Re: [PATCH] SSL: make ssl_password_file work with recent OpenSSL releases

2014-10-30 Thread Piotr Sikora
Hey Sergey, n is being used to print the final error, after the use of the last password fails, so you cannot completely remove it. You should probably just move it after the if loop. Nevermind, that n is being used only in the code I used when debugging this issue. Sorry for the noise. Best

[PATCH] Upstream: add proxy_ssl_certificate and friends

2014-10-30 Thread Piotr Sikora
# HG changeset patch # User Piotr Sikora pi...@cloudflare.com # Date 1414668641 25200 # Thu Oct 30 04:30:41 2014 -0700 # Node ID bb14c7659efb32d1d1f651bdf54a8c8157ef67f9 # Parent 87ada3ba1392fadaf4d9193b5d345c248be32f77 Upstream: add proxy_ssl_certificate and friends. Signed-off-by: Piotr

Re: [PATCH] SSL: don't enable SSLv3 by default

2014-10-30 Thread Maxim Dounin
Hello! On Wed, Oct 29, 2014 at 09:17:04PM -0700, Piotr Sikora wrote: # HG changeset patch # User Piotr Sikora pi...@cloudflare.com # Date 1414642398 25200 # Wed Oct 29 21:13:18 2014 -0700 # Node ID bf17486e5d30574b870926b76c1d6f421e4def75 # Parent

Re: [PATCH] SSL: don't enable SSLv3 by default

2014-10-30 Thread Richard Fussenegger
The rationale may make sense depending on the priorities, but shouldn't the default configuration target generic applications? Generic applications don't need compatibility with ancient software (only IE6 on XP actually /needs/ SSLv3, don't know about libraries though). Administrators who

[nginx] SSL: simplified ssl_password_file error handling.

2014-10-30 Thread Sergey Kandaurov
details: http://hg.nginx.org/nginx/rev/42520df85ebb branches: changeset: 5892:42520df85ebb user: Sergey Kandaurov pluk...@nginx.com date: Fri Oct 24 04:28:00 2014 -0700 description: SSL: simplified ssl_password_file error handling. Instead of collecting a number of the possible

Re: [PATCH] SSL: don't enable SSLv3 by default

2014-10-30 Thread Maxim Dounin
Hello! On Thu, Oct 30, 2014 at 03:05:18PM +0100, Richard Fussenegger wrote: The rationale may make sense depending on the priorities, but shouldn't the default configuration target generic applications? Generic applications don't need compatibility with ancient software (only IE6 on XP

Re: [PATCH] SSL: don't enable SSLv3 by default

2014-10-30 Thread Richard Fussenegger
On 10/30/2014 4:47 PM, Maxim Dounin wrote: Hello! There is still compatibility point of view, and from this point of view it's important to be able to talk to old versions of browsers. To be able to show a message like update your browser, it's too old, to deliver updates to them, or whatever.

[nginx] Contrib: add more directives to vim syntax.

2014-10-30 Thread Maxim Dounin
details: http://hg.nginx.org/nginx/rev/fa4161fe8254 branches: changeset: 5893:fa4161fe8254 user: Peter Wu pe...@lekensteyn.nl date: Wed Oct 22 15:31:19 2014 +0200 description: Contrib: add more directives to vim syntax. uwsgi is not a third-party module anymore. 'split_clients' is a

Re: [PATCH] SSL support for the mail proxy module

2014-10-30 Thread Kunal Pariani
Hello, Any reason for this patch not being committed upstream yet ? Thanks -Kunal From: Franck Levionnois flevionn...@gmail.com To: nginx-devel nginx-devel@nginx.org, Kunal Pariani kpari...@zimbra.com Sent: Tuesday, October 21, 2014 12:59:04 AM Subject: Re: [PATCH] SSL support for the

Re: Fwd: ngx_http_image_filter_module - resize увеличение изображений

2014-10-30 Thread An
Дело в том, что есть мобильные приложения под разные платформы, которые как и веб версия сайта, используют апи сервера, соответственно и фильтр. А реализовывать увеличение на всех клиентах неудобно. 29 октября 2014 г., 21:55 пользователь Maxim Dounin mdou...@mdounin.ru написал: Hello! On Wed,

Re: nginx как https редиректор

2014-10-30 Thread killart
Идея в следующем: Есть несколько веб-серверов (appsrv-n) разных компаний. Необходимо обеспечить работу nginx в режиме обратного прокси-сервера и SSL-терминатора для HTTPS запросов. При этом трафик различных серверов, с точки зрения информационной безопасности, нельзя обрабатывать на одном nginx.

