RE: How to reproduce issue CVE-2016-4450?

2016-06-05 Thread 石磊
Thank you very much for the quick response. So can I say that if the nginx do not read the request body, it will not have the “CVE-2016-4450” issue? Thanks! From: 石磊 Sent: Friday, June 03, 2016 2:55 PM To: 'nginx@nginx.org' Subject: How to reproduce issue CVE-2016-4450? Hi, I am working on the

I think we can add a new section called 'ssl'

2016-06-05 Thread 四弦
Hello, When the nginx-1.11.0 released,'ssl_certficate' and 'ssl_certificate_key' options can be use several times to load different kinds of certificates.But,if you use the module 'nginx-ct' to enable 'Certificate Transperancy' policy(the module allow you to submit your certificate to 'Certificate

nginx fastcgi_cache not freeing deleted items causing excessive disk usage

2016-06-05 Thread b4a456fb-1402
Hello, I'm using nginx 1.10.0 and the nginx_fastcgi_cache option. I've noticed that with a high amount of requests per second (I'm not sure when it occurs exactly, but we have ~2500RPS with about 2Gbit/s of outgoing traffic responses) there is an issue with the fastcgi_cache files not being freed.