[PATCH 0 of 1] allow to use engine keyform for server private key

2014-03-28 Thread Кондакова Татьяна Андреевна
Me and my company will be happy to see any method to load private key from engine with any parameter names. What shall I do? Change parameters to format= and engine=? Try to use STORE_get_certificate(), STORE_get_private_key() before using ENGINE_load_private_key()? Do you have any instruction

Re: [PATCH] Added so_freebind and so_transparent to the listen directive

2014-03-28 Thread Trygve Vea
- Opprinnelig melding - On Mar 27, 2014, at 22:14 , Trygve Vea wrote: - Opprinnelig melding - Hello! Hello! On Thu, Mar 27, 2014 at 04:34:37PM +0100, Trygve Vea wrote: # HG changeset patch # User Trygve Vea trygve@redpill-linpro.com # Date 1395933815

Re: [PATCH] Added so_freebind and so_transparent to the listen directive

2014-03-28 Thread Trygve Vea
- Opprinnelig melding - On Mar 28, 2014, at 14:45 , Trygve Vea wrote: - Opprinnelig melding - On Mar 27, 2014, at 22:14 , Trygve Vea wrote: - Opprinnelig melding - Hello! Hello! On Thu, Mar 27, 2014 at 04:34:37PM +0100, Trygve Vea wrote: # HG

Re: [PATCH] Added nonlocal to the listen directive

2014-03-28 Thread Maxim Dounin
Hello! On Fri, Mar 28, 2014 at 10:45:53AM +0100, Trygve Vea wrote: # HG changeset patch # User Trygve Vea t...@redpill-linpro.com # Date 139540 -3600 # Fri Mar 28 10:45:40 2014 +0100 # Node ID 16eacd8609c8362e9dd729c743ed7a869c2993fe # Parent

[nginx] SPDY: detect premature closing of stream.

2014-03-28 Thread Valentin Bartenev
details: http://hg.nginx.org/nginx/rev/a24f88eff684 branches: changeset: 5628:a24f88eff684 user: Valentin Bartenev vb...@nginx.com date: Fri Mar 28 20:22:57 2014 +0400 description: SPDY: detect premature closing of stream. The SPDY/3.1 specification requires that the server must

Re: proxy_pass behavior

2014-03-28 Thread Jim Popovitch
On Fri, Mar 28, 2014 at 8:20 AM, Maxim Dounin mdou...@mdounin.ru wrote: Hello! On Thu, Mar 27, 2014 at 08:18:48PM -0400, Jim Popovitch wrote: On Thu, Mar 27, 2014 at 1:50 PM, Jim Popovitch jim...@gmail.com wrote: On Thu, Mar 27, 2014 at 1:27 PM, Maxim Dounin mdou...@mdounin.ru wrote:

Re: proxy_pass behavior

2014-03-28 Thread Maxim Dounin
Hello! On Fri, Mar 28, 2014 at 01:56:59PM -0400, Jim Popovitch wrote: On Fri, Mar 28, 2014 at 8:20 AM, Maxim Dounin mdou...@mdounin.ru wrote: Hello! On Thu, Mar 27, 2014 at 08:18:48PM -0400, Jim Popovitch wrote: On Thu, Mar 27, 2014 at 1:50 PM, Jim Popovitch jim...@gmail.com wrote:

Re: Замирает передача статичного файла

2014-03-28 Thread Валентин Бартенев
On Friday 28 March 2014 18:47:27 Алексей Щуров wrote: Проблема заключается в периодическом замирании передачи статичного файла, возникает в основном на высокоскоростных соединениях. С включенным limit_rate 200k я ни разу не поймал проблему. Включил debug_connection для одного тестового

Re: start time is out mp4 stsc chunks

2014-03-28 Thread Maxim Dounin
Hello! On Fri, Mar 28, 2014 at 07:18:37PM +0200, Андрей Василишин wrote: Text ID : 3 Format : Apple text Codec ID : text Duration : 1h 54mn Bit rate

Re: start time is out mp4 stsc chunks

2014-03-28 Thread Андрей Василишин
28.03.2014 20:24, Maxim Dounin пишет: Hello! On Fri, Mar 28, 2014 at 07:18:37PM +0200, Андрей Василишин wrote: Text ID : 3 Format : Apple text Codec ID : text Duration

Странное поведение с httpready и dataready

2014-03-28 Thread Vladislav Prodan
# grep accept_filter nginx.conf listen xx.xx.xx.57 accept_filter=httpready accept_filter=dataready ; listen xx.xx.xx.60 accept_filter=httpready accept_filter=dataready ; listen xx.xx.xx.58 accept_filter=httpready accept_filter=dataready ; listen xx.xx.xx.56 accept_filter=httpready

[ANNOUNCE] Tengine-2.0.2 is released

2014-03-28 Thread Chuanwen Chen
Hi folks, Tengine-2.0.2 (development version) has been released. You can either checkout the source code from GitHub: https://github.com/alibaba/tengine or download the tarball directly: http://tengine.taobao.org/download/tengine-2.0.2.tar.gzhttp://tengine.taobao.org/download/tengine-2.0.0.tar.gz

Re: SSL session cache lifetime vs session ticket lifetime

2014-03-28 Thread kyprizel
Will this patch be applied to mainline? On Thu, Mar 27, 2014 at 8:23 PM, Maxim Dounin mdou...@mdounin.ru wrote: Hello! On Wed, Mar 26, 2014 at 01:34:19PM +0400, kyprizel wrote: will be log_alloc_failures better? I think something like log_nomem will be good enough. Patch: # HG

One webdav per user to their home directories ?

