mail module support for LMTP

2024-10-23 Thread Phillip Odam
Hi I've used NGINX module's auth_http directive to great success with SMTP, IMAP and POP3. In particular the service I'm pointing to by NGINX's auth_http enables me to route mail connections differently based on the authenticated user or whoever the mail is addressed to. Going by the NGINX docume

Re: No SNI support on multisite installation

2024-03-15 Thread Jeffrey Walton
On Fri, Mar 15, 2024 at 2:37 PM Thomas Ward wrote: > > Jeffrey, > > If I read OP's information right, the test they were seeing was that it says > it needs SNI support and a number of browsers showed "No SNI support". I > know from testing OpenResty supports

RE: No SNI support on multisite installation

2024-03-15 Thread Thomas Ward via nginx
Jeffrey, If I read OP's information right, the test they were seeing was that it says it needs SNI support and a number of browsers showed "No SNI support". I know from testing OpenResty supports SNI. That isn't the issue here I believe. Sent from my Galaxy -

Re: No SNI support on multisite installation

2024-03-15 Thread Jeffrey Walton
correct cert > for each domain. The real fix needs to be made in openrusty. SNI is a standard extension. its about time openrusty properly support it. Another way to fix it is, find a CA to issue a certificate that includes all the domains in the Subject Alt Name. So the end entity certificate is

RE: No SNI support on multisite installation

2024-03-15 Thread Thomas Ward via nginx
From: Saint Michael Date: 3/11/24 02:34 (GMT-05:00) To: nginx@nginx.org Subject: No SNI support on multisite installation I have an openresty server, latest, compiled with http_ssl. So I have 5 websites on the same IP, each one with a server block, a listen statement :443 SSL; and its

No SNI support on multisite installation

2024-03-10 Thread Saint Michael
/ssltest/ says that there is no SNI support, "This site works only in browsers with SNI support." " Certificate #2: RSA 2048 bits (SHA256withRSA) No SNI Server Key and Certificate #1 Subjectssnode1.minixel.com Fingerprint SHA256: 2c43df752c9f32a0b9072c9918c7f4064f215a75f321a3eed54f3

Re: Support on Nginx-ingress V3.4.0

2023-12-22 Thread J Carter
Hello, On Fri, 22 Dec 2023 12:05:51 +0530 Akash Shrivastava wrote: > Hi there, > Urgent support needed on Nginx-ingress 3.4.0 I'd recommend posting ingress controller related questions on the discussions section of it's Github repo. https://github.com/nginxinc/kubernetes-ing

Support on Nginx-ingress V3.4.0

2023-12-21 Thread Akash Shrivastava
Hi there, Urgent support needed on Nginx-ingress 3.4.0 https://github.com/nginxinc/kubernetes-ingress/pull/4428 What does this mean? What consideration needs to be taken before uploading this version? ___ nginx mailing list nginx@nginx.org https

Re: Nginx Support required

2023-09-04 Thread Aleksandar Lazic via nginx
Hi Shashi Kant Sharma. On 2023-09-04 (Mo.) 10:33, Shashi Kant Sharma wrote: Hi Thomas, Thanks for your email however I know Nginx plus support there and no support for Nginx. We are stuck in one issue at client side and on prem environment as unable to upload more  than 20 mb. Have you

RE: Nginx Support required

2023-09-04 Thread Shashi Kant Sharma
Hi Thomas, Thanks for your email however I know Nginx plus support there and no support for Nginx. We are stuck in one issue at client side and on prem environment as unable to upload more than 20 mb. It would be highly appreciable if quick connect on team and it will not take more than 20

Re: Nginx Support required

2023-09-03 Thread Jeff Dyke
You accepted when you installed it, no one is your support, but if you ask nicely and stop with the FN demands, you may get a little help, as this nice person did. This is not what this type of software is about, and its your bad for not understanding. This is not only for you, but would like it

Re: Nginx Support required

2023-09-03 Thread Francis Daly
On Sun, Sep 03, 2023 at 08:05:37AM -0400, Saint Michael wrote: Hi there, > The question is: if this is a full reverse proxy, and all requests come > from my NGINX server, I suspect that the answer is "they don't". Dailymotion seems to be a video hosting site with a business model based around a

RE: Nginx Support required

2023-09-03 Thread Thomas Ward
Shashi, et. al: This is the nginx oss community lists. There is no dedicated support SLA here, nor is there a "can we get together for a call or discussion". Maxim indicated there would be an off-list reply to you. There is no need to continue emailing the public mailing list aski

