohayo-cache-fragment: remembering recent failure for 119 seconds.
W[Fri, 02 Dec 2022 21:31:45 GMT] [Warning] [231995] [xaot_manga.png:0]
Resource based on http://mydomain.com/wp-content/uploads/2022/06/aot_manga.png
but cannot access the original`
`http://mydomain.com/produkt/op_080/:1131 srcset entry for 32w: Shrinking
image `https://mydomain.com/wp-content/uploads/2021/03/op_079-32x32.jpg' (5709
bytes) to
`https://mydomain.com/wp-content/uploads/2021/03/xop_079-32x32.jpg.pagespeed.ic.tmbiBT965m.webp'
(612 bytes)`
Log say:
`[ngx_pagespeed 1.15.0.0-8917] [1202/213145:WARNING:resource_fetch.cc(197)]
Fetch failed for resource url
http://mydomain.com/wp-content/uploads/2022/06/xaot_manga.png.pagespeed.ic.2j0w7-EoG1.png`
` [ngx_pagespeed 1.15.0.0-8917] [1202/214113:WARNING:resource_fetch.cc(197)]
Fetch failed for resource url
http://mydomain.com/wp-content/uploads/2021/03/xop_079-32x32.jpg.pagespeed.ic.tmbiBT965m.webp`
`[ngx_pagespeed 1.15.0.0-8917] xop_079-32x32.jpg:0:Resource based on
http://mydomain.com/wp-content/uploads/2021/03/op_079-32x32.jpg but cannot
access the original`
Also I added `rewrite_log on;` and i'm trying to debug path that is picked
from all my location, but i'm not sure why its not finished:
```
2022/12/02 21:32:45 [info] 231995#232019: [ngx_pagespeed 1.15.0.0-8917]
http://mydomain.com/produkt/op_080/:1131 srcset entry for 32w: Shrinking image
`https://mydomain.com/wp-content/uploads/2021/03/op_079-32x32.jpg' (5709 bytes)
to
`https://mydomain.com/wp-content/uploads/2021/03/xop_079-32x32.jpg.pagespeed.ic.t
[GitHub] [incubator-pagespeed-ngx] bigretromike commented on issue #1755: Issue with HTTPS only page and noscript support and beacon are injected as http.
bigretromike commented on issue #1755: URL: https://github.com/apache/incubator-pagespeed-ngx/issues/1755#issuecomment-1335691744 > One thing that comes to mind, I had the same problem once. I assume you are using php-fpm with fastcgi. > > I remember vaguely that I had to explicitly force https, in the nginx vhost, `fastcgi_param HTTPS on` replacing `fastcgi_parm HTTPS $https if_not_empty;` with `fastcgi_param HTTPS on;` give no difference -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@pagespeed.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
[GitHub] [incubator-pagespeed-ngx] bigretromike commented on issue #1755: Issue with HTTPS only page and noscript support and beacon are injected as http.
bigretromike commented on issue #1755: URL: https://github.com/apache/incubator-pagespeed-ngx/issues/1755#issuecomment-1335387142 > What do you see in the logs files about this with debug enabled? https://mydomain.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/smartslider.min.css?ver=23139749 > > in the
[GitHub] [incubator-pagespeed-ngx] bigretromike commented on issue #1755: Issue with HTTPS only page and noscript support and beacon are injected as http.
