Re: Safe log rotation

2014-10-01 Thread Igor Sysoev
On 02 Oct 2014, at 01:30, jmobile wrote: > Hi, > > I'd like to check how nginx handles command from > http://wiki.nginx.org/LogRotation > kill -USR1 `cat /var/run/nginx.pid` > > I'm using it to recreate log files during rotation. > > My question if any loglines can be lost in case time interv

Re: nginx centos build only supports SSLv3 and ignores ssl_protocols [solved -- found an issue in nginx]

2014-10-01 Thread mayak
hi all, indeed -- i generated a new set of certs and tested: a signature of sha256 results in TLSv* begin offered a signature of sha512 results in TLSv* _not_ being offered certs with 4096 bit keys work fine i suspect that there is a variable that is not long enough to support the signature ..

Re: Max File Size Allowed In Cache

2014-10-01 Thread martinproinity
Thanks Martin! That works. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,253260,253687#msg-253687 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: nginx centos build only supports SSLv3 and ignores ssl_protocols

2014-10-01 Thread Steve Holdoway
On Wed, 2014-10-01 at 22:45 +0200, mayak wrote: > On 10/01/2014 08:45 PM, Lukas Tribus wrote: > >> btw, it seems impossible to have > >> > >> ... > >> ssl_protocols TLSv1.2; > >> ... > >> > >> and a testresult of > >> > >> SSLv2 NOT offered (ok) > >> SSLv3 offered > >> TLSv1 not offered > >> TLSv1.

Safe log rotation

2014-10-01 Thread jmobile
Hi, I'd like to check how nginx handles command from http://wiki.nginx.org/LogRotation kill -USR1 `cat /var/run/nginx.pid` I'm using it to recreate log files during rotation. My question if any loglines can be lost in case time interval between physical log files rotation and USR1 is large enoug

Re: nginx centos build only supports SSLv3 and ignores ssl_protocols

2014-10-01 Thread mayak
On 10/01/2014 08:45 PM, Lukas Tribus wrote: btw, it seems impossible to have ... ssl_protocols TLSv1.2; ... and a testresult of SSLv2 NOT offered (ok) SSLv3 offered TLSv1 not offered TLSv1.1 not offered TLSv1.2 not offered No, its very possible. A SSL_CTX_set_ssl_version() call can fail, or t

RE: nginx centos build only supports SSLv3 and ignores ssl_protocols

2014-10-01 Thread Lukas Tribus
> btw, it seems impossible to have > > ... > ssl_protocols TLSv1.2; > ... > > and a testresult of > > SSLv2 NOT offered (ok) > SSLv3 offered > TLSv1 not offered > TLSv1.1 not offered > TLSv1.2 not offered No, its very possible. A SSL_CTX_set_ssl_version() call can fail, or the call itself can be #

Re: nginx centos build only supports SSLv3 and ignores ssl_protocols

2014-10-01 Thread mex
btw, it seems impossible to have ... ssl_protocols TLSv1.2; ... and a testresult of SSLv2 NOT offered (ok) SSLv3 offered TLSv1 not offered TLSv1.1 not offered TLSv1.2 not offered are you sure you have tested the right machine? i'd suggest you run the testssl.sh - script against https://localho

nginx.conf 2014 October 20-22 in San Francisco

2014-10-01 Thread Sarah Novotny
Hello all! nginx.conf 2014 is coming soon and best pricing and conference hotel rates expire October 3. We’re super excited about the speakers including Ilya Grigork of Google, Adrian Cockcroft of Battery Ventures, Yichun Zhang (agentzh) and John Graham-Cumming of Cloud Flare, Chris Byron o

Re: nginx centos build only supports SSLv3 and ignores ssl_protocols

2014-10-01 Thread mayak
On 10/01/2014 04:54 PM, Lukas Tribus wrote: thanks for your note -- i totally forgot to give specifics: - CentOS 6.5, x64, totally up2date - OpenSSL 1.0.1e-fips 11 Feb 2013 - nginx-1.6.2-1.el6.ngx.x86_64 (from nginx repo) - openssl-1.0.1e-16.el6_5.15.x86_64 - openssl-devel-1.0.1e-16.el6_5.15.x8

