RE: PSK Support

2017-06-06 Thread Karstens, Nate
Maxim, The biggest downside that I can see to the dummy certificate approach is documentation. Using a dummy certificate wasn't immediately obvious to me, though perhaps my familiarity with OpenSSL's "nocert" option may have affected that. Which do you think would be easier for the user to

Re: Unable to start php-fpm

2017-06-06 Thread Anoop Alias
grep apache /etc/passwd should return something. FYI this has nothing to do with nginx On Wed, Jun 7, 2017 at 7:11 AM, marcospaulo877 wrote: > /etc/init.d/php-fpm restart > Stopping php-fpm: [FAILED] > Starting php-fpm:

Re: Unable to start php-fpm

2017-06-06 Thread marcospaulo877
/etc/init.d/php-fpm restart Stopping php-fpm: [FAILED] Starting php-fpm: [07-Jun-2017 01:35:37] ERROR: [pool www] cannot get uid for user 'apache' [07-Jun-2017 01:35:37] ERROR: FPM initialization failed

Convert Alias from apache (totally different root)

2017-06-06 Thread ianwinter
I've read the docs and understand how root and alias work within a location, but, neither can be used to convert what I've got in apache that I can see. Take the example `Alias /media /path/to/assets` in apache, the location and path are completely different (media doesn't form any part either in

Re: Active/Active NginX configuration

2017-06-06 Thread Francis Daly
On Tue, May 30, 2017 at 11:20:11AM -0400, kingstonsew wrote: Hi there, > I current have configured 2 NginX running on Red Had Enterprise Linux 7.3. > Both NginX will load balance a set of 4 application servers. The current > configuration for both of the NginX is active / passive by using

Stale While Revalidate Expires

2017-06-06 Thread Rafael Cirolini
We've just updated to 1.12 to use the stale-while-revalidate option. The application is who sends the cache-control header, like this: cache-control:max-age=180, stale-while-revalidate=60, stale-if-error=864000 If I understood how SWR works, the user shouldn't receive stale content after 180+60

Re: how to install nginx_substitutions_filter in existing Nginx

2017-06-06 Thread Francis Daly
On Tue, Jun 06, 2017 at 12:27:04AM -0400, David Woodstuck wrote: Hi there, > I am a new Nginx user. I just install Nginx 1.12. I like to > use nginx_substitutions_filter. I cannot figure out how to install > nginx_substitutions_filter in previously existing Nginx. You (probably) don't.

Re: [PATCH] Use .exe for binaries for all win32 compilers

2017-06-06 Thread Maxim Dounin
Hello! On Tue, Jun 06, 2017 at 05:54:01PM +0300, Orgad Shaneh wrote: > > http://mailman.nginx.org/pipermail/nginx-devel/2016-December/009234.html > > Thanks. It is needed with MSYS2 / gcc. Proposing a new patch: > > --- > auto/cc/bcc | 1 - > auto/cc/conf | 7 ++- > auto/cc/msvc | 1 - >

Re: [PATCH] Fix compilation on MinGW64

2017-06-06 Thread Maxim Dounin
Hello! On Tue, Jun 06, 2017 at 05:48:39PM +0300, Orgad Shaneh wrote: > On Tue, Jun 6, 2017 at 5:11 PM, Maxim Dounin wrote: > > Hello! > > > > On Tue, Jun 06, 2017 at 01:57:39PM +0300, Orgad Shaneh wrote: > > > >> I already proposed a similar patch (without MSYS) on November,

Re: Proxy parameter to nginx service

2017-06-06 Thread Francis Daly
On Mon, Jun 05, 2017 at 04:16:55PM +0200, juan_barbancho_...@cajarural.com wrote: Hi there, > I need to use nginx to made a proxy_pass to some url, but I need to pass > some proxy param in order to do not get the connection " upstream timed > out (110: Connection timed out) " Stock nginx

Re: source rpms missing?