bigretromike commented on issue #1755: URL: https://github.com/apache/incubator-pagespeed-ngx/issues/1755#issuecomment-1335192674 PageSpeed console still show: ``` http://mydomain.com/:1196: Resized image `https://mydomain.com/wp-content/uploads/2021/04/dgr_001-300x300.jpg' from 300x300 to 237x237 [Fri, 02 Dec 2022 12:52:39 GMT] [Info] [214422] [http://mydomain.com/seria/healin-good-pretty-cure/page/2/:89] Unrecognized script:' 89...93' [Fri, 02 Dec 2022 12:53:35 GMT] [Warning] [214424] [underscore.min.js,qver=1.13.4:0] Resource based on http://mydomain.com/wp-includes/js/underscore.min.js?ver=1.13.4 but cannot access the original [Fri, 02 Dec 2022 12:53:36 GMT] [Warning] [214424] [A.classic-themes.min.css,qver=1:0] Resource based on http://mydomain.com/wp-includes/css/classic-themes.min.css?ver=1 but cannot access the original ``` nginx log: ``` 2022/12/02 12:55:12 [warn] 214423#214480: [ngx_pagespeed 1.15.0.0-8917] [1202/125512:WARNING:resource_fetch.cc(197)] Fetch failed for resource url http://mydomain.com/wp-includes/js/jquery/jquery-migrate.min.js,qver=3.3.2.pagespeed.jm.Ws-UgblvVg.js 2022/12/02 12:55:12 [warn] 214423#214477: [ngx_pagespeed 1.15.0.0-8917] [1202/125512:WARNING:resource_fetch.cc(197)] Fetch failed for resource url http://mydomain.com/wp-includes/js/underscore.min.js,qver=1.13.4.pagespeed.jm.-wWaxZbynX.js 2022/12/02 12:55:12 [warn] 214423#214480: [ngx_pagespeed 1.15.0.0-8917] [1202/125512:WARNING:resource_fetch.cc(197)] Fetch failed for resource url http://mydomain.com/wp-includes/css/dist/block-library/A.style.min.css,qver=6.1.1.pagespeed.cf.s5bSa4kM1r.css 2022/12/02 12:55:12 [warn] 214423#214480: [ngx_pagespeed 1.15.0.0-8917] [1202/125512:WARNING:resource_fetch.cc(197)] Fetch failed for resource url http://mydomain.com/wp-includes/css/A.classic-themes.min.css,qver=1.pagespeed.cf.wMG3qLFv9v.css ``` And I don't think that `http` is hardcoded in logs -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@pagespeed.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
[GitHub] [incubator-pagespeed-ngx] bigretromike commented on issue #1755: Issue with HTTPS only page and noscript support and beacon are injected as http.
bigretromike commented on issue #1755:
URL:
https://github.com/apache/incubator-pagespeed-ngx/issues/1755#issuecomment-1335184338
> > `location ~ "\.pagespeed\.([a-z]\.)?[a-z]{2}\.[^.]{10}\.[^.]+" {
add_header "" ""; set $no_cache 1; }`
>
> Can you try: location ~ ^.pagespeed/ { add_header "" ""; set $no_cache 1; }
>
> For my wordpress instances I use the plugin "SSL Insecure Content Fixer",
it rewrites all output links to https. The problem might be somewhere in your
mysql database but installing this plugin should fix this easier.
I installed `SSL Insecure Content Fixer` but that does nothing for me - the
page is SSL compatible with `Green shield` on all browsers.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscr...@pagespeed.apache.org
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
[GitHub] [incubator-pagespeed-ngx] bigretromike commented on issue #1755: Issue with HTTPS only page and noscript support and beacon are injected as http.
bigretromike commented on issue #1755:
URL:
https://github.com/apache/incubator-pagespeed-ngx/issues/1755#issuecomment-1335179959
> > `location ~ "\.pagespeed\.([a-z]\.)?[a-z]{2}\.[^.]{10}\.[^.]+" {
add_header "" ""; set $no_cache 1; }`
>
> Can you try: location ~ ^.pagespeed/ { add_header "" ""; set $no_cache 1; }
>
> For my wordpress instances I use the plugin "SSL Insecure Content Fixer",
it rewrites all output links to https. The problem might be somewhere in your
mysql database but installing this plugin should fix this easier.
Should I remove old one? because I added yours next to old one, and no
difference.
