Response code 400 rather than 404

2017-07-17 Thread li...@lazygranch.com
I'm curious why this request got a 400 response rather than a 404. 

400 123.160.235.162 - - [16/Jul/2017:22:56:30 +] "GET /currentsetting.htm 
HTTP/1.1" 173 "-" "-" "-"

log_format  main  '$status $remote_addr - $remote_user [$time_local] "$request" 
'
  '$body_bytes_sent "$http_referer" '
  '"$http_user_agent" "$http_x_forwarded_for"';
___
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx


Re: Buffering issues with nginx

2017-07-17 Thread Francis Daly
On Mon, Jul 17, 2017 at 02:06:27AM -0400, Dan34 wrote:

Hi there,

> No matter what configs I try, nginx still keeps buffering my requests.

proxy_request_buffering (http://nginx.org/r/proxy_request_buffering)
relates to nginx buffering the request from the client.

proxy_buffering (http://nginx.org/r/proxy_buffering) relates to nginx
buffering the response from the upstream server.

Are you concerned about the request or the response being buffered?

f
-- 
Francis Dalyfran...@daoine.org
___
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx


Re: Response code 400 rather than 404

2017-07-17 Thread Maxim Dounin
Hello!

On Mon, Jul 17, 2017 at 12:09:58AM -0700, li...@lazygranch.com wrote:

> I'm curious why this request got a 400 response rather than a 404. 
> 
> 400 123.160.235.162 - - [16/Jul/2017:22:56:30 +] "GET /currentsetting.htm 
> HTTP/1.1" 173 "-" "-" "-"
> 
> log_format  main  '$status $remote_addr - $remote_user [$time_local] 
> "$request" '
>   '$body_bytes_sent "$http_referer" '
>   '"$http_user_agent" "$http_x_forwarded_for"';

Your error_log should have the details once configured at the 
"info" level.

-- 
Maxim Dounin
http://nginx.org/
___
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx


Problem setting up ssl

2017-07-17 Thread Etienne Robillard

Hi,

I'm trying to setup ssl on my server and "nginx -t" reports no problem 
but the server is now listening on port 256 instead of 443. Any idea 
what is wrong ?



Thanks,


Etienne

___
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx


Re: Problem setting up ssl

2017-07-17 Thread Etienne Robillard

Sorry for the noise - apparently the certicate is not yet fully working.

E


Le 2017-07-17 à 11:29, Etienne Robillard a écrit :

Hi,

I'm trying to setup ssl on my server and "nginx -t" reports no problem 
but the server is now listening on port 256 instead of 443. Any idea 
what is wrong ?



Thanks,


Etienne

___
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx



--
Etienne Robillard
tkad...@yandex.com
http://www.isotopesoftware.ca/

___
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx

try_files and gzip_static

2017-07-17 Thread DonaldCock
From my knowledge, try_files works with gzip_static if both compressed and
uncompressed files exist, but with "gunzip on;", it doesn't seem like
try_files becomes aware of this, and so it'll only serve either the
compressed or uncompressed file.

Any idea how to get around this? I can't serve the files directly as there's
no file extension in the uri, and it's rewritten.

My config for that block:

location ~ ^/view/c1/(\w+)/(\d+)(/|\.html)?$ {
gzip_static on;
gunzip on;

add_header Cache-Control "public, must-revalidate";
try_files /static/b_$1/$2.html /view.php?b=$1&t=$2;
}

Posted at Nginx Forum: 
https://forum.nginx.org/read.php?2,275539,275539#msg-275539

___
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx

Re: Problem setting up ssl

2017-07-17 Thread Etienne Robillard
It seems I have a problem with the SSL certificate chain, as per 
whatsmychaincert.com. However my SSL certificate provider (Gandi) says 
that the SSL certificate still needs to be attributed... I don't know 
what to do at this point but to wait for a message from Gandi. 
Whatsmychaincert.com is telling me to update my certificate (crt) file, 
but I'm not trusting this website yet. Do you guys have any advices for 
setting up a SSL certificate with nginx - should I use the generated 
certificate from whatsmychaincert.com?


Thanks in advance,

Etienne


Le 2017-07-17 à 11:32, Etienne Robillard a écrit :

Sorry for the noise - apparently the certicate is not yet fully working.

E


Le 2017-07-17 à 11:29, Etienne Robillard a écrit :

Hi,

I'm trying to setup ssl on my server and "nginx -t" reports no 
problem but the server is now listening on port 256 instead of 443. 
Any idea what is wrong ?



