Re: [PATCH] SSL: mark connections as non-reusable before SSL handshake

2015-06-22 Thread Piotr Sikora
Hey Maxim, As far as I understand, this change isn't useable with an unmodified nginx It is, since nginx modules are free to install those SSL callbacks (for example: ngx_lua's ssl_certificate_by_lua). (and introduces some minor pessimization in an unlikely case when first

Re: Breaking content generation phase into multiple phases or adding custom events in content phase

2015-06-22 Thread Kaustubh Deorukhkar
Thanks Yichun and Jeff for your inputs and sorry for late ack. I had a brief look at ngx_drizzle, I see that it needs the library to expose underlying fd, which is not possible in our case, but looks an interesting solution. The other cosocket API mechanism seem to be using unix domain socket as

Re: patch to allow loading PKCS #11 URLs

2015-06-22 Thread Nikos Mavrogiannopoulos
On Mon, 2015-06-22 at 04:11 +0300, Maxim Dounin wrote: Hi, Yes, I've tried it. It would be specified as: engine:pkcs11:pkcs11:model=SoftHSM%20v2serial=f0490bea35;pin -value=1234; But doesn't work, because it doesn't initialize the pkcs11 engine. Shouldn't initialization of an

Re: Fix windows issue with multiple workers

2015-06-22 Thread Sergey Brester
Hi, enclosed you will find an amend fix as replacement to _sb-win-multi-worker-add-3.patch (just forgotten to save after renaming NGX_SINGLE_WORKER - NGX_CONF_UNSET_PTR, before it was commited). 18.06.2015 21:55, Maxim Dounin: As I already tried to explain, the approach with inherited