@Lofesa I replace scr to image to absolut path with `https` still I see that
main page is fetched via http :/
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscr...@pagespeed.apache.org
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
[GitHub] [incubator-pagespeed-ngx] bigretromike commented on issue #1755: Issue with HTTPS only page and noscript support and beacon are injected as http.
bigretromike commented on issue #1755: URL: https://github.com/apache/incubator-pagespeed-ngx/issues/1755#issuecomment-1335170891 > A question... How the resources are wruten in the html code? some like src=//mydomain/myimge or src=https://mydomain/myimage ? > > Also why this?: (Note 1 image have http and others have https) > > > > Critical Images: > > > data:image/svg+xml;base64,PHN223== > > > data:image/svg+xml;base64,PHN2Zy== > > > data:image/svg+xml;base64,PHN2Pg== > > > http://mydomain.com/wp-content/uploads/slider/cache/f3c95aed3bef34293901d9e8fe70a1/baner_new-1.webp > > > https://mydomain.com/wp-content/uploads/2021/02/000-300x300.jpg I found that images added to slider are added like this `` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@pagespeed.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
[GitHub] [incubator-pagespeed-ngx] bigretromike commented on issue #1755: Issue with HTTPS only page and noscript support and beacon are injected as http.
bigretromike commented on issue #1755: URL: https://github.com/apache/incubator-pagespeed-ngx/issues/1755#issuecomment-1335161969 > A question... How the resources are wruten in the html code? some like src=//mydomain/myimge or src=https://mydomain/myimage ? > > Also why this?: (Note 1 image have http and others have https) > > > > Critical Images: > > > data:image/svg+xml;base64,PHN223== > > > data:image/svg+xml;base64,PHN2Zy== > > > data:image/svg+xml;base64,PHN2Pg== > > > http://mydomain.com/wp-content/uploads/slider/cache/f3c95aed3bef34293901d9e8fe70a1/baner_new-1.webp > > > https://mydomain.com/wp-content/uploads/2021/02/000-300x300.jpg I know ! And have no clue why pagespeed does that ! Every link contains schema `https://mydomain.com/.` Also now its also included: ``` ``` As you see it reads main domain/page as http:// even when there is no explicid configuration for http version (there is currently only one page configured on this server which is mydomain.com on port 443 with ssl enabled) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@pagespeed.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
[GitHub] [incubator-pagespeed-ngx] bigretromike commented on issue #1755: Issue with HTTPS only page and noscript support and beacon are injected as http.
bigretromike commented on issue #1755: URL: https://github.com/apache/incubator-pagespeed-ngx/issues/1755#issuecomment-1335108057 After commenting out `LoadFromFile` random number of images won't show up and page ``` ``` Notice the http in there ^, also the nginx log got those warrnings: ``` 2022/12/02 11:25:13 [warn] 210590#210635: [ngx_pagespeed 1.15.0.0-8917] [1202/112513:WARNING:resource_fetch.cc(197)] Fetch failed for resource url http://mydomain.com/wp-content/plugins/pay-by-paynow-pl/assets/css/A.front.css,qver=2.4.10.pagespeed.cf.gza2uH-eND.css 2022/12/02 11:25:13 [warn] 210590#210635: [ngx_pagespeed 1.15.0.0-8917] [1202/112513:WARNING:resource_fetch.cc(197)] Fetch failed for resource url http://mydomain.com/wp-content/plugins/total-gdpr-compliance/assets/css/A.frontend-style.css,qver=2.0.2.pagespeed.cf.w63jaWGSEN.css 2022/12/02 11:25:13 [warn] 210590#210635: [ngx_pagespeed 1.15.0.0-8917] [1202/112513:WARNING:resource_fetch.cc(197)] Fetch failed for resource url http://mydomain.com/wp-content/plugins/total-gdpr-compliance/assets/css/A.genericons.css,qver=6.1.1.pagespeed.cf.MrUO0k-k7u.css 2022/12/02 11:25:13 [warn] 210590#210635: [ngx_pagespeed 