Will Nginx serve stale cache after expiry if was unable to refresh the cache?

2018-10-01 Thread Quintin Par
Relevant code: proxy_cache_valid 200 301 302 1d; proxy_cache_use_stale error timeout invalid_header updating http_500 http_502 http_503 http_504; proxy_cache_background_update on; proxy_cache_lock on; The URL in question is obviously cached for 1 day. 15 minutes after the day is over, t

Redirect to external site

2018-10-01 Thread Brian W.
I have gotten the ldap setup working with their backend-sample-app.py file properly and it displays the hello world message. What I cannot figure out is how to redirect it to another url on another machine, as opposed to that local page, if auth works. Most of the attempts I have tried lead to a bl

Re: Nginx caching proxy dns name even when using variables

2018-10-01 Thread Rob Fulton
Hi, On 27/09/2018 15:53, Maxim Dounin wrote: Hello! On Thu, Sep 27, 2018 at 03:27:03PM +0100, Rob Fulton wrote: I’ve done some further testing on this today and discovered that the configuration works correctly when the proxy_pass url is accessed via http, I can see dns queries for the proxy_s

Re: OCSP stapling broken with 1.15.4

2018-10-01 Thread A. Schulze
Am 01.10.18 um 15:43 schrieb Bernardo Donadio: > I've restored the 1.15.4 package and have been making some requests. > Some of them are correctly stapled, others do not. There's no restart > between tests. maybe you run multiple threads and for each thread there is one first request? > I'm no

RE: OCSP stapling broken with 1.15.4

2018-10-01 Thread Reinis Rozitis
> Indeed, with further tests I think that the stapling is working... > sometimes. > > > I'm not using the staple file, though. Is this behavior expected without such > configuration? Also, I've enabled ssl_early_data. Each nginx worker has it's own cache. Depending on your worker_processes you m

Re: OCSP stapling broken with 1.15.4

2018-10-01 Thread Bernardo Donadio
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 10/1/18 10:04 AM, A. Schulze wrote: > Did you try to measure twice? Indeed, with further tests I think that the stapling is working... sometimes. I've restored the 1.15.4 package and have been making some requests. Some of them are correctly sta

Re: OCSP stapling broken with 1.15.4

2018-10-01 Thread A. Schulze
Bernardo Donadio: Hi. I've noticed that OCSP stapling was broken by 1.15.4, as you may see below: -- nginx 1.15.4 with OpenSSL 1.1.1 final $ openssl s_client -connect bcdonadio.com:443 -tlsextdebug -status CONNECTED(0003) TLS server extension "renegotiation info" (id=652

OCSP stapling broken with 1.15.4

2018-10-01 Thread Bernardo Donadio
Hi. I've noticed that OCSP stapling was broken by 1.15.4, as you may see below: -- nginx 1.15.4 with OpenSSL 1.1.1 final $ openssl s_client -connect bcdonadio.com:443 -tlsextdebug -status CONNECTED(0003) TLS server extension "renegotiation info" (id=65281), len=1 - 00

Web and Mail Proxy Server Configuration

2018-10-01 Thread alisampras
Hi All, My objective is to host a Web server and as a Mail proxy to my internal Exchange 2010 RPC over HTTPS. I had compile NGINX open source with --with_mail and SSL. In my nginx.conf file i saw only "http" directive with any MAIL parameters. Can anyone help me to start with a workable configu

Re: GeoIP2 Maxmind Module Support for Nginx

2018-10-01 Thread anish10dec
In both the cases , either geoip2 or ip2location we will have to compile Nginx to support . Currently we are using below two RPM's from Nginx Repository (http://nginx.org/packages/mainline/centos/7/x86_64/RPMS/) nginx-1.10.2-1.el7.ngx.x86_64 nginx-module-geoip-1.10.2-1.el7.ngx.x86_64 Is the rpm m