RE: Nginx Support required

2023-09-03 Thread Shashi Kant Sharma
Subject: RE: Nginx Support required THIS EMAIL IS FROM AN EXTERNAL SOURCE, Internet Links, office documents or other attachments may contain viruses/malware. Do not click on a link open or enable any file unless you trust the sender. Hi Maxim/Team, I am looking forward response on this. Can yo

Re: Nginx Support required

2023-09-02 Thread Saint Michael
Does anybody have any idea what am I doing wrong? On Sat, Sep 2, 2023 at 4:42 PM Aleksandar Lazic wrote: > Hi Michael. > > On 2023-09-02 (Sa.) 19:01, Saint Michael wrote: > > Is there any paid support that would help me fix this problem: > > You searched for this site &g

Re: Nginx Support required

2023-09-02 Thread Aleksandar Lazic via nginx
Hi Michael. On 2023-09-02 (Sa.) 19:01, Saint Michael wrote: Is there any paid support that would help me fix this problem: You searched for this site https://www.nginx.com/products/nginx/compare-models/ nginx offers via nginx plus a product with support and more as you can see in the page

Nginx Support required

2023-09-02 Thread Saint Michael
Is there any paid support that would help me fix this problem: This works: https://www.ntn24.com/noticias-actualidad/crecen-las-hipotesis-alrededor-de-la-muerte-del-exjefe-del-grupo-wagner-yevgueni-prigozhin-439911 but in the link below, the video from videomotion, fails to play: https

Re: Nginx Support required

2023-09-02 Thread Saint Michael
Is there any paid support that would help me fix this problem: This works: https://www.ntn24.com/noticias-actualidad/crecen-las-hipotesis-alrededor-de-la-muerte-del-exjefe-del-grupo-wagner-yevgueni-prigozhin-439911 but in the link below, the video from videomotion, fails to play: https

Re: Nginx Support required

2023-09-02 Thread Francis Daly
On Sat, Sep 02, 2023 at 08:01:42AM +, Shashi Kant Sharma wrote: Hi there, > I am looking forward response on this. Can you please response or suggest any > time for discussion today. For the nginx@nginx.org public list for "community" support of the open source application:

RE: Nginx Support required

2023-09-02 Thread Shashi Kant Sharma
m; Sapna Sharma ; Arvind Dhamija ; Suvidha Raizada ; Bhupendra Singh Subject: RE: Nginx Support required HI Maxim, Many thanks for response however please find hosted environment details and looking forward your support as it will not take more than 20 minutes time. In Espire environment we a

RE: Nginx Support required

2023-09-01 Thread Shashi Kant Sharma
HI Maxim, Many thanks for response however please find hosted environment details and looking forward your support as it will not take more than 20 minutes time. In Espire environment we are using below config:- Espire UAT environment. OS - Ubuntu - 18.0 Nginx version - 1.18 Client

RE: Nginx Support required

2023-09-01 Thread Shashi Kant Sharma
Hi Maxim, Can you loop any relevant team who can assist and provide the support? Regards Shashi Kant Sharma Associate Director - IT Espire Infolabs Pvt. Ltd. 486 & 487, Udyog Vihar Phase-III Gurugram 122016 m +91 9910777529 t +91 124 3843 101 Email shashi.sha...@espire.com Skype

Re: Nginx Support required

2023-09-01 Thread Maxim Konovalov
1, 2023 12:11 PM *To:* nginx@nginx.org *Cc:* Arvind Dhamija ; Suvidha Raizada *Subject:* RE: Nginx Support required Hello Team, Any update on this? Regards ** ** ** *Shashi Kant Sharma* Associate Director - IT Espire Infolabs Pvt. Ltd. 486 & 487, Udyog Vihar Phase-III G

RE: Nginx Support required

2023-09-01 Thread Shashi Kant Sharma
Subject: RE: Nginx Support required Hello Team, Any update on this? Regards [cid:image001.jpg@01D9DCED.1FF85AB0] Shashi Kant Sharma Associate Director - IT Espire Infolabs Pvt. Ltd. 486 & 487, Udyog Vihar Phase-III Gurugram 122016 m +91 9910777529 t +91 124 3843 101 Email shashi

Re: nginx mail auth_http response support ssl?