1.15.0.0-8917] [1202/112513:WARNING:resource_fetch.cc(197)] Fetch failed for resource url http://mydomain.com/wp-content/plugins/total-gdpr-compliance/assets/css/font-awesome/A.font-awesome.min.css,qver=6.1.1.pagespeed.cf.nrOL480BpE.css 2022/12/02 11:25:13 [warn] 210590#210638: [ngx_pagespeed 1.15.0.0-8917] [1202/112513:WARNING:resource_fetch.cc(197)] Fetch failed for resource url http://mydomain.com/wp-content/plugins/total-gdpr-compliance/assets/css/A.linear-icon-font.min.css,,qver==6.1.1+jquery.mCustomScrollbar.css,,qver==2.0.2,Mcc.0QxnMDf5Xg.css.pagespeed.cf.xNaISPEV5w.css 2022/12/02 11:25:13 [warn] 210590#210638: [ngx_pagespeed 1.15.0.0-8917] [1202/112513:WARNING:resource_fetch.cc(197)] Fetch failed for resource url http://mydomain.com/wp-content/themes/shoptimizer/A.style.css,qver=2.6.2.pagespeed.cf.1B2M2Y8Asg.css 2022/12/02 11:25:13 [warn] 210590#210638: [ngx_pagespeed 1.15.0.0-8917] [1202/112513:WARNING:resource_fetch.cc(197)] Fetch failed for resource url http://mydomain.com/wp-content/themes/shoptimizer-child-theme/A.style.css,qver=1.2.1.pagespeed.cf.1B2M2Y8Asg.css 2022/12/02 11:25:13 [warn] 210590#210638: [ngx_pagespeed 1.15.0.0-8917] [1202/112513:WARNING:resource_fetch.cc(197)] Fetch failed for resource url http://mydomain.com/wp-content/themes/shoptimizer/assets/css/main/modal.min.css,qver==2.6.2+blocks.min.css,qver==2.6.2.pagespeed.cc.xqWx8SYpYG.css 2022/12/02 11:25:13 [warn] 210590#210638: [ngx_pagespeed 1.15.0.0-8917] [1202/112513:WARNING:resource_fetch.cc(197)] Fetch failed for resource url http://mydomain.com/wp-content/plugins/newsletter/A.style.css,qver=7.5.6.pagespeed.cf.wVC97_uOK5.css 2022/12/02 11:25:13 [warn] 210590#210638: [ngx_pagespeed 1.15.0.0-8917] [1202/112513:WARNING:resource_fetch.cc(197)] Fetch failed for resource url http://mydomain.com/wp-content/plugins/woocommerce-product-bundles/assets/css/frontend/A.checkout-blocks.css,qver=6.16.1.pagespeed.cf.W7pkChSUkO.css 2022/12/02 11:25:13 [warn] 210590#210638: [ngx_pagespeed 1.15.0.0-8917] [1202/112513:WARNING:resource_fetch.cc(197)] Fetch failed for resource url http://mydomain.com/wp-includes/js/jquery/jquery-migrate.min.js,qver=3.3.2.pagespeed.jm.Ws-UgblvVg.js 2022/12/02 11:25:13 [warn] 210590#210638: [ngx_pagespeed 1.15.0.0-8917] [1202/112513:WARNING:resource_fetch.cc(197)] Fetch failed for resource url http://mydomain.com/wp-content/plugins/total-gdpr-compliance/assets/js/frontend-script.js,qver==2.0.2+webfont.js,qver==6.1.1+json2validation.js,qver==6.1.1+jquery.mCustomScrollbar.js,qver==2.0.2.pagespeed.jc.nXwcx6MHRI.js 2022/12/02 11:25:13 [warn] 210590#210638: [ngx_pagespeed 1.15.0.0-8917] [1202/112513:WARNING:resource_fetch.cc(197)] Fetch failed for resource url http://mydomain.com/wp-content/plugins/commercegurus-commercekit/assets/js/popper.min.js,qver==2.1.1+tippy-bundle.umd.min.js,qver==2.1.1.pagespeed.jc._X-YPIn7qA.js 2022/12/02 11:25:13 [warn] 210590#210638: [ngx_pagespeed 1.15.0.0-8917] [1202/112513:WARNING:resource_fetch.cc(197)] Fetch failed for resource url http://mydomain.com/wp-includes/js/underscore.min.js,qver=1.13.4.pagespeed.jm.-wWaxZbynX.js 2022/12/02 11:25:13 [warn] 210590#210638: [ngx_pagespeed 1.15.0.0-8917] [1202/112513:WARNING:resource_fetch.cc(197)] Fetch failed for resource url http://mydomain.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js,qver=2.7.0-wc.7.1.0.pagespeed.jm.BkSKjHCA_f.js 2022/12/02 11:25:13 [warn] 210590#210638: [ngx_pagespeed 1.15.0.0-8917] [1202/112513:WARNING:resource_fetch.cc(197)] Fetch failed for resource url http://mydomain.com/wp-content/uploads/2022/06/xKaguya-sama_-_Love_is_War_Logo.svg_.png.pagespeed.ic.EHH1d5lnEj.webp 2022/12/02 11:25:13 [warn] 210590#210638: [ngx_pagespeed 1.15.0.0-8
[GitHub] [incubator-pagespeed-ngx] bigretromike commented on issue #1755: Issue with HTTPS only page and noscript support and beacon are injected as http.
