[nginx] Typos fixed.

2014-07-31 Thread Sergey Kandaurov
details: http://hg.nginx.org/nginx/rev/f1e05e533c8b branches: changeset: 5780:f1e05e533c8b user: Sergey Kandaurov pluk...@nginx.com date: Thu Jul 31 13:59:37 2014 +0400 description: Typos fixed. diffstat: docs/xml/nginx/changes.xml | 8 1 files changed, 4 insertions(+),

[PATCH] Configure: remove outdated and unused patch.zlib.h

2014-07-31 Thread Piotr Sikora
# HG changeset patch # User Piotr Sikora pi...@cloudflare.com # Date 1406803948 25200 # Thu Jul 31 03:52:28 2014 -0700 # Node ID 5be611309d6f7983879104054d4a68feece64142 # Parent f1e05e533c8b7028121104740f2ab76e49d9212f Configure: remove outdated and unused patch.zlib.h. Signed-off-by:

Re: [PATCH] Config: enhancing nginx default config file with added security options

2014-07-31 Thread Maxim Dounin
Hello! On Thu, Jul 31, 2014 at 03:56:59AM -0700, Kristian Erik Hermansen wrote: # HG changeset patch # User Kristian Erik Hermansen kristian.herman...@gmail.com # Date 1406803911 25200 # Thu Jul 31 03:51:51 2014 -0700 # Node ID 8966ff589f5de5e9155335373247de4485451304 # Parent

Re: [PATCH] allow to use engine keyform for server private key

2014-07-31 Thread Maxim Dounin
Hello! On Wed, Jul 30, 2014 at 07:29:10PM +0400, Dmitrii Pichulin wrote: # HG changeset patch # User Dmitrii Pichulin # Date 1406733892 -14400 # Wed Jul 30 19:24:52 2014 +0400 # Node ID a4c89ae85f45153760637058a75f4338b3974219 # Parent 4d092aa2f4637ce50284d2accd99a8e91aae2b4c allow

Re: [PATCH] Config: enhancing nginx default config file with added security options

2014-07-31 Thread Kristian Erik Hermansen
привет! On Thu, Jul 31, 2014 at 5:25 AM, Maxim Dounin mdou...@mdounin.ru wrote: We intentionally avoid various security recommendations except via providing appropriate defaults. People tend to have different ideas of what security is, and how it should be achieved. Additionally, all such

[nginx] Dav: ngx_http_map_uri_to_path() errors were not checked.

2014-07-31 Thread Maxim Dounin
details: http://hg.nginx.org/nginx/rev/1f70fe0d9576 branches: changeset: 5781:1f70fe0d9576 user: FengGu flygo...@126.com date: Wed Jul 30 14:45:08 2014 +0800 description: Dav: ngx_http_map_uri_to_path() errors were not checked. Once error occured, it could lead to use uninitialized

[nginx] Configure: remove outdated and unused patch.zlib.h.

2014-07-31 Thread Maxim Dounin
details: http://hg.nginx.org/nginx/rev/428303916425 branches: changeset: 5782:428303916425 user: Piotr Sikora pi...@cloudflare.com date: Thu Jul 31 03:52:28 2014 -0700 description: Configure: remove outdated and unused patch.zlib.h. Signed-off-by: Piotr Sikora pi...@cloudflare.com

Re: [PATCH] Configure: remove outdated and unused patch.zlib.h

2014-07-31 Thread Maxim Dounin
Hello! On Thu, Jul 31, 2014 at 03:53:20AM -0700, Piotr Sikora wrote: # HG changeset patch # User Piotr Sikora pi...@cloudflare.com # Date 1406803948 25200 # Thu Jul 31 03:52:28 2014 -0700 # Node ID 5be611309d6f7983879104054d4a68feece64142 # Parent

Re: [PATCH] Core: add support for expressing size in gigabytes

2014-07-31 Thread Maxim Dounin
Hello! On Thu, Jul 31, 2014 at 03:41:30AM -0700, Piotr Sikora wrote: # HG changeset patch # User Piotr Sikora pi...@cloudflare.com # Date 1406803246 25200 # Thu Jul 31 03:40:46 2014 -0700 # Node ID c1aeec0f33fe6a42fde0a1851228a130f5ab12a1 # Parent

Re: [PATCH] allow to use engine keyform for server private key

2014-07-31 Thread Dmitrii Pichulin
On 31.07.2014 17:49, Maxim Dounin wrote: + if (engine == NULL) { + ngx_ssl_error(NGX_LOG_EMERG, ssl-log, 0, + ENGINE_by_id(\%s\) failed, p); + return NGX_ERROR; + } + + p[last - p] = ':'; + + if (passwords) { + pwd = passwords-elts; + + ngx_cpystrn(pwd_buf, pwd-data, pwd-len + 1); +