2023-06-13 Thread lty
Thanks for your suggestion, I'll try another way. --- > Hello! > > On Tue, Jun 13, 2023 at 10:18:44AM +0800, l...@cndns.com wrote: > >> I want the response to support ssl, is there a way to achieve it? HTTP/1.0 >> 200 OK Auth-Status: OK Auth-Server: 19

Re: nginx mail auth_http response support ssl?

2023-06-13 Thread Maxim Dounin
Hello! On Tue, Jun 13, 2023 at 10:18:44AM +0800, l...@cndns.com wrote: > I want the response to support ssl, is there a way to achieve it? > > HTTP/1.0 200 OK > > Auth-Status: OK > > Auth-Server: 198.51.100.1 > > Auth-Port: 143 > > add parameter Auth-

nginx mail auth_http response support ssl?

2023-06-12 Thread lty
I want the response to support ssl, is there a way to achieve it? HTTP/1.0 200 OK Auth-Status: OK Auth-Server: 198.51.100.1 Auth-Port: 143 add parameter Auth-Ssl: on ? ___ nginx mailing list nginx@nginx.org https://mailman.nginx.org

Nginx Ja3 fingeprint support

2023-06-09 Thread Marcello Lorenzi
Hi All, we tried to install an updated module for the SSL fingerprint in Nginx https://github.com/salesforce/ja3 but some modules like https://github.com/phuslu/nginx-ssl-fingerprint aren't compatible with OpenSSL 3. Could you help us if it's possible to configure this fingerprint implementation?

Re: QUIC Stream and Server Push support

2023-05-19 Thread Dustin Marquess
On May 19, 2023 at 8:01 PM -0500, Maxim Dounin , wrote: > Hello! > > On Fri, May 19, 2023 at 06:57:04PM -0500, Dustin Marquess wrote: > > > I noticed that QUIC Stream and QUIC Server Push support were > > removed in > > > > https://hg.nginx.org/nginx-quic/rev/11

Re: QUIC Stream and Server Push support

2023-05-19 Thread Maxim Dounin
Hello! On Fri, May 19, 2023 at 06:57:04PM -0500, Dustin Marquess wrote: > I noticed that QUIC Stream and QUIC Server Push support were > removed in > > https://hg.nginx.org/nginx-quic/rev/113e2438dbd4 > > And > > https://hg.nginx.org/nginx-quic/rev/f742b1b46901 >

QUIC Stream and Server Push support

2023-05-19 Thread Dustin Marquess
I noticed that QUIC Stream and QUIC Server Push support were removed in https://hg.nginx.org/nginx-quic/rev/113e2438dbd4 And https://hg.nginx.org/nginx-quic/rev/f742b1b46901 I'm curious on what the reasoning was, given that none was given in the commit messages? -D

Re: Ubuntu 18 Support

2022-08-19 Thread Sergey Kandaurov
erver OS, I will be installing Ubuntu Advantage to extend the EOL to > 2028 however I realise third party repos like yourself may have different > plans. > > How long will nginx.org continue to release security updates for Ubuntu 18? Linux packages are generally updated until the end

Ubuntu 18 Support

2022-08-18 Thread Rob Hooper via nginx
Hello! I am using the NGINX stable release from the nginx.org repo on a number of Ubuntu 18 servers and I am making a plan for when these servers reach end of life next year. For the server OS, I will be installing Ubuntu Advantage to extend the EOL to 2028 however I realise third party re

hostname support in geo (ngx_http_geo_module) variable maps?

2022-07-25 Thread PGNet Dev
i'm running nginx/1.23.1 i use 'geo'-based (ngx_http_geo_module) permissions to restrict access to some sites e.g., for explicit static IPs geo $RESTRICT_ACCESS { default 0; 127.0.0.1/32 1; 2601:...:abcd1; }

Re: Does Nginx support RFC 8673 feature for low latency?

2022-07-14 Thread 박규철
Hello Thank you to everyone who answered. I came to understand that RFC 8673 is an experimental feature and is not in the feature support plan. Thank you for your answer again. 2022년 7월 12일 (화) 오후 7:31, Maxim Dounin 님이 작성: > > Hello! > > On Tue, Jul 12, 2022 at 05:00:32PM +090

Re: Does Nginx support RFC 8673 feature for low latency?

