ssl stapling, verification fails

2015-04-28 Thread drookie
Hi. I'm trying to get nginx 1.6.2 to authenticate users using their client certificates. I'm using this configuration (besides usual SSL settings, which are proved to work): ssl_stapling on; ssl_client_certificate /etc/nginx/certs/trusted.pem; ssl_verify_client optional_no_ca; trusted.pem conta

Re: Installed nginx with iredmail; how to add web content & test without DNS change

2015-04-28 Thread Thiago Farina
On Tue, Apr 28, 2015 at 9:17 PM, gariac wrote: > I have an existing website at a hosting service. I have contracted with a > virtual server company and have installed iredmail, which in turn installs > nginx, [Oddly, Appache2 as well, though probably not relevant.] > > Since I have an ip address f

Installed nginx with iredmail; how to add web content & test without DNS change

2015-04-28 Thread gariac
I have an existing website at a hosting service. I have contracted with a virtual server company and have installed iredmail, which in turn installs nginx, [Oddly, Appache2 as well, though probably not relevant.] Since I have an ip address for the server, I am able to test the email service. [Onl

Re: 1.9 stream not working? 'directive is not allowed here'

2015-04-28 Thread Robert Paprocki
It needs to be at the -same- level as the http {} block, not -within- the http {} block. worker_processes 4; events { worker_connections 8192; } http { include mime.types; default_type application/octet-stream; } stream { upstream stream_backend { server 192.168

Re: 1.9 stream not working? 'directive is not allowed here'

2015-04-28 Thread itpp2012
Minimal conf; worker_processes 4; events { worker_connections 8192; } http { include mime.types; default_type application/octet-stream; stream { upstream stream_backend { server 192.168.222.22:810 weight=5; server 192.168.222.17:810 weigh

Re: 1.9 stream not working? 'directive is not allowed here'

2015-04-28 Thread Sergey Kandaurov
On 29.04.2015 00:13, itpp2012 wrote: Hmm, following: http://nginx.com/resources/admin-guide/tcp-load-balancing/ I get a nginx: [emerg] "stream" directive is not allowed here eventhough its within the http context You need to define it in the main context. See http://nginx.org/r/stream for deta

Re: 1.9 stream not working? 'directive is not allowed here'

2015-04-28 Thread Maxim Konovalov
On 4/29/15 12:13 AM, itpp2012 wrote: > Hmm, following: http://nginx.com/resources/admin-guide/tcp-load-balancing/ > I get a nginx: [emerg] "stream" directive is not allowed here > eventhough its within the http context like upstreams are, anyone with a > good example? or did I stumble on a context

proxy_ssl_certificate not exchanging client certificates

2015-04-28 Thread lieut_data
I was excited to see proxy_ssl_certificate and friends land in Nginx 1.7.8, and decided to revisit Nginx as a candidate for proxy caching an upstream server requiring client authentication. I've included the debugging configuration I've been playing around with at the end of this post. This partic

1.9 stream not working? 'directive is not allowed here'

2015-04-28 Thread itpp2012
Hmm, following: http://nginx.com/resources/admin-guide/tcp-load-balancing/ I get a nginx: [emerg] "stream" directive is not allowed here eventhough its within the http context like upstreams are, anyone with a good example? or did I stumble on a context eval bug? Posted at Nginx Forum: http://for

Setting content-length if app doesn't know what it is

2015-04-28 Thread CJ Ess
Behind my web server is an application that doesn't include content-length headers because it doesn't know what it is. I'm pretty sure this is an application issue but I promised I'd come here and ask the question - is there a way to have nginx buffer an entire server response and insert a content-

Re: jsfiddle demonstrating IE11 difference talking to nginx vs google

2015-04-28 Thread Maxim Dounin
Hello! On Wed, Apr 29, 2015 at 01:13:37AM +1000, jb wrote: > See, or please try: > http://jsfiddle.net/qe44nbwh/ > > If you see what I see in my IE11, when I press Start Test, and the target > is nginx.org, the duration for each request goes slow/normal/slow/normal > > But when I change nginx.o

nginx-1.9.0

2015-04-28 Thread Maxim Dounin
Changes with nginx 1.9.0 28 Apr 2015 *) Change: obsolete aio and rtsig event methods have been removed. *) Feature: the "zone" directive inside the "upstream" block. *) Feature: the stream module. *) Feature: byte ranges support in the ngx

jsfiddle demonstrating IE11 difference talking to nginx vs google

2015-04-28 Thread jb
See, or please try: http://jsfiddle.net/qe44nbwh/ If you see what I see in my IE11, when I press Start Test, and the target is nginx.org, the duration for each request goes slow/normal/slow/normal But when I change nginx.org to google.com, the timing is normal/normal/normal ... This only happens

Re: rewrite rule with ? in url

2015-04-28 Thread extremecarver
okay - I noticed my homepage wouldn't load for www.velomap.org/de/ anymore with this rule - location = /de/ { if ( $arg_s2member_paypal_notify ) { rewrite ^ / permanent; } try_files $uri $uri/ /index.php; } Seems to work - well I hope this is passing on all infor

Re: rewrite rule with ? in url

2015-04-28 Thread extremecarver
Will this work correctly with all the arguments followed? location = /de/ { if ( $arg_s2member_paypal_notify ) { rewrite ^ / permanent; } } Posted at Nginx Forum: http://forum.nginx.org/read.php?2,258420,2584

rewrite rule with ? in url

2015-04-28 Thread extremecarver
Hi - I've got a plugin which was misconfigured - and now I need to rewrite a string - however I cannot find out at all how to do this for urls with ? in them. So I need to have: www.velomap.org/de/?s2member_paypal_notify=1 rewritten to www.velomap.org/?s2member_paypal_notify=1 (note the /de missin