bigretromike commented on issue #1755: URL: https://github.com/apache/incubator-pagespeed-ngx/issues/1755#issuecomment-1335101733 Configuration from Admin Page ``` Version: 14: on Filters ah Add Head cw Collapse Whitespace cc Combine Css ch Combine Heads jc Combine Javascript gp Convert Gif to Png jp Convert Jpeg to Progressive jw Convert Jpeg To Webp mc Convert Meta Tags pj Convert Png to Jpeg ws When converting images to WebP, prefer lossless conversions dd Dedup Inlined Images di Delay Images ea Elide Attributes ec Cache Extend Css ei Cache Extend Images es Cache Extend Scripts fc Fallback Rewrite Css if Flatten CSS Imports hw Flushes html ci Inline Css gf Inline Google Font CSS ii Inline Images il Inline @import to Link ji Inline Javascript id Insert Image Dimensions js Jpeg Subsampling ll Lazyload Images tu Left Trim Urls cj Move Css Above Scripts cm Move Css To Head co Outline Css pc Add pedantic types pr Prioritize Critical Css rj Recompress Jpeg rp Recompress Png rw Recompress Webp rq Remove Quotes ri Resize Images rm Resize Mobile Images ir Resize to Rendered Image Dimensions rx Responsive Images cf Rewrite Css jm Rewrite External Javascript jj Rewrite Inline Javascript cs Rewrite Style Attributes cu Rewrite Style Attributes With Url cp Strip Image Color Profiles md Strip Image Meta Data Options AdminPath (nap) /pagespeed_admin AvoidRenamingIntrospectiveJavascript (aris) True BeaconUrl (bu) /ngx_pagespeed_beacon CacheFragment (ckp) ohayo-cache CombineAcrossPaths (cp) False CriticalImagesBeaconEnabled (cibe) True DisableRewriteOnNoTransform (drnt) False EnableCachePurge (euci) True EnableRewriting (e) 1 FetcherTimeOutMs (bfto) 1 FetchHttps (fhs) enable,allow_unknown_certificate_authority,allow_self_signed,allow_certificate_not_yet_valid FileCacheCleanIntervalMs (afcci) 360 FileCacheInodeLimit (afcl) 50 FileCachePath (afcp) /run/nginx-pagespeed/ FileCacheSizeKb (afc)102400 HttpCacheCompressionLevel (hccl) 9 ImageMaxRewritesAtOnce (im) 3 InPlaceResourceOptimization (ipro) False LazyloadImagesAfterOnload (llio) True LazyloadImagesBlankUrl (llbu) https://www.gstatic.com/psa/static/1.gif LogDir (ald) /var/log/pagespeed LRUCacheByteLimit (alcb) 16384 LRUCacheKbPerProcess (alcp) 10240 MaxCacheableContentLength (rcl) 16777216 MaxCombinedCssBytes (xcc)92160 MaxCombinedJsBytes (xcj) 192160 MaxSegmentLength (uss) 250 MemcachedServers (ams) 127.0.0.1:11211 MemcachedThreads (amt) 1 MemcachedTimeoutUs (amo) 100 RewriteLevel (l) Core Filters SslCertDirectory (assld) /etc/pki/tls/certs SslCertFile (asslf) /etc/pki/tls/cert.pem Statistics (ase) True StatisticsLogging (asle) True StatisticsLoggingIntervalMs (asli) 6 StatisticsLoggingMaxFileSizeKb (aslfs) 1024 StatisticsPath (nsp) /nxg_stat SupportNoScriptEnabled (snse)False UseExperimentalJsMinifier (uejsm)True Domain Lawyer https://mydomain.com/ Auth Invalidation Timestamp: Fri, 02 Dec 2022 09:27:24 GMT (1669973244968) ``` page with debug parameter: ``` ``` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@pagespeed.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
[GitHub] [incubator-pagespeed-ngx] bigretromike commented on issue #1755: Issue with HTTPS only page and noscript support and beacon are injected as http.