2022-07-12 Thread Maxim Dounin
> 2. If the operation of RFC 8673 is not supported, I would like to know if > there is a future support plan. > > Any help is appreciated. As of now, no RFC 8673 experimental features are supported by nginx. No support is currently planned. As long as relevant features are HTTP-co

RE: Does Nginx support RFC 8673 feature for low latency?

2022-07-12 Thread Thomas Ward
Correct me if I'm wrong, but isnt 8673 an experimental protocol and not a standard, as that rfc even says in its text? If so, then I doubt support for this is likely to land in nginx. Sent from my Galaxy Original message From: 박규철 Date: 7/12/22 04:02 (GMT-05:0

Does Nginx support RFC 8673 feature for low latency?

2022-07-12 Thread 박규철
lice module, but I think it is insufficient to implement the "low latency" of RFC 8673. 1. I want to know if the operation of RFC 8673 is supported in the released nginx. 2. If the operation of RFC 8673 is not supported, I would like to know if there is a future support plan. Any help

Adding support for OpenSSL engine in Nginx Ingress controller

2022-07-05 Thread Amira S
Hello, I want to add support for an ssl_engine + ssl_certificate/key directives in the nignx.conf that configures an nginx server for ingress on kubernetes. This functionality is not provided by default, and I read that Snippets may be the recommended way to add such support. Could you please

Re: Support for nginx-1.14.2

2022-06-20 Thread Sergey A. Osokin
Hi, hope you're doing well. On Mon, Jun 20, 2022 at 01:37:48PM +, Mithilesh Wachasunder (mwachasu) via nginx wrote: > > Had a question, is nginx-1.14.2 declared as EOL(End of Life)? Well, the support can be discussible. Is there any specic usecase to support so legacy version?

RE: Support for nginx-1.14.2

2022-06-20 Thread Thomas Ward
From: "Mithilesh Wachasunder (mwachasu) via nginx" Date: 6/20/22 09:38 (GMT-05:00) To: nginx@nginx.org Cc: "Mithilesh Wachasunder (mwachasu)" Subject: Support for nginx-1.14.2 Hello team Had a question, is nginx-1.14.2 declared as EOL(End of Life)?

Support for nginx-1.14.2

2022-06-20 Thread Mithilesh Wachasunder (mwachasu) via nginx
Hello team Had a question, is nginx-1.14.2 declared as EOL(End of Life)? Thank you Mithilesh ___ nginx mailing list -- nginx@nginx.org To unsubscribe send an email to nginx-le...@nginx.org

Updated my build-nginx script to support PCRE2

2022-06-16 Thread Jay Caines-Gooby
You can choose PCRE or PCRE2 and build-nginx will do the right thing https://jay.gooby.org/2022/06/16/support-pcre2-or-pcre-in-build-nginx https://github.com/jaygooby/build-nginx -- Jay Caines-Gooby http://jay.gooby.org j...@gooby.org ___ nginx mailing

Re: How to add lua support into latest nginx version

2022-01-03 Thread Sergey A. Osokin
Hi there, On Mon, Jan 03, 2022 at 05:09:09PM -0500, graphite_123 wrote: > OS: Linux, distribution: Debian (buster) > > Currently, we using nginx:1.14.2, and to support Lua we are using > libnginx-mod-http-lua:1.14.2 package. > > We are working on upgrading Nginx to nginx:1.21.

RE: How to add lua support into latest nginx version

2022-01-03 Thread Thomas Ward
- but actual other module dependencies to be compiled in to make things work proper) Sent from my Galaxy Original message From: graphite_123 Date: 1/3/22 17:09 (GMT-05:00) To: nginx@nginx.org Subject: How to add lua support into latest nginx version OS: Linux, distribution

How to add lua support into latest nginx version

2022-01-03 Thread graphite_123
OS: Linux, distribution: Debian (buster) Currently, we using nginx:1.14.2, and to support Lua we are using libnginx-mod-http-lua:1.14.2 package. We are working on upgrading Nginx to nginx:1.21.0 version, but I'm unable to find the compatible libnginx-mod-http-lua package. Can someone please

Re: nginx kTLS support blog post

2021-11-17 Thread Mikhail Isachenkov
, Reinis Rozitis пишет: As some of you probably know we added kTLS support in nginx-1.21.4. Before testing myself wanted to quickly clarify - does this work in combination with older cipher suites (as in fallback from kTLS to standard non-kernel) to support older clients which still use tls 1.1 / 1.2