Re: nginx как https редиректор

2014-10-30 Thread Никита Кардашин
Странная безопасность, если честно. Если я правильно понимаю, то задача поставленная в этом посте решается через n серверов с nginx и 301 redirect. В чем принципиальная разница между перенаправлять и проксировать с т.з. ИБ? В обоих случаях злоумышленник, скомпрометировав центральный nginx сможет

Re: nginx-1.7.7

2014-10-30 Thread Kevin Worthington
Hello Nginx users, Now available: Nginx 1.7.7 for Windows http://goo.gl/K1TKU8 (32-bit and 64-bit versions) These versions are to support legacy users who are already using Cygwin based builds of Nginx. Officially supported native Windows binaries are at nginx.org. Announcements are also

Nginx keep crashes when it is used in uwsgi

2014-10-30 Thread arulmarans
In my setup, i have nginx proxy in different machine, nginx server and uwsgi service. Once Nginx server receives the request from the proxy, it invokes the uwsgi call to using uwsgi socket, uwsgi module replies the request, after receiving the response from the uwsgi service nginx server forwards

Re: Nginx keep crashes when it is used in uwsgi

2014-10-30 Thread Maxim Dounin
Hello! On Thu, Oct 30, 2014 at 08:17:41AM -0400, arulmarans wrote: In my setup, i have nginx proxy in different machine, nginx server and uwsgi service. Once Nginx server receives the request from the proxy, it invokes the uwsgi call to using uwsgi socket, uwsgi module replies the request,

Re: How to disable access_log to images but log 404s

2014-10-30 Thread Wandenberg Peixoto
Try to set log_not_found http://nginx.org/en/docs/http/ngx_http_core_module.html#log_not_found to off On Thu, Oct 30, 2014 at 11:56 AM, Igal @ getRailo.org i...@getrailo.org wrote: hi, I am suppressing the access_log for images and other files in the /res/ directory: location ^~ /res/

Re: Nginx keep crashes when it is used in uwsgi

2014-10-30 Thread arulmarans
I have already gone through that link, still gdb was not catching core dump... Log snippet: 2014/10/30 13:54:07 [debug] 16259#0: *2 http static fd: 11 2014/10/30 13:54:07 [debug] 16259#0: *2 http set discard body 2014/10/30 13:54:07 [debug] 16259#0: *2 HTTP/1.1 200 OK^M Server: nginx/1.7.6^M

CentOS 6.6, SELinux breaks Nginx 1.6.0

2014-10-30 Thread mevans336
We have been successfully running Nginx installed from the official Nginx CentOS repositories for ages. Last night I upgraded two of my Nginx 1.6.0 servers from CentOS 6.5 to CentOS 6.6 and SELinux immediately broke just about everything with Nginx. At first it wouldn't let it read the SSL certs,

Re: Nginx keep crashes when it is used in uwsgi

2014-10-30 Thread Maxim Dounin
Hello! On Thu, Oct 30, 2014 at 10:54:38AM -0400, arulmarans wrote: Hi Maxim Dounin, I have gone through those steps, still i was not able to catch the backtrace in the gdb. You may start with providing nginx -V output, as recommended at http://wiki.nginx.org/Debugging#Asking_for_help.

Re: Nginx keep crashes when it is used in uwsgi

2014-10-30 Thread arulmarans
Thanks a lot Maxim,you identified the issue (Monitd is the issue), after stopping the monit i have not faced the issue. Thanks for the prompt and trust on the Nginx... I have used following configurations: server { listen 8090; server_name uwsgi; add_header

Re: CentOS 6.6, SELinux breaks Nginx 1.6.0

2014-10-30 Thread Dewangga
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, By default nginx drops as pasted before, nginx never drops the file types as `httpd_config_t`. If you never needed SELinux and didn't familiar with it, just disabled. But, it not recommended to you to disable them. Good luck! On 10/31/2014

Re: CentOS 6.6, SELinux breaks Nginx 1.6.0

2014-10-30 Thread mevans336
Then that is something that is different with respect to CentOS 6.6, because the default.conf was just dropped when I re-installed it from the Nginx yum repository. -rw-r--r--. root root system_u:object_r:httpd_config_t:s0 default.conf -rw-r--r--. root root

Re: CentOS 6.6, SELinux breaks Nginx 1.6.0

2014-10-30 Thread richardm
An upgrade to Centos 6.6 seems to relabel the standard directories used by nginx with httpd_ tags. I have two Centos systems nginx installed from the nginx repo. Both were at version 6.5 and showed, ls -lZ /etc/nginx/ drwxr-xr-x. root root system_u:object_r:etc_t:s0 conf.d . . .