Re: HTTP/2 Issues

2015-11-11 Thread DrDinosaur
Hi, I set the value to 32k and even 64k, but I still had the same issues. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,262764,262766#msg-262766 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: HTTP/2 Issues

2015-11-11 Thread Matthias Rieber
Hello! On Thu, 12 Nov 2015, DrDinosaur wrote: > Hi, > > I was having a few issues with HTTP/2 requests. Some files and images aren't > loading on Chrome. I filed a bug report and documented the issue extensively > here: https://code.google.com/p/chromium/issues/detail?id=553282 I had similar a

HTTP/2 Issues

2015-11-11 Thread DrDinosaur
Hi, I was having a few issues with HTTP/2 requests. Some files and images aren't loading on Chrome. I filed a bug report and documented the issue extensively here: https://code.google.com/p/chromium/issues/detail?id=553282 It might just be a Chrome issue, but I want to see if there is also a bug

Re: No default.conf file was generated

2015-11-11 Thread Maxim Dounin
Hello! On Wed, Nov 11, 2015 at 05:06:21PM -0500, rnovo1983 wrote: > After the installation of nginx/1.6.3 on CentOS 7, no default.conf file was > created under etc/nginx/conf.d > > Can anybody explain me why?.. The only configuration file used by nginx itself is nginx.conf. Everything else ar

Re: Nginx returning 414 even when large_client_header_buffers is set

2015-11-11 Thread B.R.
I suggest you try setting a larger buffer size with large_client_header_buffers . The docs are really clear about the fact a request line cannot exceed the size of a single buffer (*not* the number * size value).

No default.conf file was generated

2015-11-11 Thread rnovo1983
After the installation of nginx/1.6.3 on CentOS 7, no default.conf file was created under etc/nginx/conf.d Can anybody explain me why?.. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,262761,262761#msg-262761 ___ nginx mailing list nginx@ng

Re: Fwd: openshift-nginx docker image running as non-root

2015-11-11 Thread Aleksandar Lazic
Dear Scott. I think this is not a devel question so I answer primarly to nginx list. Am 11-11-2015 19:23, schrieb Scott Creeley: - Forwarded Message - From: "Scott Creeley" To: nginx-de...@nginx.org Sent: Wednesday, November 11, 2015 12:13:49 PM Subject: openshift-nginx docker image ru

Re: Best practice for URL rewriting with php parameter

2015-11-11 Thread Francis Daly
On Wed, Nov 11, 2015 at 06:50:54PM +, Mik J wrote: Hi there, > I tried both methods but none of them worked. I'm going to look at it more in > details (and display the php logs because I just had a blank page). First configure things so that an explicit request for /index.php?x=information

Re: Best practice for URL rewriting with php parameter

2015-11-11 Thread Mik J
Hello Francis, First thank you for your answers I tried both methods but none of them worked. I'm going to look at it more in details (and display the php logs because I just had a blank page). Also I would like to know why the solution you're offering is a "best practice" ?At first it seems a b

Re: Nginx returning 414 even when large_client_header_buffers is set

2015-11-11 Thread Spencer Fu
I changed the request from a get to a post in order to get it working for my site. -- Posted via http://www.ruby-forum.com/. ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Let's Encrypt TLS project: seeking nginx configuration module help

2015-11-11 Thread B.R.
This script has nothing to do with nginx, it is the one used for certificate request generation to Let's Encrypt. They intend to use certificate with shorter and shorter lifespans as the process is considered more and more robust, to fight against compromised certificates in the wild. Thus, automa

Re: Redirect request based on source $scheme !!

2015-11-11 Thread shahzaib shahzaib
>>If you want to catch HTTP requests separate from HTTPS requests, make 2 server blocks, as Avraham suggested. You can then redirect all requests coming to the HTTP block to the same URI with the HTTPS scheme (301, 302, 303, 307... have it your way!). There is not constraint regarding HTTP pages lo

Re: Error after ./configure -> No rule to make target "src/os/unix/ngx_gcc_atomic_x86.h"

2015-11-11 Thread Maxim Dounin
Hello! On Wed, Nov 11, 2015 at 10:21:00AM -0500, de_nginx_noob wrote: > The weird thing is that the code I've been testing has been compiling fine > for the past week or so and I haven't changed anything in the module config > file. What would I have screwed up in the module config file? > > ngx