RE: nginx kTLS support blog post

2021-11-16 Thread Reinis Rozitis
> As some of you probably know we added kTLS support in nginx-1.21.4. Before testing myself wanted to quickly clarify - does this work in combination with older cipher suites (as in fallback from kTLS to standard non-kernel) to support older clients which still use tls 1.1 / 1.2 or you are loc

nginx kTLS support blog post

2021-11-12 Thread Maxim Konovalov
Hello, As some of you probably know we added kTLS support in nginx-1.21.4. We also published a blog post that provides more information about how it works and how to enable it in nginx: https://www.nginx.com/blog/improving-nginx-performance-with-kernel-tls/ Additional reading: Drew

captive portal support

2021-09-29 Thread Lucky Prince
Hi, Does nginx have an official captive portal feature? Or does nginx support a specific captive portal setup? Many thanks, https://apksprofree.com/ Lucky Prince Posted at Nginx Forum: https://forum.nginx.org/read.php?2,292500,292500#msg-292500

captive portal support

2021-09-22 Thread shaam.ramphal
Hi, Does nginx have an official captive portal feature? Or does nginx support a specific captive portal setup? Many thanks, Shaam ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Tproxy support for IP transparency

2021-06-08 Thread Francis Daly
On Mon, Jun 07, 2021 at 01:47:44PM -0400, bouvierh wrote: Hi there, > I have looked at it, however it looks like this is intended to make proxy > transparent from upstream/backend perspective: > It is used so upstream server can see client address not proxy address. > > I am looking to do the op

Re: Tproxy support for IP transparency

2021-06-07 Thread bouvierh
Thanks for the reply! I have looked at it, however it looks like this is intended to make proxy transparent from upstream/backend perspective: It is used so upstream server can see client address not proxy address. I am looking to do the opposite, I would like to make proxy transparent from the

Re: Tproxy support for IP transparency

2021-06-05 Thread Francis Daly
On Sat, Jun 05, 2021 at 12:36:47AM -0400, bouvierh wrote: Hi there, I don't have a tested answer to your question, but... > When my application connects to a sever, I am intercepting the request and > routing it to a nginx process located on the same host (listening to > 127.0.0.1:8883). > The i

Tproxy support for IP transparency

2021-06-04 Thread bouvierh
Hello, When my application connects to a sever, I am intercepting the request and routing it to a nginx process located on the same host (listening to 127.0.0.1:8883). The interception need to be transparent, so IP tables does that well. Now the issue is restoring the original destination. This wo

How to configure nginx to support multipart/form-data upload

2021-03-31 Thread allenhe
Hi, Can somebody show the minimal configuration to suppport large file upload with multipart/form-data Content-Type? When I upload 8GB file with the following global configs, I will always get 600s timeout with the error: upstream timed out (110: Connection timed out) while reading response header

About the native rtmps protocol support in nginx.

2021-01-05 Thread Hongyi Zhao
Currently, on Ubuntu20.10, I've compiled the latest git master version of FFmpeg with the native TLS/SSL support through the following configuration option: $ ./configure --enable-openssl $ ffmpeg -protocols |& egrep -i 'in|out|rtmps' Input: rtmps Output: rtmps At this mo

Re: support

2020-10-26 Thread Francis Daly
On Fri, Oct 23, 2020 at 02:04:03PM +0200, FlashBlog wrote: Hi there, > i need to configure reverse proxy for an iptv list, can anyone help me? The usual way is to "proxy_pass" within a "location" that you want to handle the request. http://nginx.org/r/proxy_pass http://nginx.org/r/location Do

support

2020-10-23 Thread FlashBlog
i need to configure reverse proxy for an iptv list, can anyone help me? ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Queries on Nginx 1.14.2 support

2020-09-21 Thread Maxim Dounin
does that mean 1.14.2 is End of Support ? > Will there be any patches provided to this version if any major > issues are found ? > In general do you suggest installing any version of Nginx on > Debian 10 which is not part of Debian 10 repository ? If yes, do > we need to be aware

Queries on Nginx 1.14.2 support

2020-09-20 Thread Suryadevara, Revanth
Hi, We noticed that on Debian 10 the default Nginx version is 1.14.2-2+deb10u3. However on your website (http://nginx.org/en/download.html) Nginx 1.14.2 is deemed as a "Legacy Version". So does that mean 1.14.2 is End of Support ? Will there be any patches provided to this version if

