[PATCH] Mail: added support for SSL client certificate

2014-04-27 Thread Christian Felsing
Hello, this patch has an buffer length calculation issue in src/mail/ngx_mail_auth_http_module.c, in case of multiple login - logout sequences sometimes I got signal 11 errors in log which are caused by memory access outside that buffer. This may also a security issue. len = sizeof(GET ) - 1

Re: [PATCH] Mail: added support for SSL client certificate

2014-04-27 Thread Filipe Da Silva
Hi, My answer are below. 2014-04-27 9:54 GMT+02:00 Christian Felsing p...@felsing.net: Hello, this patch has an buffer length calculation issue in src/mail/ngx_mail_auth_http_module.c, in case of multiple login - logout sequences sometimes I got signal 11 errors in log which are caused by

Re: [PATCH] Mail: added support for SSL client certificate

2014-04-27 Thread Christian Felsing
Hi, Am 27.04.2014 12:53, schrieb Filipe Da Silva: I'm not sure about this, as this buffer already has an oversized allocation: ...I hope so... Same about the certificate subject. C strings are zero terminated, whatever its contains : UTF-8 or not. if all used libraries do so, this should

Re: [PATCH] Mail: added support for SSL client certificate

2014-04-27 Thread Christian Felsing
one more result. If DEBUG is 0 in Perl script, Signal 11 occurs, if DEBUG=1 everything works. Christian ___ nginx-devel mailing list nginx-devel@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx-devel

Re: [PATCH] Added nonlocal to the listen directive

2014-04-27 Thread info
Hey, but it is still not possible to work with IPv6, if you want to bind to a specific address (not [::]) that is not a local address. The ip_nonlocal_bind-sysctl use-case is not fulfilled with this and i think it is a common use-case that nginx is used within a high availability

Re: nginx and GeoLite2

2014-04-27 Thread leev
Hi, If you're still looking to use the GeoIP2/GeoLite2 databases, a module is now available at https://github.com/leev/ngx_http_geoip2_module. Cheers, Lee Posted at Nginx Forum: http://forum.nginx.org/read.php?2,243887,249663#msg-249663 ___ nginx

Re: nginx proxy for syncml

2014-04-27 Thread itpp2012
Solved ! Get https://github.com/yaoweibin/nginx_ajp_module add it (works for Windows as well, for which pull requests are outstanding to make it work) and configure it: location /app/syncml { ajp_keep_conn on; ajp_pass tomcatbackend:8009; include

1.7.01 mainline on debian has installed a wrong package

2014-04-27 Thread ura
after running the upgrade to 1.7.01 mainline version on debian, the nginx version check (service nginx -V) lists: 0.91-ubuntu1 - even though 1.7.01 is listed in the package manager in debian. does this mean that debains repos are serving an incorrect package? Posted at Nginx Forum:

Re: 1.7.01 mainline on debian has installed a wrong package

2014-04-27 Thread Jonathan Matthews
On 27 April 2014 22:37, ura nginx-fo...@nginx.us wrote: after running the upgrade to 1.7.01 mainline version on debian, the nginx version check (service nginx -V) lists: 0.91-ubuntu1 - even though 1.7.01 is listed in the package manager in debian. does this mean that debains repos are

Re: 1.7.01 mainline on debian has installed a wrong package

2014-04-27 Thread ura
thanks for assisting. i ran that command and see 3 repos which provide nginx. from what i see there, the 1.7.0-1 wheezy package is the candidate and also has been installed. i just checked my local development machine which is running lmde - the version of nginx is also the same spurious ubuntu

Re: 1.7.01 mainline on debian has installed a wrong package

2014-04-27 Thread Jonathan Matthews
On 27 April 2014 23:00, ura nginx-fo...@nginx.us wrote: thanks for assisting. i ran that command and see 3 repos which provide nginx. from what i see there, the 1.7.0-1 wheezy package is the candidate and also has been installed. i just checked my local development machine which is running

Re: 1.7.01 mainline on debian has installed a wrong package

2014-04-27 Thread ura
those two commands don't show any version numbers, so i am not presently any closer to identifying the issue here. the paths returned look fine to me, from what i know already. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,249670,249674#msg-249674

Re: 1.7.01 mainline on debian has installed a wrong package

2014-04-27 Thread Valentin V. Bartenev
On Sunday 27 April 2014 17:37:26 ura wrote: after running the upgrade to 1.7.01 mainline version on debian, the nginx version check (service nginx -V) lists: 0.91-ubuntu1 - even though 1.7.01 is listed in the package manager in debian. does this mean that debains repos are serving an

Re: 1.7.01 mainline on debian has installed a wrong package

2014-04-27 Thread Jonathan Matthews
On 27 April 2014 23:14, ura nginx-fo...@nginx.us wrote: those two commands don't show any version numbers No, they don't - they show paths. so i am not presently any closer to identifying the issue here. the paths returned look fine to me, from what i know already. Ok. Good luck finding the

Re: 1.7.01 mainline on debian has installed a wrong package

2014-04-27 Thread ura
aha! yes, i needed to remove 'service'. now i see the correct 1.7 version code. thanks! Posted at Nginx Forum: http://forum.nginx.org/read.php?2,249670,249677#msg-249677 ___ nginx mailing list nginx@nginx.org