2014-03-28 Thread BONNET, Frank
hello I would like to setup the following configuration , run one nginx instance per user to let them access to their home directories thru the webdav protocol + LDAP AUTH like the following https://myserver.domain.tld/user1 https://myserver.domain.tld/user2 and so on ( I have approx 4000

Re: Defining a default server for when vhost does not exist for requested hostname (including blank hostname), for http and https

2014-03-28 Thread Maxim Dounin
Hello! On Fri, Mar 28, 2014 at 02:53:18PM +, Jonathan Matthews wrote: On 28 March 2014 14:31, Ben Johnson b...@indietorrent.org wrote: Is there any way to av,oid this certificate being presented, but still return the 444 response under the conditions I've described? I'd /suspect/

Re: Defining a default server for when vhost does not exist for requested hostname (including blank hostname), for http and https

2014-03-28 Thread Ben Johnson
On 3/28/2014 11:45 AM, Maxim Dounin wrote: Hello! On Fri, Mar 28, 2014 at 02:53:18PM +, Jonathan Matthews wrote: On 28 March 2014 14:31, Ben Johnson b...@indietorrent.org wrote: Is there any way to av,oid this certificate being presented, but still return the 444 response under the

Re: One webdav per user to their home directories ?

2014-03-28 Thread Francis Daly
On Fri, Mar 28, 2014 at 10:51:56AM +0100, BONNET, Frank wrote: Hi there, I would like to setup the following configuration , run one nginx instance per user to let them access to their home directories thru the webdav protocol + LDAP AUTH like the following

Re: Defining a default server for when vhost does not exist for requested hostname (including blank hostname), for http and https

2014-03-28 Thread itpp2012
Jonathan Matthews Wrote: --- bugs/features like this will get exponentially more attention after Windows XP goes EOL this April, as (I believe) it's the last major platform not to support SNI. Which is a moot case since there are at least 5

Re: Radius and TACACS+ based authentication

2014-03-28 Thread itpp2012
AFAIK there is only a ldap module for nginx. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,248820,248823#msg-248823 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Defining a default server for when vhost does not exist for requested hostname (including blank hostname), for http and https

2014-03-28 Thread Ben Johnson
Hello, We run multiple vhosts in nginx. Occasionally, a vhost will be mis-configured or disabled (via the website management software that we use), and public requests for the domain will fall-back to nginx's default vhost, which can have very unintended consequences (e.g., an incorrect and

Radius and TACACS+ based authentication

2014-03-28 Thread Hari Miriyala
Hi Everyone, Currently I am using nginx (version 1.2.7) and would like to have authentication support using external security servers such as Radius and TACACS+. Are there are any extensions/plugins available to support this functionality? if not, any thoughts on how it can be achieved? Best

Re: Defining a default server for when vhost does not exist for requested hostname (including blank hostname), for http and https

2014-03-28 Thread Jonathan Matthews
On 28 March 2014 16:51, Ben Johnson b...@indietorrent.org wrote: Maxim, when you say, If SNI is used, it's in theory possible to close a connection early, do you mean to imply that while possible, this capability has not yet been implemented in nginx (the tickets are still open after almost

Re: Defining a default server for when vhost does not exist for requested hostname (including blank hostname), for http and https

2014-03-28 Thread Jonathan Matthews
On 28 March 2014 14:31, Ben Johnson b...@indietorrent.org wrote: Is there any way to av,oid this certificate being presented, but still return the 444 response under the conditions I've described? I'd /suspect/ not, as the 444 response can't be delivered (i.e. the connection closed) until

Re: SSL session cache lifetime vs session ticket lifetime

2014-03-28 Thread Valentin V. Bartenev
On Thursday 27 March 2014 20:23:15 Maxim Dounin wrote: Hello! On Wed, Mar 26, 2014 at 01:34:19PM +0400, kyprizel wrote: will be log_alloc_failures better? I think something like log_nomem will be good enough. Patch: # HG changeset patch # User Maxim Dounin mdou...@mdounin.ru #

Re: Accessing HTTP request headers in nginx module

2014-03-28 Thread Mapper Uno
Thanks Maxim for your reply. Since I am newbie, please excuse my questions. I am still unable to retrieve the variable. All I have in the handler routine is: ngx_http_request_t *r I can see that r-headers_in.headers is a list, but then when you say $http_operation, it is confusing me. Could

Re: Transforming nginx for Windows

2014-03-28 Thread tonyschwartz
Has anyone else experienced nginx.exe 1.5.9.1. Cheshire crashing on Windows server 2003? Intermittently, it is crashing on me with this message in the NT event logs: Event Type: Information Event Source: Application Error Event Category: (100) Event ID: 1004 Date: 3/28/2014

Re: Transforming nginx for Windows

2014-03-28 Thread itpp2012
tonyschwartz Wrote: --- Has anyone else experienced nginx.exe 1.5.9.1. Cheshire crashing on Windows server 2003? Intermittently, it is crashing on me with this message in the NT event logs: 0.0.0.0, faulting module nginx.exe, version

debug logs not getting generated

2014-03-28 Thread Kunal Pariani
Hello, I followed this http://nginx.org/en/docs/debugging_log.html. Have nginx built with --with-debug and set the the error_log in the following 2 files (nginx.conf.main inside http { } in nginx.conf.web). But still i don't see debug level logging getting generated in the files specified.