Re: Response header from fcgi server

2014-09-16 Thread wishmaster
  --- Original message --- From: "wishmaster" Date: 17 September 2014, 08:49:51 > Hi, > > PHP-application sends response with HTTP header X-Language and I need pass > this to nginx. > With Firebug I see this header, but variable $http_x_language or > $sent_http_x_language is empty. > >

Response header from fcgi server

2014-09-16 Thread wishmaster
Hi, PHP-application sends response with HTTP header X-Language and I need pass this to nginx. With Firebug I see this header, but variable $http_x_language or $sent_http_x_language is empty. What I am doing wrong? ___ nginx mailing list nginx@nginx

tomcat https server behind nginx and bad gateway

2014-09-16 Thread thunder hill
Hi, I have a tomcat server running behind nginx proxy. When I access the nginx from browser it is throwing bad gateway error. According to the tomcat application developer nginx is unable to import the ssl certs. How to import certs in to nginx? Any pointers? the setup is like follows browser

Re: How to sort parameters in nginx cache key

2014-09-16 Thread aircw
Valentin: I forgot to mention that the number of parameters is very big (> 100) and keeps growing. So manual sort is not an option :(. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,253315,253323#msg-253323 ___ nginx mailing list nginx@nginx

Re: [nginx-announce] nginx-1.7.5

2014-09-16 Thread Kevin Worthington
Hello Nginx users, Now available: Nginx 1.7.5 for Windows http://goo.gl/pTAVLA (32-bit and 64-bit versions) These versions are to support legacy users who are already using Cygwin based builds of Nginx. Officially supported native Windows binaries are at nginx.org. Announcements are also availab

Re: [nginx-announce] nginx-1.6.2

2014-09-16 Thread Kevin Worthington
Hello Nginx users, Now available: Nginx 1.6.2 for Windows http://goo.gl/ioBvGK (32-bit and 64-bit versions) These versions are to support legacy users who are already using Cygwin based builds of Nginx. Officially supported native Windows binaries are at nginx.org. Announcements are also availab

password protect site except for one page

2014-09-16 Thread Steve Holdoway
Hi folks, Does anyone have a nifty solution for this? The problem is that it's a wordpress site, so just location / { auth_basic "Coming soon..."; auth_basic_user_file/etc/nginx/security/lock; ... } location /demo { auth_basic off;

Re: Client IP address

2014-09-16 Thread useopenid
Never mind - a new proxy target was misconfigured. Doh! Posted at Nginx Forum: http://forum.nginx.org/read.php?2,253313,253318#msg-253318 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Client IP address

2014-09-16 Thread useopenid
Additional information: I caught it in the act, and something about this trigger and the setup is causing nginx to loop - the client ip address is actually right and nginx is proxying the request to itself as fast as it can. Restarting nginx stops the loop. This is version 0.7.65. I tried upgrad

Re: How to sort parameters in nginx cache key

2014-09-16 Thread Valentin V. Bartenev
On Tuesday 16 September 2014 14:32:41 Wei Chen wrote: > Hi: > > We are experiencing low cache hit ratio in Nginx server. It turned out > that one reason is client may be sending the same requests with > parameters in different orders. > > e.g. > > foo?p1=a&p2=b&p3=c > foo?p2=b&p1=a&p3=c > > And

How to sort parameters in nginx cache key

2014-09-16 Thread Wei Chen
Hi: We are experiencing low cache hit ratio in Nginx server. It turned out that one reason is client may be sending the same requests with parameters in different orders. e.g. foo?p1=a&p2=b&p3=c foo?p2=b&p1=a&p3=c And our cache key is set as proxy_cache_key $uri$is_args$args; It is not feasibl

Re: 502 errors with nginx and php5-fpm

2014-09-16 Thread nfn
Hi Just find out some clues and these are related to segmentation faults. In php logs ia have: WARNING: [pool www] child 20050 exited on signal 11 (SIGSEGV) after 57.791598 seconds from start in /var/log/messages I have :php5-fpm[2791]: segfault at fffa ip 0832d6d4 sp bf8e51c0 error 5 in php5

Client IP address

2014-09-16 Thread useopenid
We have a cluster of 4 nginx proxies behind a piranha load balancer setup. This morning we suffered a DOS attack, however the "client" address appears to have only gotten logged correctly the first time, the rest have the virtual ip address targeted as the "client", and it's unclear how or why tha

Re: using location.capture to post a form

2014-09-16 Thread Yichun Zhang (agentzh)
Hello! On Tue, Sep 16, 2014 at 11:24 AM, jpsonweb wrote: > I am calling an webapplication from nginx. I want to capture the response > and post the response body as a post parameter to another application. > I am doing something like this > local maken_res = ngx.location.capture("/test", { meth

using location.capture to post a form

2014-09-16 Thread jpsonweb
Hi All, I am calling an webapplication from nginx. I want to capture the response and post the response body as a post parameter to another application. I am doing something like this local maken_res = ngx.location.capture("/test", { method = ngx.HTTP_POST ,body = "name = John"}) The po

authentication webserver behind nginx rps

2014-09-16 Thread thunder hill
Hi, My reverse proxy setup is like this http://nginx_rps ---> https://authwebser:443 ( I dont have access to authserver ) The reverse proxy is correctly redirecting when I access the http://nginx_rps through browser. But when I type the credentials correctly in the webpage it is giving credent

2 certs, 1 domain, 1 IP

2014-09-16 Thread shm...@riseup.net
is it possible with SNI and nginx to have both an ECDSA and RSA cert serving 1 website on 1 IP ? best practices ? ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

nginx-1.6.2

2014-09-16 Thread Maxim Dounin
Changes with nginx 1.6.2 16 Sep 2014 *) Security: it was possible to reuse SSL sessions in unrelated contexts if a shared SSL session cache or the same TLS session ticket key was used for multiple "server" blocks (CVE-2014-3616). Tha

nginx-1.7.5

2014-09-16 Thread Maxim Dounin
Changes with nginx 1.7.5 16 Sep 2014 *) Security: it was possible to reuse SSL sessions in unrelated contexts if a shared SSL session cache or the same TLS session ticket key was used for multiple "server" blocks (CVE-2014-3616). Tha

Re: Bugfix: requests might hang if resolver was used [...]

2014-09-16 Thread Maxim Konovalov
On 8/26/14 5:18 PM, Maxim Konovalov wrote: > Hi Jason, > > On 8/26/14 12:47 PM, Jason Woods wrote: >> Hi, >> >> Where do I need to ask if a bug fix will be treated as major and >> ported to the 1.6 feature stable branch? >> >> Specifically, the following is having a significant impact for us, >> a

nginx security advisory (CVE-2014-3616)

2014-09-16 Thread Maxim Dounin
Hello! A problem with SSL session cache in nginx was identified by Antoine Delignat-Lavaud. It was possible to reuse cached SSL sessions in unrelated contexts, allowing virtual host confusion attacks in some configurations by an attacker in a privileged network position (CVE-2014-3616). The prob

Re: Why Nginx Doesn't Implement FastCGI Multiplexing?

2014-09-16 Thread Maxim Dounin
Hello! On Mon, Sep 15, 2014 at 06:16:58PM +0200, Wter S. wrote: > Then how Nginx is able to handle thousands simultaneous requests (where > some of them contains blocking IO operations) with only one process (or > let say 10 processes) ? That's because nginx is event-driven server and uses non