bigretromike commented on issue #1755:
URL:
https://github.com/apache/incubator-pagespeed-ngx/issues/1755#issuecomment-1335087333
Welcome, once again im struggling with this issue, I didn't resolve it but
now its even more anoying as I changed server, upgraded nginx, installed the
latest and greatest pagespeed module, but still the issue is there. Different
machine, different OS, different software version same issue.
I will be trying to resolve the issue this time and I will be posting
updates with results here.
> pagespeed FetchHttps enable; pagespeed SslCertDirectory directory;
(directory in Debian based normally is /etc/ssl/certs, Centos
/etc/pki/tls/certs pagespeed SslCertFile file; (Only for Red-Hat/Centos distro
/etc/pki/tls/cert.pem.)
As I changed OS (to RHEL compatible) i added sslcert file, without any
difference.
I tried adding `pagespeed FetchHttps
enable,allow_unkonow_certificate_authority,allow_self_signed,allow_certificate_not_yet_valide;`
without difference
If I add `pagespeed MapRewriteDomain "https://mydomain.com";
"http://mydomain.com"` I get fewer errors in logs about not being able to fetch
like this:
`[ngx_pagespeed 1.15.0.0-8917] [1202/103400:WARNING:resource_fetch.cc(197)]
Fetch failed for resource url
http://mydomain.com/wp-content/plugins/total-gdpr-compliance/assets/js/frontend-script.js,qver==2.0.2+webfont.js,qver==6.1.1.pagespeed.jc.-DJsi-JAKD.js`
Which is correct because I even disabled HTTP version of the page so I wont
have issues because of that.
But it shouldnt show up because mydomain.com is 100% https, not a single
line of code/dynamic_code/static_code link to http content on the page.
If I disable MapRewriteDomain, most of the images doesn't load as it tries
to fetch them via http, yet the image is replaces with proper pagespeed link
(that include `.pagespeed.` in name) but it does 404 - maybe im missing ngxin
location route? The only one pointing to similar content is one located as the
first location in mydomain.config file in nginx:
`location ~ "\.pagespeed\.([a-z]\.)?[a-z]{2}\.[^.]{10}\.[^.]+" {
add_header "" "";
set $no_cache 1;
}
`
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscr...@pagespeed.apache.org
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
[GitHub] [incubator-pagespeed-ngx] bigretromike commented on issue #1755: Issue with HTTPS only page and noscript support and beacon are injected as http.