Re: Best practice for URL rewriting with php parameter

2015-11-11 Thread Francis Daly
On Wed, Nov 11, 2015 at 02:29:37PM +, Mik J wrote: Hi there, > > I want that a user who accessesnginx.org/informationwill be redirected in > > the background tonginx/index.php?x=informationSo that my index.php page is > > dymanic > > What does "redirected in the background" mean?M => I jus

Re: Error after ./configure -> No rule to make target "src/os/unix/ngx_gcc_atomic_x86.h"

2015-11-11 Thread de_nginx_noob
The weird thing is that the code I've been testing has been compiling fine for the past week or so and I haven't changed anything in the module config file. What would I have screwed up in the module config file? ngx_addon_name=ngx_http_netacuity_module HTTP_MODULES="$HTTP_MODULES ngx_http_netacui

Re: Let's Encrypt TLS project: seeking nginx configuration module help

2015-11-11 Thread 173279834462
> They are currently struggling with their nginx module, > allowing a certificate to be automatically installed on nginx. Would you really use that script? 1. It requires python. --- I do not have python on my server, and I have no intention to install it. You can kick and scream, but that wi

Re: Best practice for URL rewriting with php parameter

2015-11-11 Thread Mik J
Hi there, > I have checked many ways to implement what I want (including if is evil) and > I've been able to reach what I wanted to do (something simple) > I want that a user who accessesnginx.org/informationwill be redirected in the > background tonginx/index.php?x=informationSo that my index.p

Re: Certificate Transparency

2015-11-11 Thread Rob Stradling
On 11/11/15 14:02, B.R. wrote: It is sad Chrome kind of forces website owners to have Certificate Transparency available while the whole things is still categorized as 'Experimental' by the IETF to this day: https://tools.ietf.org/html/rfc6962 ... but that is another debate. If you wanna serve C

Re: Redirect request based on source $scheme !!

2015-11-11 Thread B.R.
Maybe I am seing oversimplified things here, but it seems to me the question does not require all the effort everyone amazingly puts in here. If you want to catch HTTP requests separate from HTTPS requests, make 2 server blocks, as Avraham suggested. You can then redirect all requests coming to th

Re: Certificate Transparency

2015-11-11 Thread B.R.
It is sad Chrome kind of forces website owners to have Certificate Transparency available while the whole things is still categorized as 'Experimental' by the IETF to this day: https://tools.ietf.org/html/rfc6962 ... but that is another debate. If you wanna serve CT certificates from a non-CT-comp

Re: Best practice for URL rewriting with php parameter

2015-11-11 Thread Francis Daly
On Wed, Nov 11, 2015 at 01:14:31PM +, Mik J wrote: Hi there, > I have checked many ways to implement what I want (including if is evil) and > I've been able to reach what I wanted to do (something simple) > I want that a user who accessesnginx.org/informationwill be redirected in the > back

Re: syslog not properly tagged

2015-11-11 Thread B.R.
syslog has facilities to allow you sending messages from different sources to different destinations. That being rsyslog-related, I suggest you read some 101 books on this topic. It seems all the help about nginx you could grab from this ML has already been provided. --- *B. R.* On Wed, Nov 11, 2

Re: syslog not properly tagged

2015-11-11 Thread Francis Daly
On Wed, Nov 11, 2015 at 12:15:25PM +0200, Avraham Serour wrote: > well the problem is not only with formatting, formatting is just and > inconvenience that I managed to work around already, my main problem is to > catch nginx logs only. If nginx is the only thing that writes to this syslog service

Re: Redirect request based on source $scheme !!

2015-11-11 Thread Francis Daly
On Wed, Nov 11, 2015 at 03:25:11PM +0500, shahzaib shahzaib wrote: Hi there, > Actually we've video sharing website from where people embed http/https > links to there websites. Now the problem is, some of the HTTPS websites > have embedded HTTP URL links from our website instead of HTTPS due to

Best practice for URL rewriting with php parameter

2015-11-11 Thread Mik J
Hello, I have checked many ways to implement what I want (including if is evil) and I've been able to reach what I wanted to do (something simple) I want that a user who accessesnginx.org/informationwill be redirected in the background tonginx/index.php?x=informationSo that my index.php page is d

RE: Redirect request based on source $scheme !!

