Re: range_filter_module get duplicated Accept-Ranges response headers

2020-07-07 Thread webber
Hi, Thanks for your reply. I have tried the patch that removes the original Accept-Ranges in slice filter module, but it is not work as my expected. Because I think response header `Accept-Ranges` should be added if client send a range request. Actually, in my production environment, my upstream

njs-0.4.2

2020-07-07 Thread Dmitry Volyntsev
Hello, I'm glad to announce a new release of NGINX JavaScript module (njs). This release proceeds to extend the coverage of ECMAScript specification. You can learn more about njs: - Overview and introduction: http://nginx.org/en/docs/njs/ - Presentation: https://youtu.be/Jc_L6UffFOs - Using no

Re: SNI support in `mail` context (fixed formatting)

2020-07-07 Thread Chris Adams
Once upon a time, Svyatoslav Mishyn said: > (Tue, 07 Jul 11:05) Chris Adams: > > No, not postfix - it doesn't support SNI on the server side (and postfix > > maintainers are not interested in adding support). > > FYI, it has SNI support but version should be >= 3.4, see: > http://www.postfix.org/

Re: SNI support in `mail` context (fixed formatting)

2020-07-07 Thread Svyatoslav Mishyn
(Tue, 07 Jul 11:05) Chris Adams: > No, not postfix - it doesn't support SNI on the server side (and postfix > maintainers are not interested in adding support). FYI, it has SNI support but version should be >= 3.4, see: http://www.postfix.org/postconf.5.html#tls_server_sni_maps -- https://www.j

nginx-1.19.1

2020-07-07 Thread Maxim Dounin
Changes with nginx 1.19.107 Jul 2020 *) Change: the "lingering_close", "lingering_time", and "lingering_timeout" directives now work when using HTTP/2. *) Change: now extra data sent by a backend are always discarded. *) Change: now afte

Re: SNI support in `mail` context (fixed formatting)

2020-07-07 Thread Chris Adams
Once upon a time, Denis Sh. said: > So, Chris, you're saying that you successfully run Postfix and Dovecot that > rely on SNI in production? No, not postfix - it doesn't support SNI on the server side (and postfix maintainers are not interested in adding support). I do have Dovecot using SNI; a

Re: Found Nginx 1.19.0 stopped but no idea what happened

2020-07-07 Thread Francis Daly
On Mon, Jul 06, 2020 at 04:17:46AM -0400, Evald80 wrote: Hi there, > [root@web ~]# systemctl status nginx > ● nginx.service - nginx - high performance web server >Loaded: loaded (/usr/lib/systemd/system/nginx.service; enabled; vendor > preset: disabled) What is the history of your nginx inst

module to control TLS handshake algorithms

2020-07-07 Thread raghu venkat
HI Is there any module through which i can control algorithms used in cipher suites during TLS handshake. My requirement is like i want to configure my server in such a way that i can specify list of acceptable cipher suites and also the algorithms used in cipher suite. Specifying algorithms for i

Re: range_filter_module get duplicated Accept-Ranges response headers

2020-07-07 Thread Roman Arutyunyan
Hello, On Mon, Jul 06, 2020 at 06:49:15AM -0400, webber wrote: > Hello, > > Recently, we found if we use nginx slice module , and upstream server is > such as a static file server, nginx will response duplicated > `Accept-Ranges` headers if client request is not included range header. > > the

Re: $ssl_client_escaped_cert does not contain intermediate client certificates

2020-07-07 Thread everhardt
Hi Maxim, I, naively maybe, thought the following would work. At an incoming request, nginx checks whether the session is new or resumed. * new: it retrieves the chain, calls X509_chain_up_ref and stores a mapping from session ID to the chain pointer * resumed: it retrieves the session ID, looks

[ANN] OpenResty 1.17.8.1 released

2020-07-07 Thread Yichun Zhang
Hi there, I am happy to announce the new formal release, 1.17.8.1, of our OpenResty web platform based on NGINX and LuaJIT. The full announcement, download links, and change logs can be found below: https://openresty.org/en/ann-1017008001.html OpenResty is a high performance and dynamic web