Re: Efficient CRL checking at Nginx

2019-06-18 Thread alweiss
Hi NGINX team, do we have sample script or somebody that already did the auto retrieval script of the CRL on a regular basis ? Before re-inventing the Wheel, i was wondering if something exists. My idea was to wget the file, swap the file, run nginx -t If 0 = we reload nginx if >0 = we swap back t

Re: Variable scope in javascript module

2018-10-30 Thread alweiss
Ok, got it ! Thanks much Valentin, Maxim and Dmitry for your guidance. I decided to go as the nginx sample (https://www.nginx.com/blog/batching-api-requests-nginx-plus-javascript-module/) with the resp var which is concatened with result of each subrequest : my final_status starts with 403 at init

Re: Variable scope in javascript module

2018-10-30 Thread alweiss
My problem is that services can be one, two … ten etc … so not easy to place in the callback of the previous subrequest ... Posted at Nginx Forum: https://forum.nginx.org/read.php?2,281699,281753#msg-281753 ___ nginx mailing list nginx@nginx.org http:/

Re: Variable scope in javascript module

2018-10-30 Thread alweiss
Thanks guys, this is a first step. I moved declaration to the top of my script : START SCRIPT * var n = 0; var final_status = 403; var servicesCodes = ['rest','oass']; var requestCount = servicesCodes.length; function authorize(req, res) { req.warn('Variables init ...');

Re: Variable scope in javascript module

2018-10-30 Thread alweiss
Here is a sample that works with Java but not with njs : function my() { resp = "Start"; console.log ('Initial resp is ' + resp); function done() { resp += "AndContinue"; console.log('In loop resp is ' + resp) } done(); } resp = 'empty' my(); console.log('End

Re: Variable scope in javascript module

2018-10-30 Thread alweiss
Hi Dmitry, thanks for your reply. Here is my code called using js_content authorize; from a location {} I want to say "if at least one subrequest answers HTTP/200, set the final_status to 200 and at then end, return 200" First thing is that i must declare requestCount with var. If i don't, i get

Variable scope in javascript module

2018-10-25 Thread alweiss
Hi team !, Regarding the sample here : https://www.nginx.com/blog/batching-api-requests-nginx-plus-javascript-module/ I have an issue trying to use JS module : variable hoisting and global/local scope doesn't behave as expected. When i try to reassign the resp variable (as you do after declaring i

Re: RE: opinions about Session tickets

2017-03-28 Thread alweiss
Hi Lukas, I plan to use a key file on a tempfs on all my servers because we want to comply with RFC5077. Each time i change the key file with a new key, is it necessary to run a "systemctl reload nginx" ? or do Something else. If reload is not necessary, would working with 3 files always called the

Re: Efficient CRL checking at Nginx

2017-03-07 Thread alweiss
Understood. Thanks much for your quick reply ! Alex Posted at Nginx Forum: https://forum.nginx.org/read.php?2,255509,272800#msg-272800 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Efficient CRL checking at Nginx

2017-03-07 Thread alweiss
Hi Maxim For specific needs, if i don't add the ssl_crl directive to my ssl configuration, would nginx just don't check anything or would it issue a live query on the url indicated as a crl distribution point in the client certificate, introducing high latency ...? In other words, how to completel