2015-11-11 Thread Lukas Tribus
> shahzaib1232 Wrote: > --- >> So we're thinking to have some condition in place that if the request >> for >> HTTP embedded link comes from any HTTPS domain , nginx will detect >> that >> source $scheme and redirect that request to HTTPS. What y

script to prime nginx's OCSP cache

2015-11-11 Thread 173279834462
#!/bin/ksh -e # # The purpose of this script is to prime the OCSP cache of nginx. # # Ideally, nginx would prime its worker processes ahead of any client request. # There are two events that ought to trigger this behaviour: # the server start-up, and each time a cache expires. # # In reality, n

Re: Redirect request based on source $scheme !!

2015-11-11 Thread itpp2012
shahzaib1232 Wrote: --- > So we're thinking to have some condition in place that if the request > for > HTTP embedded link comes from any HTTPS domain , nginx will detect > that > source $scheme and redirect that request to HTTPS. The problem is

Re: Redirect request based on source $scheme !!

2015-11-11 Thread shahzaib shahzaib
>>if you don't own the domain then you won't ever receive the request and you can't do nothing about it We don't own ad.domain.com but that domain sends http/https request to our domain 'ourdomain.com' .We just need to find out the $scheme they use to send requests such as : Is request coming from

Re: Certificate Transparency

2015-11-11 Thread Rob Stradling
On 11/11/15 11:03, locojohn wrote: Joó Ádám Wrote: --- The TLS extension is the only method to implement Certificate Transparency without the assistance of the CA, and starting with January 1 2015 Chrome refuses to display the green bar for EV

Re: Certificate Transparency

2015-11-11 Thread locojohn
Joó Ádám Wrote: --- > The TLS extension is the only method to implement Certificate > Transparency without the assistance of the CA, and starting with > January 1 2015 Chrome refuses to display the green bar for EV > certificates without Certific

Re: Redirect request based on source $scheme !!

2015-11-11 Thread Avraham Serour
if you don't own the domain then you won't ever receive the request and you can't do nothing about it On Wed, Nov 11, 2015 at 1:01 PM, shahzaib shahzaib wrote: > One point is worth mentioning, we don't own ad.domain.com its a 3rd party > website. All we can control is ourdomain.com. > > On Wed,

Re: Redirect request based on source $scheme !!

2015-11-11 Thread shahzaib shahzaib
One point is worth mentioning, we don't own ad.domain.com its a 3rd party website. All we can control is ourdomain.com. On Wed, Nov 11, 2015 at 3:25 PM, shahzaib shahzaib wrote: > >>you can create separate server blocks for each domain > I think issue will still persist. Say https://ad.domain.co

Re: Redirect request based on source $scheme !!

2015-11-11 Thread shahzaib shahzaib
>>you can create separate server blocks for each domain I think issue will still persist. Say https://ad.domain.com makes static call to http://ourdomain.com , it'll end up with conflicted scheme i.e https -> http. We can't force http to https as well because it'll break static calls from http -> h

Re: syslog not properly tagged

2015-11-11 Thread Avraham Serour
well the problem is not only with formatting, formatting is just and inconvenience that I managed to work around already, my main problem is to catch nginx logs only. my rsyslog config will parse every syslog message, everyone that writes to syslog will send messages, I only need the ones coming fr

Re: Redirect request based on source $scheme !!

2015-11-11 Thread Avraham Serour
you can create separate server blocks for each domain On Wed, Nov 11, 2015 at 11:36 AM, shahzaib shahzaib wrote: > Hi, > >Is there a way we can serve $scheme (HTTP/HTTPS) based on source > request ? Such as : > > if https://ad.domain.com --> sends request to http://ourdomain.com (as > it'll

Redirect request based on source $scheme !!

2015-11-11 Thread shahzaib shahzaib
Hi, Is there a way we can serve $scheme (HTTP/HTTPS) based on source request ? Such as : if https://ad.domain.com --> sends request to http://ourdomain.com (as it'll fail due to cross $scheme conflict) So http://ourdomain.com will check that the request invoked using https $scheme and it'll