Re: upstream member liveness

2016-04-12 Thread drookie
Is there someone besides Captain Evidence who knows the answer ? This is actually the problem of the modern internet: half of the decent questions is flooded out by people, who not only think they know the answer, but are arrogant enough to insist it, and from the point of an outer observer the

$ssl_client_verify not working?

2016-04-12 Thread Ramon_Ali
Hi, i was wanting to return a 403 when invalid client certificate submitted, however Nginx 1.9.6 returning 400 Bad Request, The SSL Certificate Error. Seems to return 403 fine when no certificate is submitted, but any clues on getting it to return a 403 work when invalid (signed by unauthorised

Re: 1.9.14 - http2 protocol violations

2016-04-12 Thread Валентин Бартенев
On Wednesday 13 April 2016 00:08:43 Otto van der Schaaf wrote: > Hello, > > While looking into https://github.com/pagespeed/ngx_pagespeed/issues/1175 I > noticed that when performing a POST to a non-existing page, Chrome will > complain about the response (net::ERR_SPDY_PROTOCOL_ERROR). > > This

1.9.14 - http2 protocol violations

2016-04-12 Thread Otto van der Schaaf
Hello, While looking into https://github.com/pagespeed/ngx_pagespeed/issues/1175 I noticed that when performing a POST to a non-existing page, Chrome will complain about the response (net::ERR_SPDY_PROTOCOL_ERROR). This happens with a plain nginx build, configure arguments:

Re: gzip working for 443 but not 80 in same listener?

2016-04-12 Thread Валентин Бартенев
On Tuesday 12 April 2016 16:48:27 lfisher wrote: > I added port 80 in my listener. > # HTTPS server > server { >listen 80; >listen 443 ssl; > > Gzip still works on 443, but css/js are not getting gzipped in port 80. > > My nginx.conf has > gzip on; > gzip_vary on; >

Re: reuseport в конфигах nginx

2016-04-12 Thread Dmitry Ivanov
Здравствуйте, Peter. Вы писали 12 апреля 2016 г., 20:46:09: >> Вас не смущает, что при этом часть соединений будет потеряна? > Это смотря как контейнер сооружен и как его гасить. > А вообще, 0-downtime деплой через reuseport очень вкусно выглядит, да. И на что только люди не идут, чтобы не

Re: reuseport в конфигах nginx

2016-04-12 Thread Валентин Бартенев
On Tuesday 12 April 2016 22:48:52 Peter Leonov wrote: > Вообще говоря, я понимаю с кем веду беседу, так что уже сильно сомневаюсь в > своей разумности ;) Но, раз взялся за куш… > > > On Tuesday, 12 April 2016 at 21:29, Валентин Бартенев wrote: > > […] > > > > И как с установленным

Re: reuseport в конфигах nginx

2016-04-12 Thread Peter Leonov
Вообще говоря, я понимаю с кем веду беседу, так что уже сильно сомневаюсь в своей разумности ;) Но, раз взялся за куш… On Tuesday, 12 April 2016 at 21:29, Валентин Бартенев wrote: > […] > > И как с установленным SO_REUSEPORT в такой конфигурации можно не потерять > соединений? Как

gzip working for 443 but not 80 in same listener?

2016-04-12 Thread lfisher
I added port 80 in my listener. # HTTPS server server { listen 80; listen 443 ssl; Gzip still works on 443, but css/js are not getting gzipped in port 80. My nginx.conf has gzip on; gzip_vary on; gzip_min_length 500; gzip_buffers 4 32k; gzip_comp_level

Re: reuseport в конфигах nginx

2016-04-12 Thread Валентин Бартенев
On Tuesday 12 April 2016 19:46:09 Peter Leonov wrote: > On Tuesday, 12 April 2016 at 17:32, Валентин Бартенев wrote: > > On Tuesday 12 April 2016 15:53:59 navern wrote: > > > Это нужно, потому что нужен reuseport, а конфигурировать его только в > > > одном месте очень неудобно. Так как вся

Re: reuseport в конфигах nginx

2016-04-12 Thread Peter Leonov
On Tuesday, 12 April 2016 at 17:32, Валентин Бартенев wrote: > On Tuesday 12 April 2016 15:53:59 navern wrote: > > Это нужно, потому что нужен reuseport, а конфигурировать его только в > > одном месте очень неудобно. Так как вся конфигурация происходит > > автоматически. > > > > По поводу

Re: Does "include" use the "configuration prefix" or the "path prefix"?

2016-04-12 Thread B.R.
I found some bits: prefix is explained on the command-line parameters docs page and, in a little more vebose fashion, in an nginx.com tutorial , probably thanks to Rick Nelson.

Re: Does "include" use the "configuration prefix" or the "path prefix"?

