openstack swift as a cache proxy for nginx, swift proxy report 401 error when authenticate

2016-03-01 Thread AmyAmy
hello, everybody. I am trying to find a way to use Openstack swift to cache static file for a web server such as nginx, the below are request step: 1. nginx is configured as a load balance proxy server and web server. 2. There are several swift , suppose there are 2, that is swift-A,s

Re: enable reuseport then only one worker is working?

2016-03-01 Thread meteor8488
Hi Guys, Thanks for all these information. But, is there any way for FreeBSD to enable it? Posted at Nginx Forum: https://forum.nginx.org/read.php?2,264913,264990#msg-264990 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/list

Re: HTTP/2 Reverse Proxy

2016-03-01 Thread Russel_
Ok, thanks for the heads up. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,264954,264989#msg-264989 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: How to check nginx OCSP verification

2016-03-01 Thread A. Schulze
B.R.: I want to have details about the status nginx' validation of the initial OCSP query it did to the OCSP responder of the CA, especially when it goes wrong. we do not let nginx fetch the ocsp data itself but use ssl_stapling_file. a cronjob call openssl and VERIFY the ocsp resonse. O

Re: enable reuseport then only one worker is working?

2016-03-01 Thread Maxim Konovalov
On 3/1/16 8:50 PM, Jim Ohlstein wrote: > Hello, > [...] > I just upgrade Nginx from 1.8 o 1.9 on my FreeBSD > box. [..] > Did I miss anything in the configuration? or for > a busy server, it's better to use accept_mutex > instead of reuseport? >

Re: enable reuseport then only one worker is working?

2016-03-01 Thread Jim Ohlstein
Hello, > On Mar 1, 2016, at 12:27 PM, Maxim Konovalov wrote: > >> On 3/1/16 8:19 PM, Jim Ohlstein wrote: >> Hello, >> >> On Mar 1, 2016, at 9:35 AM, Maxim Konovalov > > wrote: >> On 3/1/16 5:23 PM, Jim Ohlstein wrote: Hello, > On 3/1/16 8:34 AM, Andr

Re: enable reuseport then only one worker is working?

2016-03-01 Thread Maxim Konovalov
On 3/1/16 8:19 PM, Jim Ohlstein wrote: > Hello, > > On Mar 1, 2016, at 9:35 AM, Maxim Konovalov > wrote: > >> On 3/1/16 5:23 PM, Jim Ohlstein wrote: >>> Hello, >>> >>> On 3/1/16 8:34 AM, Andrew Hutchings wrote: Hi Jim, On 01/03/16 13:10, Jim Ohlstein wrote:

Re: enable reuseport then only one worker is working?

2016-03-01 Thread Jim Ohlstein
Hello, > On Mar 1, 2016, at 9:35 AM, Maxim Konovalov wrote: > >> On 3/1/16 5:23 PM, Jim Ohlstein wrote: >> Hello, >> >>> On 3/1/16 8:34 AM, Andrew Hutchings wrote: >>> Hi Jim, >>> On 01/03/16 13:10, Jim Ohlstein wrote: Hello, > On 2/28/16 11:22 PM, Валентин Бартенев wrote:

Re: How to check nginx OCSP verification

2016-03-01 Thread B.R.
I do not want to validate OCSP responses client-side, which are OK. I want to have details about the status nginx' validation of the initial OCSP query it did to the OCSP responder of the CA, especially when it goes wrong. I noted that even though ssl_trusted_certificate is not set or set with a w

Re: How to check nginx OCSP verification

2016-03-01 Thread Alt
Hello, You can check with this command found on this website: https://unmitigatedrisk.com/?p=100 openssl s_client -connect login.live.com:443 -tls1 -tlsextdebug -status If everything goes well, you should find something like: "OCSP response: == OCSP Response

Re: enable reuseport then only one worker is working?

2016-03-01 Thread Andrew Hutchings
On 01/03/16 14:23, Jim Ohlstein wrote: Hello, On 3/1/16 8:34 AM, Andrew Hutchings wrote: Hi Jim, On 01/03/16 13:10, Jim Ohlstein wrote: Hello, On 2/28/16 11:22 PM, Валентин Бартенев wrote: On Sunday 28 February 2016 08:52:12 meteor8488 wrote: Hi All, I just upgrade Nginx from 1.8 o 1.9

Re: enable reuseport then only one worker is working?