2017-06-06 Thread David Kewley
Thanks Konstantin! I see this now: http://nginx.org/packages/centos/6/SRPMS/nginx-1.12.0-1.el6.ngx.src.rpm. Didn't see it yesterday, but maybe I was overlooking it. I did verify that the binary rpms for CentOS and RHEL are identical, so agreed that the CentOS srpm will meet my needs. David On

Re: [PATCH] Use .exe for binaries for all win32 compilers

2017-06-06 Thread Orgad Shaneh
> http://mailman.nginx.org/pipermail/nginx-devel/2016-December/009234.html Thanks. It is needed with MSYS2 / gcc. Proposing a new patch: --- auto/cc/bcc | 1 - auto/cc/conf | 7 ++- auto/cc/msvc | 1 - auto/cc/owc | 1 - 4 files changed, 6 insertions(+), 4 deletions(-) diff --git

[PATCH] Configure: Fix compilation on MSYS2 / MinGW64

2017-06-06 Thread Orgad Shaneh
--- auto/configure | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/auto/configure b/auto/configure index ceff15e4..107c2b5f 100755 --- a/auto/configure +++ b/auto/configure @@ -36,7 +36,7 @@ if test -z "$NGX_PLATFORM"; then

Re: [PATCH] Fix compilation on MinGW64

2017-06-06 Thread Orgad Shaneh
On Tue, Jun 6, 2017 at 5:11 PM, Maxim Dounin wrote: > Hello! > > On Tue, Jun 06, 2017 at 01:57:39PM +0300, Orgad Shaneh wrote: > >> I already proposed a similar patch (without MSYS) on November, but it >> was unnoticed since then. >> --- >> auto/configure | 2 +- >> 1 file

Re: [PATCH] Use .exe for binaries for all win32 compilers

2017-06-06 Thread Maxim Dounin
Hello! On Tue, Jun 06, 2017 at 01:58:17PM +0300, Orgad Shaneh wrote: > --- > auto/cc/conf | 4 +++- > 1 file changed, 3 insertions(+), 1 deletion(-) > > diff --git a/auto/cc/conf b/auto/cc/conf > index afbca62b..19a231aa 100644 > --- a/auto/cc/conf > +++ b/auto/cc/conf > @@ -144,7 +144,9 @@ fi

Re: [PATCH] Fix compilation on MinGW64

2017-06-06 Thread Maxim Dounin
Hello! On Tue, Jun 06, 2017 at 01:57:39PM +0300, Orgad Shaneh wrote: > I already proposed a similar patch (without MSYS) on November, but it > was unnoticed since then. > --- > auto/configure | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > > diff --git a/auto/configure

nginx качает один и тот же файл в несколько коннектов с бэкенда

2017-06-06 Thread Yury Lyakh
День добрый, может кто сталкивался с проблемой закачки файлов с бэкенда параллельно в несколько потоков. Есть мелкий конфиг ниже. Клиенты приходят с запросами ренжовыми и обычными, если файл отсутствует в кеше он начинает качаться с бэкенда, но качается во столько нитей сколько клиентов

Re: real_ip on Azure Cloud + Application Gateway

2017-06-06 Thread Maxim Dounin
Hello! On Tue, Jun 06, 2017 at 04:12:20PM +0300, Sergey Kagansky wrote: > Добрый день! > Пользуемся Nginx в облаке Azure > В качестве лоадбалансера перед несколькими Nginx серверами используем > Application Gateway. > Проблема в том, что он в заголовке X-Forwarded-For передаёт IP:PORT (пример >

Re: SRP Support.