bigretromike commented on issue #1755: URL: https://github.com/apache/incubator-pagespeed-ngx/issues/1755#issuecomment-1272088924 I comment out every MapRewriteDomain and LoadFromFile. I disabled: ``` pagespeed EnableFilters rewrite_domains; pagespeed DomainRewriteHyperlinks on; pagespeed LoadFromFileCacheTtlMs 360; # 1h = 3600 000 pagespeed LoadFromFileRuleMatch disallow .*; pagespeed LoadFromFileRuleMatch allow \.css$; pagespeed LoadFromFileRuleMatch allow \.webp$; pagespeed LoadFromFileRuleMatch allow \.png$; pagespeed LoadFromFileRuleMatch allow \.jpg$; pagespeed LoadFromFileRuleMatch allow \.js$; ``` reloaded, yet still pagespeed try to parse http content even when every http request is redirected to https, I have no idea why.. maybe its bug in printing log ? ```[http://redacted/produkt/j0inya006m/:103] Unrecognized script:' 103...107'``` when you paste `http://redacted/produkt/j0inya006m/` to browser you get 301 to `https://redacted/produkt/j0inya006m/` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@pagespeed.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
[GitHub] [incubator-pagespeed-ngx] bigretromike commented on issue #1755: Issue with HTTPS only page and noscript support and beacon are injected as http.
bigretromike commented on issue #1755:
URL:
https://github.com/apache/incubator-pagespeed-ngx/issues/1755#issuecomment-1269343264
Yes, I do have 301 redirection from http version to https.
I also have www to non-www version 301 redirect.
```
if ($host = www.redacted) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = redacted) {
return 301 https://$host$request_uri;
} # managed by Certbot
```
Still the issue is present. Imo with or without http version pagespeed
should try to optimize the protocol that it was given. not the one he detects
(or not) because any non-https traffic is 301 onto https thats why its a secret
to my why he does anything on http.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscr...@pagespeed.apache.org
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
Re: [GitHub] [incubator-pagespeed-ngx] bigretromike commented on issue #1755: Issue with HTTPS only page and noscript support and beacon are injected as http.
Maybe this don't show in GitHub, because my response goes directly from email. Not a good idea have a site with http/Https, Google may consider it duplicate content. Http must be redirected to Https with a 301 code. Anyway When you fetch the page via http, URLs in the page, get rewrites by pagespeed? El vie, 30 sept 2022 23:32, GitBox escribió: > > bigretromike commented on issue #1755: > URL: > https://github.com/apache/incubator-pagespeed-ngx/issues/1755#issuecomment-1264042708 > >> Sorry for commig too late, but have personal issues that make me out > of internet for some time. >> >> The site runs in https, so why have you: >> >> pagespeed MapRewriteDomain "https://redacted"; "http://redacted";; > pagespeed LoadFromFile "http://redacted/wp-content/"; > "/var/www/wp-content/"; >> >> MapRewriteDomain makes any ocurrence of http://redacted is rewrited > as https://redacted, but if the site runs w/o any proxy, ssl end point or > similar thing, why you have http resources in an https page? >> >> The error you have posted say this: >> >> `# [Warning] [1502319] [image.webp:0] Resource based on > http://redacted/wp-content/uploads/2022/07/image.webp but cannot access > the original` >> >> So pagespeed is searching for a http resource. > >Thanks for replay, better than newer. > >1. `pagespeed MapRewriteDomain "https://redacted/"; "http://redacted/";` > I added it was suggested on other forums to maybe "force" any http request > to https - with or without there is no changes looks like I leave those > uncommented. >2. `pagespeed LoadFromFile "http://redacted/wp-content/"; > "/var/www/wp-content/";` even if the page serve content thru https, the > fallback to http made it tricky as it is same server for http/https content > but I would prefer all traffic go thry https so I mapped http url location > to local path, also another thing that I tested with and without, and this > one cut a lot of errors. still did not resolve issue with https page > getting called back by pagespeed thru http. >3. Yes, page does run without proxy, the page runs fine on http also > but it is servered via https without any content pointing to http (aka no > mixed content) >4. both https and http for > `redacted/wp-content/uploads/2022/07/image.webp` is available. > > > -- > This is an automated message from the Apache Git Service. > To respond to the message, please log on to GitHub and use the > URL above to go to the specific comment. > > To unsubscribe, e-mail: dev-unsubscr...@pagespeed.apache.org > > For queries about this service, please contact Infrastructure at: > us...@infra.apache.org > >
[GitHub] [incubator-pagespeed-ngx] bigretromike commented on issue #1755: Issue with HTTPS only page and noscript support and beacon are injected as http.