2016-03-01 Thread Maxim Konovalov
On 3/1/16 5:23 PM, Jim Ohlstein wrote: > Hello, > > On 3/1/16 8:34 AM, Andrew Hutchings wrote: >> Hi Jim, >> >> On 01/03/16 13:10, Jim Ohlstein wrote: >>> Hello, >>> >>> On 2/28/16 11:22 PM, Валентин Бартенев wrote: On Sunday 28 February 2016 08:52:12 meteor8488 wrote: > Hi All, > >>>

Re: enable reuseport then only one worker is working?

2016-03-01 Thread Jim Ohlstein
Hello, On 3/1/16 8:34 AM, Andrew Hutchings wrote: Hi Jim, On 01/03/16 13:10, Jim Ohlstein wrote: Hello, On 2/28/16 11:22 PM, Валентин Бартенев wrote: On Sunday 28 February 2016 08:52:12 meteor8488 wrote: Hi All, I just upgrade Nginx from 1.8 o 1.9 on my FreeBSD box. [..] Did I miss anyth

Re: How to check nginx OCSP verification

2016-03-01 Thread Thierry
Title: Re: How to check nginx OCSP verification Hi, have a try :) https://www.ssllabs.com/ssltest/ Thx Le mardi 1 mars 2016 à 15:52:52, vous écriviez : Hello, I want to configure a server with: ssl_stapling on; ssl_stapling_verify on; What should happen if the ssl_trusted_certificate

How to check nginx OCSP verification

2016-03-01 Thread B.R.
Hello, I want to configure a server with: ssl_stapling on; ssl_stapling_verify on; What should happen if the ssl_trusted_certificate is (not|mis)configured? How to check nginx is properly configured and server-side OCSP response verification works? Thanks, --- *B. R.* ___

Re: enable reuseport then only one worker is working?

2016-03-01 Thread Valentin V. Bartenev
On Tuesday 01 March 2016 08:32:07 drhowarddrfine wrote: > After a brief search, I was correct, and there are technical reasons for not > doing this and Linux and Dragonfly are doing it wrong. > [..] What is the reason? wbr, Valentin V. Bartenev ___

Re: enable reuseport then only one worker is working?

2016-03-01 Thread Andrew Hutchings
Hi Jim, On 01/03/16 13:10, Jim Ohlstein wrote: Hello, On 2/28/16 11:22 PM, Валентин Бартенев wrote: On Sunday 28 February 2016 08:52:12 meteor8488 wrote: Hi All, I just upgrade Nginx from 1.8 o 1.9 on my FreeBSD box. [..] Did I miss anything in the configuration? or for a busy server, it's

Re: enable reuseport then only one worker is working?

2016-03-01 Thread drhowarddrfine
After a brief search, I was correct, and there are technical reasons for not doing this and Linux and Dragonfly are doing it wrong. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,264913,264964#msg-264964 ___ nginx mailing list nginx@nginx.or

Re: enable reuseport then only one worker is working?

2016-03-01 Thread Maxim Konovalov
On 3/1/16 4:08 PM, drhowarddrfine wrote: > Yes but is there a technical reason why it hasn't been done yet? Does > FreeBSD have a reason to not do it? Just because Linux did does not mean it > should be done. > Please approach FreeBSD developers. -- Maxim Konovalov _

Re: enable reuseport then only one worker is working?

2016-03-01 Thread Jim Ohlstein
Hello, On 2/28/16 11:22 PM, Валентин Бартенев wrote: On Sunday 28 February 2016 08:52:12 meteor8488 wrote: Hi All, I just upgrade Nginx from 1.8 o 1.9 on my FreeBSD box. [..] Did I miss anything in the configuration? or for a busy server, it's better to use accept_mutex instead of reuseport?

Re: enable reuseport then only one worker is working?

2016-03-01 Thread drhowarddrfine
Yes but is there a technical reason why it hasn't been done yet? Does FreeBSD have a reason to not do it? Just because Linux did does not mean it should be done. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,264913,264961#msg-264961 ___ ngi

Re: enable reuseport then only one worker is working?

2016-03-01 Thread Maxim Konovalov
On 3/1/16 3:46 PM, drhowarddrfine wrote: > Do you know why FreeBSD does not do this? Is there a technical reason to not > do that? > Just because you need someone to write this code for FreeBSD. -- Maxim Konovalov ___ nginx mailing list nginx@nginx.or

Re: enable reuseport then only one worker is working?

2016-03-01 Thread drhowarddrfine
Do you know why FreeBSD does not do this? Is there a technical reason to not do that? Posted at Nginx Forum: https://forum.nginx.org/read.php?2,264913,264959#msg-264959 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/ng