2016-04-12 Thread Maxim Dounin
Hello! On Mon, Apr 11, 2016 at 07:54:58PM +, hroku...@yahoo.com wrote: > THank you very much for confirmation. > Is this documented anywhere? I don't think it's explicitly documented anywhere except in CHANGES for 0.6.7 (http://nginx.org/en/CHANGES): *) Change: now the paths specified

Re: reuseport в конфигах nginx

2016-04-12 Thread Валентин Бартенев
On Tuesday 12 April 2016 15:53:59 navern wrote: > Это нужно, потому что нужен reuseport, а конфигурировать его только в > одном месте очень неудобно. Так как вся конфигурация происходит > автоматически. > > По поводу двух одновременно запущенных nginx'ов - это необходимо так > как сам nginx

Re: reuseport в конфигах nginx

2016-04-12 Thread Evgeniy Berdnikov
On Tue, Apr 12, 2016 at 03:53:59PM +0300, navern wrote: > По поводу двух одновременно запущенных nginx'ов - это необходимо так как > сам nginx находится в докер контейнере и бывают ситуации, когда нужно > запустить одновременно два докер контейнера, а потом один из них погасить. Ужас какой...

Re: Redirection 301 create "Redirection loop" while using wordpress site.

2016-04-12 Thread Steve Wilson
It sounds to me like wordpress believes that www is required and nginx doesn't want it. I'd try commenting out the redirect server{} block and add the server_name to the xxx.com one and see what you end up with in your browser, then have a look through the wordpress settings to see what it's

Re: Redirection 301 create "Redirection loop" while using wordpress site.

2016-04-12 Thread Alt
Hello, Muhammad Yousuf Khan Wrote: --- > I can access php files properly like info.php. to check whether php > is > working or not. however the problem part is wordpress. > > when i try to load my wordpress site chrome shows an error saying >

Redirection 301 create "Redirection loop" while using wordpress site.

2016-04-12 Thread Muhammad Yousuf Khan
Dear All, I am very new to nginx and trying to learn it from very basic. i have a website and i am willing to remove the "www" before my actual domain name. the solution so far i have find out on google is very simple. so when ever any of the visitor visits my website by using www.xxx.com he

Re: reuseport в конфигах nginx

2016-04-12 Thread navern
Это нужно, потому что нужен reuseport, а конфигурировать его только в одном месте очень неудобно. Так как вся конфигурация происходит автоматически. По поводу двух одновременно запущенных nginx'ов - это необходимо так как сам nginx находится в докер контейнере и бывают ситуации, когда нужно

RE: TLS/SSL Cache Automatic Purge

2016-04-12 Thread Lukas Tribus
Hi, > Just to be perfectly clear: does that mean that session tickets are  > supported for any version of nginx (including OpenSSL 0.9.8f is available? Yes. > So the directive would be kind of 'intercepting' TLS commands, a man in  > the middle of client and OpenSSL?

RE: opinions about Session tickets

2016-04-12 Thread Lukas Tribus
Hi! > I found these two opinions. They suggest to disable session tickets. > > - https://www.farsightsecurity.com/Blog/20151202-thall-hardening-dh-and-ecc/ > - > https://timtaubert.de/blog/2014/11/the-sad-state-of-server-side-tls-session-resumption-implementations/ > > what do others think about

Re: [PATCH] Fixed typos

2016-04-12 Thread Ruslan Ermilov
On Mon, Apr 11, 2016 at 04:54:35PM +0100, Alessandro Ghedini wrote: > # HG changeset patch > # User Alessandro Ghedini > # Date 1460389631 -3600 > # Mon Apr 11 16:47:11 2016 +0100 > # Node ID 892560ebe055092c3bed769234b2bae19d67fb71 > # Parent

[nginx] Fixed typos.

2016-04-12 Thread Ruslan Ermilov
details: http://hg.nginx.org/nginx/rev/a3be359e6c7d branches: changeset: 6510:a3be359e6c7d user: Alessandro Ghedini date: Mon Apr 11 16:47:11 2016 +0100 description: Fixed typos. diffstat: src/http/modules/ngx_http_ssi_filter_module.c | 4 ++-- 1 files

reading cookie

2016-04-12 Thread Pankaj Chaudhary
Hi, My name is Pankaj and i am new to this list. I would like to know how i can set cookie value and get cookie value. Please let me know is any module already written to do this. Regards, Pankaj ___ nginx mailing list nginx@nginx.org

RE: opinions about Session tickets

2016-04-12 Thread Arnaud Van der Vorst
Good morning, @Andreas Thank you for sharing these documents. I had already read the one from Tim Taubert and had the same concern about using TLS/SSL Tickets. Is it a good thing or not? -Original Message- From: nginx [mailto:nginx-boun...@nginx.org] On Behalf Of A. Schulze Sent: lundi

RE: TLS/SSL Cache Automatic Purge

2016-04-12 Thread Arnaud Van der Vorst
Hi, @B.R. Not really… The only information for ssl_session_timout is “Specifies a time during which a client may reuse the session parameters stored in a cache.” It does not say anything about purging the TLS/SSL Cache which is my concern here. I have read that invalidating a TLS/SSL