bigretromike commented on issue #1755: URL: https://github.com/apache/incubator-pagespeed-ngx/issues/1755#issuecomment-1264042708 > Sorry for commig too late, but have personal issues that make me out of internet for some time. > > The site runs in https, so why have you: > > pagespeed MapRewriteDomain "https://redacted"; "http://redacted";; pagespeed LoadFromFile "http://redacted/wp-content/"; "/var/www/wp-content/"; > > MapRewriteDomain makes any ocurrence of http://redacted is rewrited as https://redacted, but if the site runs w/o any proxy, ssl end point or similar thing, why you have http resources in an https page? > > The error you have posted say this: > > `# [Warning] [1502319] [image.webp:0] Resource based on http://redacted/wp-content/uploads/2022/07/image.webp but cannot access the original` > > So pagespeed is searching for a http resource. Thanks for replay, better than newer. 1. `pagespeed MapRewriteDomain "https://redacted/"; "http://redacted/";` I added it was suggested on other forums to maybe "force" any http request to https - with or without there is no changes looks like I leave those uncommented. 2. `pagespeed LoadFromFile "http://redacted/wp-content/"; "/var/www/wp-content/";` even if the page serve content thru https, the fallback to http made it tricky as it is same server for http/https content but I would prefer all traffic go thry https so I mapped http url location to local path, also another thing that I tested with and without, and this one cut a lot of errors. still did not resolve issue with https page getting called back by pagespeed thru http. 3. Yes, page does run without proxy, the page runs fine on http also but it is servered via https without any content pointing to http (aka no mixed content) 4. both https and http for `redacted/wp-content/uploads/2022/07/image.webp` is available. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@pagespeed.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
[GitHub] [incubator-pagespeed-ngx] bigretromike commented on issue #1755: Issue with HTTPS only page and noscript support and beacon are injected as http.
bigretromike commented on issue #1755: URL: https://github.com/apache/incubator-pagespeed-ngx/issues/1755#issuecomment-1221434254 > And you have a DNS server i 127.0.0.1? And I supose you are not using any proxy cache or load balancing, rigth? You are correct 127.0.0.1 is auth dns server for domain that is used and it also resolved all other querys. Only proxy I use are the one build in nginx and php - I dont use proxy or load balancers on that server. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@pagespeed.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
[GitHub] [incubator-pagespeed-ngx] bigretromike commented on issue #1755: Issue with HTTPS only page and noscript support and beacon are injected as http.
bigretromike commented on issue #1755: URL: https://github.com/apache/incubator-pagespeed-ngx/issues/1755#issuecomment-1220322382 > ``` > pagespeed Domain https://redacted; > # pagespeed MapOriginDomain "https://redacted"; "http://redacted";; # this one doesn't affect beacon so this one is turn off > pagespeed MapRewriteDomain "https://redacted"; "http://redacted"; > pagespeed LoadFromFile "https://redacted/wp-content/"; "/var/www/wp-content/"; > pagespeed LoadFromFile "http://redacted/wp-content/"; "/var/www/wp-content/"; > ``` > > Are these lines all the pagespeed config? Try to add some like: > > pagespeed FetchHttps enable; pagespeed SslCertDirectory directory; (directory in Debian based normally is /etc/ssl/certs, Centos /etc/pki/tls/certs pagespeed SslCertFile file; (Only for Red-Hat/Centos distro /etc/pki/tls/cert.pem.) Yes, they are. I have this in nginx.conf ``` pagespeed FetchHttps enable; pagespeed SslCertDirectory /etc/ssl/certs; pagespeed FetcherTimeoutMs 1; pagespeed NativeFetcherMaxKeepaliveRequests 50; pagespeed UseNativeFetcher off; # use better fetcher resolver 127.0.0.1; # dns for fetrcher ``` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@pagespeed.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