2017-06-06 Thread Maxim Dounin
Hello! On Tue, Jun 06, 2017 at 10:06:57AM +0300, Антон Чивкунов via nginx wrote: > Hi all. > Please kindly let me know if nginx (or nginx Plus) have support > of SRP (Secure Remote Password Protocol) authentication? > After checking nginx documentation and source code I guess the > answer on

How to do proxy in this case

2017-06-06 Thread David Woodstuck
I have one proxy server(nginx) - such as nginx.mycom.com and three upstream servers - name1.mycom.com, name2.mycom.com name3.mycom.com for my one application. Contents from upstream servers have a lot of iframes which have different domains. I want to allow XSS for these different domains. I don't

real_ip on Azure Cloud + Application Gateway

2017-06-06 Thread Sergey Kagansky
Добрый день! Пользуемся Nginx в облаке Azure В качестве лоадбалансера перед несколькими Nginx серверами используем Application Gateway. Проблема в том, что он в заголовке X-Forwarded-For передаёт IP:PORT (пример ниже) Вопрос: можно это как то излечить и получить в логах Nginx правильный адрес

Re: source rpms missing?

2017-06-06 Thread Konstantin Pavlov
Hello, On 06/06/2017 04:00, David Kewley wrote: > In http://nginx.org/packages/rhel/6/SRPMS/ I don't see > nginx-1.12.0-1.el6.ngx.src.rpm as expected. Similar for RHEL 5 and 7, and for > CentOS. This appears just to affect this release not (most of) the previous > releases. RHEL5 and CentOS5

Re: [PATCH 3 of 3] Headers filter: added "add_trailer" directive

2017-06-06 Thread Maxim Dounin
Hello! On Mon, Jun 05, 2017 at 09:59:45PM -0700, Piotr Sikora via nginx-devel wrote: > Hey Maxim, > > > It doesn't look like "if (h[i].value.value.len)" is needed here. > > It is either true, or the "add_trailer" directive is nop and we > > already know this while parsing the configuration. > >

Re: [PATCH 1 of 3] Added support for trailers in HTTP responses

2017-06-06 Thread Maxim Dounin
Hello! On Mon, Jun 05, 2017 at 09:56:03PM -0700, Piotr Sikora via nginx-devel wrote: > Hey Maxim, > > > I would prefer to preserve the typical code path (when there are no > > trailers) without an extra allocation. It looks like it would be > > as trivail as: > > > > @@ -273,14 +273,18 @@

[PATCH] Use .exe for binaries for all win32 compilers

2017-06-06 Thread Orgad Shaneh
--- auto/cc/conf | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/auto/cc/conf b/auto/cc/conf index afbca62b..19a231aa 100644 --- a/auto/cc/conf +++ b/auto/cc/conf @@ -144,7 +144,9 @@ fi CFLAGS="$CFLAGS $NGX_CC_OPT" NGX_TEST_LD_OPT="$NGX_LD_OPT" -if [ "$NGX_PLATFORM" !=

[PATCH] Fix compilation on MinGW64

2017-06-06 Thread Orgad Shaneh
I already proposed a similar patch (without MSYS) on November, but it was unnoticed since then. --- auto/configure | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/auto/configure b/auto/configure index ceff15e4..107c2b5f 100755 --- a/auto/configure +++ b/auto/configure @@ -36,7

Re: [PATCH 2 of 3] HTTP/2: added support for trailers in HTTP responses

2017-06-06 Thread Maxim Konovalov
On 05/06/2017 21:00, Maxim Dounin wrote: > Hello! > > On Fri, Jun 02, 2017 at 08:33:46PM -0700, Piotr Sikora via nginx-devel wrote: > >> # HG changeset patch >> # User Piotr Sikora >> # Date 1493191954 25200 >> # Wed Apr 26 00:32:34 2017 -0700 >> # Node ID

SRP Support.

2017-06-06 Thread Антон Чивкунов via nginx
Hi all. Please kindly let me know if nginx (or nginx Plus) have support of SRP (Secure Remote Password Protocol) authentication? After checking nginx documentation and source code I guess the answer on my question will be ‘NO’, but would like to get confirmation (may be I missed something). If

Re: Proxy parameter to nginx service

2017-06-06 Thread juan_barbancho_rsi
Hi, I thought that the use of proxy_pass could be the opction to pass the proxy environment var, in the ngnix.conf file. This may be at general level of only at proxy_pass level. Could be a improve for the nginx server ? Saludos Juanp ADVERTENCIA LEGAL --- "Este