Re: Custom error page on SSL negotiation failure

2014-03-31 Thread Kiril Kalchev
Hi, Thank you very much for the fast response. It turns out that I have somehow missed the response. Variable ssl_protocol is what I need. Regards, Kiril On Mar 17, 2014, at 5:32 PM, Lukas Tribus wrote: > Embedded Variables smime.p7s Description: S/MIME cryptographic signature _

Custom error page on SSL negotiation failure

2014-03-17 Thread Kiril Kalchev
Hi, I am trying to stop my customers that are trying to connect from an insecure web browser (my goal is to use only TLS1.2). I have read the documentation and I am able to set correct ssl ciphers and protocols on the server side, but I am interested in serving custom page when they are using d

Re: Nginx mod_security leaks file descriptors

2013-08-22 Thread Kiril Kalchev
Hi Kiril, > > I think the better place to make this question its on modsecurity users list, > because apparently its a problem in modsecurity module and don't in NGINX. > > Regards, > > Alan > > > On Aug 22, 2013, at 8:26 AM, Kiril Kalchev wrote: > >

Nginx mod_security leaks file descriptors

2013-08-22 Thread Kiril Kalchev
Hi, I have a problem with nginx and mod_security module. After reloading nginx configuration (kill -HUP ) all files opened by mod_security are opened once again without closing the old ones. That means at some point we hit the limit of open file descriptors, in my real life scenario I leak over

Re: Too Many Redirects - CDN Rewrite Rule

2013-03-22 Thread Kiril Kalchev
Hi, What Peter said is correct the best way is to prepare your application for using CDNs. But I think for a quick workaround of the problem you can try to make another server to be used only from CDN. server { location ~* ^.+.(jpe?g|gif|css|png|js|ico)$ { rewrite ^ http://cdn.mydomain.c

Re: error unlink() nginx 1.2.6

2013-03-11 Thread Kiril Kalchev
Thank you very much, and sorry for the repeated question. I will dig deeper before asking next time. Regards, Kiril On Mar 11, 2013, at 1:17 PM, Maxim Dounin wrote: > Hello! > > On Mon, Mar 11, 2013 at 09:58:28AM +0200, Kiril Kalchev wrote: > >> After I read the thread, I

Re: error unlink() nginx 1.2.6

2013-03-11 Thread Kiril Kalchev
Hello! After I read the thread, I am wondering what is the recommended way to purge nginx cache? Regards, Kiril On Mar 10, 2013, at 6:30 PM, Maxim Dounin wrote: > Hello! > > On Sat, Mar 09, 2013 at 07:52:40PM -0500, michael.heuberger wrote: > >> Hello guys >> >> I'm having this problem too

Re: Nginx proxy_intercept_errors

2013-03-06 Thread Kiril Kalchev
Yes you are right. Thank you. On Mar 6, 2013, at 5:44 PM, Maxim Dounin wrote: > Hello! > > On Wed, Mar 06, 2013 at 04:45:33PM +0200, Kiril Kalchev wrote: > >> Just for the record, I think I found a kind of solution. It >> looks good if my backend returns http codes 3x

Re: Nginx proxy_intercept_errors

2013-03-06 Thread Kiril Kalchev
. Regards, Kiril On Mar 6, 2013, at 4:31 PM, Maxim Dounin wrote: > Hello! > > On Wed, Mar 06, 2013 at 04:02:30PM +0200, Kiril Kalchev wrote: > >> Is there any way to force nginx to read request body? I really >> don't care about this overhead, I hit connection limit mu

Re: Nginx proxy_intercept_errors

2013-03-06 Thread Kiril Kalchev
:44:37PM +0200, Kiril Kalchev wrote: > >> I have noticed that when I set 'proxy_intercept_errors on;' in >> my nginx config it kills tcp connection to the origin server if >> it returns 4xx or 5xx? >> This is my example config to reproduce the >> situa

Nginx proxy_intercept_errors

2013-03-06 Thread Kiril Kalchev
Hi, I have noticed that when I set 'proxy_intercept_errors on;' in my nginx config it kills tcp connection to the origin server if it returns 4xx or 5xx? This is my example config to reproduce the situation(https://gist.github.com/kirilkalchev/5098882). I am in a situation where my backend se