RE: nginx centos build only supports SSLv3 and ignores ssl_protocols

2014-10-01 Thread Lukas Tribus
> thanks for your note -- i totally forgot to give specifics: > > - CentOS 6.5, x64, totally up2date > - OpenSSL 1.0.1e-fips 11 Feb 2013 > - nginx-1.6.2-1.el6.ngx.x86_64 (from nginx repo) > - openssl-1.0.1e-16.el6_5.15.x86_64 > - openssl-devel-1.0.1e-16.el6_5.15.x86_64 > > i did rebuild your src rp

Re: nginx centos build only supports SSLv3 and ignores ssl_protocols

2014-10-01 Thread mayak
On 10/01/2014 02:33 PM, mex wrote: this probably depends on the underlaying openssl-version from your os. what does 'openssl version' says? if you want nginx with newer openssl-version you can build a custom nginx witth openssl statically linked https://www.mare-system.de/guide-to-nginx-ssl-spd

Re: Trying to assemble logs through tcp, problems with multiple worker_processes

2014-10-01 Thread Ron van der Vegt
Nevermind, I found the problem. It seems that netcat is not reliable when benchmarking. At some point it will just not read any incomming tcp packages. With wireshark I saw that the packages where sent without problems. On di, sep 30, 2014 at 3:54 , Ron van der Vegt wrote: Hi, Im trying to

Re: nginx centos build only supports SSLv3 and ignores ssl_protocols

2014-10-01 Thread mex
this probably depends on the underlaying openssl-version from your os. what does 'openssl version' says? if you want nginx with newer openssl-version you can build a custom nginx witth openssl statically linked https://www.mare-system.de/guide-to-nginx-ssl-spdy-hsts/#workaround-for-outdated-opens

nginx centos build only supports SSLv3 and ignores ssl_protocols

2014-10-01 Thread mayak
hi all, i have several nginx sites, and as i try to deploy ssl, i am having issues with `ssl_protocols` ... ssl on; ssl_certificate /etc/x509V6/domain.crt; ssl_certificate_key /etc/x509V6/domain.key; ssl_session_cache off; ssl_protocols TLSv1.2; ssl_prefer_server_ciphers on; ssl_ciphers ECDH

Re: Wordpress white page

2014-10-01 Thread Szépe Viktor
You can contact a PHP developer. Idézem/Quoting aytar : Can you explain what I need to do in order to fix this? Some more information is welcome thanks. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,253657,253663#msg-253663 ___ nginx

Re: Wordpress white page

2014-10-01 Thread aytar
Can you explain what I need to do in order to fix this? Some more information is welcome thanks. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,253657,253663#msg-253663 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/l

Re: Max File Size Allowed In Cache

2014-10-01 Thread Maxim Dounin
Hello! On Tue, Sep 30, 2014 at 11:38:59PM -0400, martinproinity wrote: > Thanks Maxim. Is it possible the filter on a value "larger than" or "smaller > than"? How would the regex in the map block look like? e.g. smaller than > 100? > > I tried something like this, which is not working: > map

Re: Wordpress white page

2014-10-01 Thread Szépe Viktor
This is not an nginx related problem. Idézem/Quoting aytar : Hello, Sorry for double post.. I'm using CentOS 6 with Nginx EPEL, PHP-FPM, But if you are saying Viktor, You should think I should enable it? Posted at Nginx Forum: http://forum.nginx.org/read.php?2,253657,253660#msg-253660 __

Re: Wordpress white page

2014-10-01 Thread aytar
Hello, Sorry for double post.. I'm using CentOS 6 with Nginx EPEL, PHP-FPM, But if you are saying Viktor, You should think I should enable it? Posted at Nginx Forum: http://forum.nginx.org/read.php?2,253657,253660#msg-253660 ___ nginx mailing list ng

Re: Wordpress white page

2014-10-01 Thread aytar
I haven't installed this package yet. Is that the problem? Thanks! Posted at Nginx Forum: http://forum.nginx.org/read.php?2,253657,253659#msg-253659 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Wordpress white page

2014-10-01 Thread Szépe Viktor
Good morning! After seeing you image I think this problem is in your PHP code. Maybe the "Content-Encoding: gzip" header is missing. This has nothing to do with the nginx mailing list. I gladly help you in PHP application problems. Idézem/Quoting aytar : Hello, I have a problem with word

Wordpress white page

2014-10-01 Thread aytar
Hello, I have a problem with wordpress nginx I use php-fpm, mysql, nginx, epel. And getting this problem: imageurl: http://imgur.com/bm24mvj If i reload page it works but if first time a user loads page it shows that but next visit it shows normal? How can I fix this seems i cannot find th