Thanks,


Etienne

___
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx





--
Etienne Robillard
tkad...@yandex.com
http://www.isotopesoftware.ca/

___
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx

Re: Problem setting up ssl

2017-07-17 Thread Fabian A. Santiago
On July 17, 2017 7:05:31 PM EDT, Etienne Robillard  wrote:
>It seems I have a problem with the SSL certificate chain, as per 
>whatsmychaincert.com. However my SSL certificate provider (Gandi) says 
>that the SSL certificate still needs to be attributed... I don't know 
>what to do at this point but to wait for a message from Gandi. 
>Whatsmychaincert.com is telling me to update my certificate (crt) file,
>
>but I'm not trusting this website yet. Do you guys have any advices for
>
>setting up a SSL certificate with nginx - should I use the generated 
>certificate from whatsmychaincert.com?
>
>Thanks in advance,
>
>Etienne
>
>
>Le 2017-07-17 à 11:32, Etienne Robillard a écrit :
>> Sorry for the noise - apparently the certicate is not yet fully
>working.
>>
>> E
>>
>>
>> Le 2017-07-17 à 11:29, Etienne Robillard a écrit :
>>> Hi,
>>>
>>> I'm trying to setup ssl on my server and "nginx -t" reports no 
>>> problem but the server is now listening on port 256 instead of 443. 
>>> Any idea what is wrong ?
>>>
>>>
>>> Thanks,
>>>
>>>
>>> Etienne
>>>
>>> ___
>>> nginx mailing list
>>> nginx@nginx.org
>>> http://mailman.nginx.org/mailman/listinfo/nginx
>>>
>>
>
>-- 
>Etienne Robillard
>tkad...@yandex.com
>http://www.isotopesoftware.ca/
>
>___
>nginx mailing list
>nginx@nginx.org
>http://mailman.nginx.org/mailman/listinfo/nginx

You likely need to concatenate your cert and your ca's intermediate root 
signing cert into one file and apply that as your nginx cert with your private 
key as such. Then reload nginx. 


-- 
Thanks.
Fabian S.

OpenPGP:

3c3fa072accb7ac5db0f723455502b0eeb9070fc
___
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx

Re: Problem setting up ssl

2017-07-17 Thread Etienne Robillard



Le 2017-07-17 à 19:30, Fabian A. Santiago a écrit :


You likely need to concatenate your cert and your ca's intermediate root 
signing cert into one file and apply that as your nginx cert with your private 
key as such. Then reload nginx.


Hi Fabian,

Is this precisely whatsmychaincert.com is doing ?

Here is the error msg from nginx when I attempt to use the generated 
cert from whatsmychaincert.com:


nginx: [emerg] 
SSL_CTX_use_PrivateKey_file("/etc/nginx/ssl/ssl-cert-livestore.key") 
failed (SSL: error:0B080074:x509 certificate 
routines:X509_check_private_key:key values mismatch)

nginx: configuration file /etc/nginx/nginx.conf test failed

--
Etienne Robillard
tkad...@yandex.com
http://www.isotopesoftware.ca/

___
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx

Re: Problem setting up ssl

2017-07-17 Thread Etienne Robillard

Hi Steve,

I fixed the issue by rolling my own crt file using Fabian method. :)

Cheers,

E


Le 2017-07-17 à 20:09, steve a écrit :

Hi,



On 18/07/17 11:38, Etienne Robillard wrote:



Le 2017-07-17 à 19:30, Fabian A. Santiago a écrit :


You likely need to concatenate your cert and your ca's intermediate 
root signing cert into one file and apply that as your nginx cert 
with your private key as such. Then reload nginx.



Hi Fabian,

Is this precisely whatsmychaincert.com is doing ?

Here is the error msg from nginx when I attempt to use the generated 
cert from whatsmychaincert.com:


nginx: [emerg] 
SSL_CTX_use_PrivateKey_file("/etc/nginx/ssl/ssl-cert-livestore.key") 
failed (SSL: error:0B080074:x509 certificate 
routines:X509_check_private_key:key values mismatch)

nginx: configuration file /etc/nginx/nginx.conf test failed

this means that your key ad cert files are not a pair. You need to 
update both ( unless you use the same signing request both times - 
which is not a good idea ).


--
Etienne Robillard
tkad...@yandex.com
http://www.isotopesoftware.ca/

___
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx

Re: Buffering issues with nginx

2017-07-17 Thread Dan34
Hi Francis,

> Are you concerned about the request or the response being buffered?

my problem is that response that my node app (upstream server) generates is
buffered by nginx.
My actual goal is to know speed and amount of data that my node app sent to
a client. So, when I sent 20MB binary blob from node I can wait till data is
sent out and I'll know approximate speed and size. The moment I put my node
app behind an nginx proxy things fall apart: suddenly all transfers are
instant, and I cannot even know if entire 20MB of data was delivered or if
the connection failed in the middle. When I updated some of these buffering
configs things improved, but still were failing with smaller uploads that
are still fully buffered by nginx.

Posted at Nginx Forum: 
https://forum.nginx.org/read.php?2,275526,275544#msg-275544

___
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx


Naxsi Nginx security module in nginx webserver

2017-07-17 Thread Kaushal Shriyan
Hi,

Are there any rpm binary package or yum repo for CentOS 7.x to install
Naxsi Nginx security module in nginx webserver?

Regards,

Kaushal
___
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx