Re: ? worker_cpu_affinity with HEX-mask

2022-11-14 Thread Maxim Dounin
Hello! On Mon, Nov 14, 2022 at 07:38:53AM -0500, ymarkman wrote: > The documentation gives an worker_cpu_affinity example with BINARY Bit-mask > with 1word-per-1cpu > Is it possible to give a HEX-mask like 0xf0f0 instead long-long BBIN mask > > I have 96 CPUs and would like to use last CPU-numbe

Re: Your connection is not private error on Android device

2022-11-14 Thread James Read
On Mon, Nov 14, 2022 at 10:34 PM Lukas Tribus wrote: > On Mon, 14 Nov 2022 at 22:56, James Read wrote: > >> So the file needs to contain first your certificate and then the > >> intermediate one. > > > > > > OK. Thanks. I rearranged the file and deleted some certificates. Now > sslabs is reporti

Re: Your connection is not private error on Android device

2022-11-14 Thread James Read
On Mon, Nov 14, 2022 at 10:34 PM Lukas Tribus wrote: > On Mon, 14 Nov 2022 at 22:56, James Read wrote: > >> So the file needs to contain first your certificate and then the > >> intermediate one. > > > > > > OK. Thanks. I rearranged the file and deleted some certificates. Now > sslabs is reporti

Re: Your connection is not private error on Android device

2022-11-14 Thread Lukas Tribus
On Mon, 14 Nov 2022 at 22:56, James Read wrote: >> So the file needs to contain first your certificate and then the >> intermediate one. > > > OK. Thanks. I rearranged the file and deleted some certificates. Now sslabs > is reporting no chain issues for Certificate #1: RSA 2048 bits (SHA256withRS

Re: Your connection is not private error on Android device

2022-11-14 Thread James Read
On Mon, Nov 14, 2022 at 10:12 PM Jeffrey Walton wrote: > > > On Mon, Nov 14, 2022 at 4:59 PM James Read > wrote: > >> ... >> OK. Thanks. I rearranged the file and deleted some certificates. Now >> sslabs is reporting no chain issues for Certificate #1: RSA 2048 bits >> (SHA256withRSA) but for Ce

Re: Your connection is not private error on Android device

2022-11-14 Thread Jeffrey Walton
On Mon, Nov 14, 2022 at 4:59 PM James Read wrote: > ... > OK. Thanks. I rearranged the file and deleted some certificates. Now > sslabs is reporting no chain issues for Certificate #1: RSA 2048 bits > (SHA256withRSA) but for Certificate #2: RSA 2048 bits (SHA256withRSA) it > is reporting > Chain

Re: Your connection is not private error on Android device

2022-11-14 Thread James Read
On Mon, Nov 14, 2022 at 9:33 PM Lukas Tribus wrote: > On Mon, 14 Nov 2022 at 21:33, James Read wrote: > >> For nginx you need the base64 encoding, which is: > >> > >> https://ssl-ccp.secureserver.net/repository/sfig2.crt.pem > >> > > > > I tried adding that certificate but sudo nginx -t now retu

Re: Your connection is not private error on Android device

2022-11-14 Thread Lukas Tribus
On Mon, 14 Nov 2022 at 21:33, James Read wrote: >> For nginx you need the base64 encoding, which is: >> >> https://ssl-ccp.secureserver.net/repository/sfig2.crt.pem >> > > I tried adding that certificate but sudo nginx -t now returns the following > error: > > nginx: [emerg] SSL_CTX_use_PrivateKe

Re: Your connection is not private error on Android device

2022-11-14 Thread James Read
On Mon, Nov 14, 2022 at 8:20 PM Lukas Tribus wrote: > On Mon, 14 Nov 2022 at 21:09, Lukas Tribus wrote: > > > > On Mon, 14 Nov 2022 at 21:00, James Read > wrote: > > > > > > > > > > > > On Mon, Nov 14, 2022 at 5:58 PM Lukas Tribus wrote: > > >> > > >> On Mon, 14 Nov 2022 at 17:31, James Read

Re: Your connection is not private error on Android device

2022-11-14 Thread Lukas Tribus
On Mon, 14 Nov 2022 at 21:09, Lukas Tribus wrote: > > On Mon, 14 Nov 2022 at 21:00, James Read wrote: > > > > > > > > On Mon, Nov 14, 2022 at 5:58 PM Lukas Tribus wrote: > >> > >> On Mon, 14 Nov 2022 at 17:31, James Read wrote: > >> > > >> > I have configured SSL on a number of subdomains inclu

Re: Your connection is not private error on Android device

2022-11-14 Thread Lukas Tribus
On Mon, 14 Nov 2022 at 21:00, James Read wrote: > > > > On Mon, Nov 14, 2022 at 5:58 PM Lukas Tribus wrote: >> >> On Mon, 14 Nov 2022 at 17:31, James Read wrote: >> > >> > I have configured SSL on a number of subdomains including >> > https://us.wottot.com >> > >> > On my PC I can view the resu

Re: Your connection is not private error on Android device

2022-11-14 Thread James Read
On Mon, Nov 14, 2022 at 5:58 PM Lukas Tribus wrote: > On Mon, 14 Nov 2022 at 17:31, James Read wrote: > > > > I have configured SSL on a number of subdomains including > https://us.wottot.com > > > > On my PC I can view the resulting web page without any problems so this > leads me to believe th

Re: Your connection is not private error on Android device

2022-11-14 Thread Mousa R via nginx
Your CA bundle / SSL Chain is incomplete Check your SSL vendor and make sure that your Certificate chain is complete ( ssl_certificate_key file ) On Mon, Nov 14, 2022 at 8:02 PM James Read wrote: > I have configured SSL on a number of subdomains including > https://us.wottot.com > > On my PC I c

Re: Your connection is not private error on Android device

2022-11-14 Thread Lukas Tribus
On Mon, 14 Nov 2022 at 17:31, James Read wrote: > > I have configured SSL on a number of subdomains including > https://us.wottot.com > > On my PC I can view the resulting web page without any problems so this leads > me to believe the SSL configuration is correct. Wrong, the intermediate certi

Your connection is not private error on Android device

2022-11-14 Thread James Read
I have configured SSL on a number of subdomains including https://us.wottot.com On my PC I can view the resulting web page without any problems so this leads me to believe the SSL configuration is correct. However, when I try to access the same page with my Android device I get a Your connection i

Re: TLS record lost -- AapacheBenchmark-session is not closed

2022-11-14 Thread ymarkman
Regarding problem TLS-session-close itself -- There is No any errors nor in error-log nor in access-log. I'm going to try the 1.22 "Our" NGINX-1.21 has been build from sources with OpenSSL-3.0 -- because we need KTLS introduced in OpenSSL-3.0. Q: Does the 1.22 already built with OpenSSL-3.0 --

? worker_cpu_affinity with HEX-mask

2022-11-14 Thread ymarkman
just add "Follow Topic". Posted at Nginx Forum: https://forum.nginx.org/read.php?2,295738,295745#msg-295745 ___ nginx mailing list -- nginx@nginx.org To unsubscribe send an email to nginx-le...@nginx.org

Re: nginx returns html instead of json response

2022-11-14 Thread Kaushal Shriyan
> On Fri, Nov 11, 2022 at 2:38 PM Francis Daly wrote: > >> On Wed, Nov 09, 2022 at 11:45:20PM +0530, Kaushal Shriyan wrote: >> >> Hi there, >> >> > Checking in again if someone can help me with my earlier post to this >> > mailing list? >> >> The question in the post was, and is, a bit unclear to

Re: TLS record lost -- AapacheBenchmark-session is not closed

2022-11-14 Thread Sergey A. Osokin
Hi, hope you're doing well. On Mon, Nov 14, 2022 at 07:53:13AM -0500, ymarkman wrote: > Using NGINX-1.21.6 as TLS test-server with remote Apache-Benchmark(AB) > test-client > Both Server and Client are on Ubuntu20.04 I'd recommend to use recent stable version 1.22.1 or, in case it's preffered t

Re: Q: Is "master process" could be overloaded by traffic

2022-11-14 Thread ymarkman
THANKS Sergey!!! Clear. Best regards. Yan Posted at Nginx Forum: https://forum.nginx.org/read.php?2,295739,295742#msg-295742 ___ nginx mailing list -- nginx@nginx.org To unsubscribe send an email to nginx-le...@nginx.org

Re: Q: Is "master process" could be overloaded by traffic

2022-11-14 Thread Sergey A. Osokin
Hi, hope you're doing well. On Mon, Nov 14, 2022 at 07:43:28AM -0500, ymarkman wrote: > When/WhatFor "master process" is acting (vs worker)? Here's the quote from [1]: The master process is responsible for the following tasks: - reading and validating configuration - creating, binding and closi

TLS record lost -- AapacheBenchmark-session is not closed

2022-11-14 Thread ymarkman
Using NGINX-1.21.6 as TLS test-server with remote Apache-Benchmark(AB) test-client Both Server and Client are on Ubuntu20.04 For >6 workers on NGINX and >16 concurrent sessions AB sessions (ab -n400 -c32 https://) a couple of test-sessions are not closed and AB reports timeout for them. TCPDUMP an

Q: Is "master process" could be overloaded by traffic

2022-11-14 Thread ymarkman
When/WhatFor "master process" is acting (vs worker)? Is it involved in data-traffic performance? Could it be overloaded by agressive traffic or "stays in ~idle"? Thanks Posted at Nginx Forum: https://forum.nginx.org/read.php?2,295739,295739#msg-295739 ___

? worker_cpu_affinity with HEX-mask

2022-11-14 Thread ymarkman
The documentation gives an worker_cpu_affinity example with BINARY Bit-mask with 1word-per-1cpu Is it possible to give a HEX-mask like 0xf0f0 instead long-long BBIN mask I have 96 CPUs and would like to use last CPU-numbers in the affinity. How to do that? Thanks Posted at Nginx Forum: https://f