Re: вложенные include virtual в SSI

2014-07-31 Thread Maxim Dounin
Hello! On Wed, Jul 30, 2014 at 04:35:04PM -0400, mistercx wrote: Приветствую всех! Только что при переносе статического проекта с Apache на Nginx столкнулся с пренепреятнейшей особенностью - невозможностью использования вложенных include virtual в SSI. Например: файл lang.shtml

Re: вложенные include virtual в SSI

2014-07-31 Thread mistercx
Да, благодарю, я тоже дочитался до этого параметра. Ещё заметил интересную особенность SSI в Nginx: !--#set var=item value=$QUERY_STRING -- должно быть установлено в родительском shtml - только тогда оно актуально и для дочернего. Если я пытаюсь установить переменную в дочернем подключаемом

postpone_gzipping

2014-07-31 Thread husseingalal
Hi, I encountered the directive postpone_gzipping but i couldnt find an explanation in the documentation although i found the directive in the source code of nginx, how is that directive different from gzip_min_length? Posted at Nginx Forum:

Re: postpone_gzipping

2014-07-31 Thread Maxim Dounin
Hello! On Thu, Jul 31, 2014 at 06:47:01AM -0400, husseingalal wrote: Hi, I encountered the directive postpone_gzipping but i couldnt find an explanation in the documentation although i found the directive in the source code of nginx, how is that directive different from gzip_min_length? The

Re: Repeated include /etc/includes/ssl.conf Passes configtest, fails SSL Handshake

2014-07-31 Thread Maxim Dounin
Hello! On Wed, Jul 30, 2014 at 10:14:05AM +0800, Matt Silverlock wrote: Hi all, Had a chat with a helpful person on IRC but both are stumped as to why my configuration passes a check (nginx -t) but fails to properly handle SSL. – I’ve split a couple of repetitive blocks out into

Re: [ANN] Windows nginx 1.7.4.2 WhiteRabbit

2014-07-31 Thread c0nw0nk
I also noticed you added the PHP and Nginx User setups for security would you also add a FTP / MySQL option even though it is easy for us to just edit the vb scripts to suit our needs for other services but i was just thinking for others.(Maybe they are lazy) I am not sure if anyone else uses the

Re: [ANN] Windows nginx 1.7.4.2 WhiteRabbit

2014-07-31 Thread itpp2012
c0nw0nk Wrote: --- I also noticed you added the PHP and Nginx User setups for security would you also add a FTP / MySQL option even though it is easy for us to just edit the vb scripts to suit our needs for other services but i was just

Re: [ANN] Windows nginx 1.7.4.2 WhiteRabbit

2014-07-31 Thread c0nw0nk
Thats what i have been doing not enocunterd any issues as such yet with Nginx or PHP i am also curious if it possible to execute compression of images via Nginx, For those of us who use CloudFlare.com already know that cloudflare performs lossless image compression most likely the same way via

Re: [ANN] Windows nginx 1.7.4.2 WhiteRabbit

2014-07-31 Thread c0nw0nk
I also see LUA can do the job but i get the feeling i will hit a dead end if i did this. location /compress-images { content_by_lua 'os.execute(C:/server/bin/compress.exe)'; } Posted at Nginx Forum: http://forum.nginx.org/read.php?2,252064,252183#msg-252183

Re: [ANN] Windows nginx 1.7.4.2 WhiteRabbit

2014-07-31 Thread itpp2012
The trick with pre-compressed files is to have a separate process doing the compression and doing a test inside nginx for the existence of this compressed file. Ea. if file.jpg.extracompressed exists then serve directly from filesystem else do something with zlib. Ea2.

Re: [ANN] Windows nginx 1.7.4.2 WhiteRabbit

2014-07-31 Thread c0nw0nk
Well what i was describing was to compress the original media items. Saving storage/disk space. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,252064,252185#msg-252185 ___ nginx mailing list nginx@nginx.org

Re: [ANN] Windows nginx 1.7.4.2 WhiteRabbit

2014-07-31 Thread Yichun Zhang (agentzh)
Hello! On Thu, Jul 31, 2014 at 10:06 AM, c0nw0nk wrote: I also see LUA can do the job but i get the feeling i will hit a dead end if i did this. location /compress-images { content_by_lua 'os.execute(C:/server/bin/compress.exe)'; } Oh no, os.execute() is blocking. You should

Re: RE: GeoIP FirstNonPrivateXForwardedForIP

2014-07-31 Thread wandenberg
Hi, some time ago I had a similar issue and I grab some parts of nginx internals modules and did one specific to me. My issue was to use the first XForwardedFor IP, but only when the client address was the Google Chrome Proxy. I don't know if this is the best approach, but I check the client ip