Re: [PATCH] SSL: fix order of checks during SSL certificate verification

Hello! On Tue, Aug 09, 2016 at 12:51:38PM -0700, Piotr Sikora wrote: > Hey Maxim, > > > This behaviour is explicitly documented for years. The BUGS > > section outlines that the API is not intuitive and requires use of > > SSL_get_peer_certificate() in addition ot SSL_get_verify_result(). > >

[PATCH 2 of 2] Core: add ngx_atomic_store() and ngx_atomic_load()

# HG changeset patch # User Piotr Sikora # Date 1471265532 25200 # Mon Aug 15 05:52:12 2016 -0700 # Node ID 40765d8ee4dd29089b0e60ed5b6099ac624e804e # Parent 2f2ec92c3af93c11e195fb6d805df57518fede7c Core: add ngx_atomic_store() and ngx_atomic_load(). Those functions

[PATCH] Events: improve ngx_notify() interface

# HG changeset patch # User Piotr Sikora # Date 1471265536 25200 # Mon Aug 15 05:52:16 2016 -0700 # Node ID e4241e448bc94e6b598a2178d7378aef63741f3c # Parent c131f20c9562387f94a268440594c288725d3ba8 Events: improve ngx_notify() interface. Previous implementation had

[PATCH 1 of 2] Core: use ngx_trylock() where possible

# HG changeset patch # User Piotr Sikora # Date 1471265530 25200 # Mon Aug 15 05:52:10 2016 -0700 # Node ID 2f2ec92c3af93c11e195fb6d805df57518fede7c # Parent c131f20c9562387f94a268440594c288725d3ba8 Core: use ngx_trylock() where possible. It makes code much more

[PATCH] Thread pools: create threads in detached state

# HG changeset patch # User Piotr Sikora # Date 1471265524 25200 # Mon Aug 15 05:52:04 2016 -0700 # Node ID f5fa7a77bcf49091d4315b18f2bca098ca314b06 # Parent c131f20c9562387f94a268440594c288725d3ba8 Thread pools: create threads in detached state. This prevents

[PATCH 6 of 6] SSL: fix order of checks during SSL certificate verification

# HG changeset patch # User Piotr Sikora # Date 1471429000 25200 # Wed Aug 17 03:16:40 2016 -0700 # Node ID 7bc55832b01ad62ac85f7fe5c72cbc4a7f212c3b # Parent 5550dfc1414afcd5471b7fc8ca4482f7e18ba865 SSL: fix order of checks during SSL certificate verification.

[PATCH 3 of 6] SSL: pull common SSL options into OpenSSL module

# HG changeset patch # User Piotr Sikora # Date 1471428985 25200 # Wed Aug 17 03:16:25 2016 -0700 # Node ID 99c2f52beae28567bf2f8501d1a182cd20004c71 # Parent 788c6187bdbd72787ba24505731e42b6a2307be3 SSL: pull common SSL options into OpenSSL module. No functional

[PATCH 5 of 6] SSL: add ngx_ssl_verify_host()

# HG changeset patch # User Piotr Sikora # Date 1471428995 25200 # Wed Aug 17 03:16:35 2016 -0700 # Node ID 5550dfc1414afcd5471b7fc8ca4482f7e18ba865 # Parent a9f36e1dd744130aa2ba080ae2a63f07986c8e83 SSL: add ngx_ssl_verify_host(). No functional changes.

[PATCH 2 of 6] SSL: pull common SSL defines into OpenSSL module

# HG changeset patch # User Piotr Sikora # Date 1471428980 25200 # Wed Aug 17 03:16:20 2016 -0700 # Node ID 788c6187bdbd72787ba24505731e42b6a2307be3 # Parent 653b04653271346c63ab5f3daced807228eed5ac SSL: pull common SSL defines into OpenSSL module. Those values are

[PATCH 4 of 6] SSL: add ngx_ssl_verify_client()

# HG changeset patch # User Piotr Sikora # Date 1471428990 25200 # Wed Aug 17 03:16:30 2016 -0700 # Node ID a9f36e1dd744130aa2ba080ae2a63f07986c8e83 # Parent 99c2f52beae28567bf2f8501d1a182cd20004c71 SSL: add ngx_ssl_verify_client(). No functional changes.

[PATCH 1 of 6] SSL: define NGX_SSL_VERIFY constants

# HG changeset patch # User Piotr Sikora # Date 1471428975 25200 # Wed Aug 17 03:16:15 2016 -0700 # Node ID 653b04653271346c63ab5f3daced807228eed5ac # Parent c131f20c9562387f94a268440594c288725d3ba8 SSL: define NGX_SSL_VERIFY constants. No binary changes.

Re: Dynamic module and obtaining http core module configuration

Hello! On Wed, Aug 10, 2016 at 12:09:54PM +0300, Rūdolfs Bundulis wrote: > Hi, > > I am trying to make a dynamic nginx module. After reading all the tutorials > and stuff available I set up a working minimal sample and started hooking > up my http handlers. The question that arose is, in the

Re: Start nginx worker process with same user as master process

On Wed, Aug 17, 2016 at 12:03:48PM -0400, Sushma wrote: Hi there, > I have setup nginx master process with a user , lets say user1. By that, do you mean "you run nginx as user1", or something else? > In the nginx.conf, user directive is mentioned with nginx. (user nginx;) > I understand that

Start nginx worker process with same user as master process

I have setup nginx master process with a user , lets say user1. In the nginx.conf, user directive is mentioned with nginx. (user nginx;) I understand that worker processes will be spawned by user nginx when I start nginx. Is there a way to start worker processes also as user1 without changing

Problem with SSL handshake

nginx version: 1.6.2 Hello, The client and Nginx server seem to have problem to establish a SSL connection. In the logs I have this[crit] 18386#0: *1 SSL_do_handshake() failed (SSL: error:14094456:SSL routines:SSL3_READ_BYTES:tlsv1 unsupported extension:SSL alert number 110) whle SSL