Re: SPDY68 / POST to proxy / nginx worker segfault

2013-03-12 Thread Phil Pennock
On 2013-03-13 at 03:14 +0400, Valentin V. Bartenev wrote: > Thank you for the report. This issue should be fixed now in: > http://nginx.org/patches/spdy/patch.spdy-69_1.3.14.txt Fix confirmed, works for me. Thanks for the prompt fix! -Phil ___ nginx ma

Re: SPDY68 / POST to proxy / nginx worker segfault

2013-03-12 Thread Valentin V. Bartenev
On Tuesday 12 March 2013 22:24:45 Phil Pennock wrote: > nginx 1.3.14, SPDY patch version 68. > > Sitting in front of a PGP keyserver, with configuration as below, if I > have "spdy" on the "listen" lines, then Chrome gets an error for no data > returned and I get errors in errorlog: > > 2013/03/1

Re: SSL default changes?

2013-03-12 Thread Maxim Dounin
Hello! On Tue, Mar 12, 2013 at 11:58:51AM -0700, Grant wrote: > >> OK, why not enable SSL session resumption by default? > >> > >> ssl_session_cache shared:SSL:10m; > > > > E.g. because it won't work on some platforms. > > I'm sorry to bother about this, but do you mean it won't wok on some > se

Re: SSL default changes?

2013-03-12 Thread Grant
>> OK, why not enable SSL session resumption by default? >> >> ssl_session_cache shared:SSL:10m; > > E.g. because it won't work on some platforms. I'm sorry to bother about this, but do you mean it won't wok on some servers or in some browsers? If you mean browsers, will it prevent SSL from worki

SPDY68 / POST to proxy / nginx worker segfault

2013-03-12 Thread Phil Pennock
nginx 1.3.14, SPDY patch version 68. Sitting in front of a PGP keyserver, with configuration as below, if I have "spdy" on the "listen" lines, then Chrome gets an error for no data returned and I get errors in errorlog: 2013/03/12 18:08:43 [alert] 8546#0: worker process 8815 exited on signal 11 2

nginx crash on reload -- how to detect?

2013-03-12 Thread Jan-Philip Gehrcke
Hello, I'm currently running a self-built nginx 1.3.14 on a debian system and use the attached (and also inlined) init.d script as /etc/init.d/nginx for managing the service. It's taken unmodified from debian wheezy. I somehow managed to get the nginx master process crashing (I have a few th

Re: SPDY giving HTTP 500

2013-03-12 Thread Valentin V. Bartenev
On Tuesday 12 March 2013 01:44:01 ct2k7 wrote: > I've compiled nginx with the SPDY patch, at the current latest, so nginx > 1.3.14. As far as I can tell, the make was fine, no errors. I'm compiling > against openSSL of the system: OpenSSL 1.0.1c 10 May 2012, on my CentOS 6.3 > server (OVH Kernel).

Multiples proxy for 1 servername

2013-03-12 Thread ceooph
Hi all, We do reverse proxy to access from internet to some documentation filtering by ip address. These documentations are hosted on commercials portals. For 1 base we are often redirect between 2 or 3 (sometimes 6) servers. (www.exemple.com -> secure1.exemple.com -> secure2.exemple.com -> a

Re: Subtle differences of restart

2013-03-12 Thread Maxim Dounin
Hello! On Mon, Mar 11, 2013 at 04:54:55PM -0400, kalpesh.pa...@glgroup.com wrote: > Hello all: > > I had a few subtle question on NGINX operation and in particular are of > reseading configuration : > > -- Assuming NGINX processes are running and the configuration is syntacaly > valid, what it

Re: SSL default changes?

2013-03-12 Thread Maxim Dounin
Hello! On Mon, Mar 11, 2013 at 12:37:37PM -0700, Grant wrote: > >> It looks like these changes from default are required for SSL session > >> resumption and to mitigate the BEAST SSL vulnerability: > >> > >> ssl_session_cache shared:SSL:10m; > >> ssl_ciphers RC4:HIGH:!aNULL:!MD5; > >> ssl_prefer_

Re: How to check the existence of a http-only secure cookie

2013-03-12 Thread Valentin V. Bartenev
On Tuesday 12 March 2013 01:54:01 kalpesh.pa...@glgroup.com wrote: > http-only and secure are directives intended for browser. If the browser > doesn't detect HTTP proto for http-only setting and SSL for secure setting > then browser will drop the cookie and will never make it to the web server. >