Will nginx support quic-lb feature

2020-07-23 Thread 曾柯(毅丝)
Dear NGINX maintainer: Will nginx support quic-lb feature which was described in https://tools.ietf.org/html/draft-ietf-quic-load-balancers-03 latter? We firmly believe that nginx is the most appropriate LB product to do this(Other LB product such as LVS, have to modify kernel). If you

Re: TCP proxy with SNI support

2020-07-23 Thread Francis Daly
with SNI > support. > > I'd like to route traffic from example.com on ports 587 & 143 to one > container and traffic for acme.com on ports 587 & 143 to a different > container, etc. Does the first example configuration at http://nginx.org/en/docs/stream/ngx_stream_

Re: Is there any plan to support WebAssembly?

2020-07-22 Thread Dmitry Volyntsev
u use WebAssembly in nginx. 1) do you have publicly available code right now? 2) Do you support any interoperability interfaces like proxy-wasm? (https://github.com/proxy-wasm/spec/tree/master/abi-versions/vNEXT) Or please share the details about your WASM runtime, and the way you interact with nginx inte

Is there any plan to support WebAssembly?

2020-07-19 Thread 肖涵
HiWebAssembly provides a new way to extend the module, like envoy already supports WebAssembly. we would like to consult nginx's attitude towards this In addition, We have supported WebAssembly for Nignx. we can load the wasm module as your extension like Lua. Will you consider accepting our code

TCP proxy with SNI support

2020-07-19 Thread bitquest25c
Hello, I have a single server with one Public IP and 10 domains. For each domain I’d like to have a separate docker container as an email server (Postfix + Dovecot). I’d like to achieve this with transparent TCP proxy with SNI support. I'd like to route traffic from example.com on port

Re: SNI support in `mail` context (fixed formatting)

2020-07-07 Thread Chris Adams
Once upon a time, Svyatoslav Mishyn said: > (Tue, 07 Jul 11:05) Chris Adams: > > No, not postfix - it doesn't support SNI on the server side (and postfix > > maintainers are not interested in adding support). > > FYI, it has SNI support but version should be >= 3.4,

Re: SNI support in `mail` context (fixed formatting)

2020-07-07 Thread Svyatoslav Mishyn
(Tue, 07 Jul 11:05) Chris Adams: > No, not postfix - it doesn't support SNI on the server side (and postfix > maintainers are not interested in adding support). FYI, it has SNI support but version should be >= 3.4, see: http://www.postfix.org/postconf.5.html#tls_server_sni_ma

Re: SNI support in `mail` context (fixed formatting)

2020-07-07 Thread Chris Adams
Once upon a time, Denis Sh. said: > So, Chris, you're saying that you successfully run Postfix and Dovecot that > rely on SNI in production? No, not postfix - it doesn't support SNI on the server side (and postfix maintainers are not interested in adding support). I do have D

Re: SNI support in `mail` context (fixed formatting)

2020-07-06 Thread Maxim Dounin
to each > other over public internet using it. > I would not say it's a local only protocol, It's not LMTP. > > Also, XCLIENT is an extension, not the standard way of doing > AUTH, correct me if I'm wrong here. > > I'm still curious why NGINX choose not to

Re: SNI support in `mail` context (fixed formatting)

2020-07-06 Thread Denis Sh .
ut local or dedicated SMTP server? SMTP is used to send mail and also mail servers talk to each other over public internet using it. I would not say it's a local only protocol, It's not LMTP. Also, XCLIENT is an extension, not the standard way of doing AUTH, correct me if I'm

Re: SNI support in `mail` context (fixed formatting)

2020-07-06 Thread Maxim Dounin
via SNI in > >> SMTPS and IMAPS connections > > I'm afraid I need to support STARTTLS and either completely do AUTH on NGINX > or backends. So stream certainly won't work for you. The question is still the same though: what are you trying to achieve. > Also, I

Re: SNI support in `mail` context (fixed formatting)

2020-07-06 Thread Denis Sh .
Yeah, It's 2020 after all :) I think most modern mail client do support SNI and send server name in client hello. So, Chris, you're saying that you successfully run Postfix and Dovecot that rely on SNI in production? How bit is your user base, roughly? Thanks 06.07.2020, 11:21, &q

Re: SNI support in `mail` context (fixed formatting)

2020-07-06 Thread Denis Sh .
le to find a reason why NGINX intentionally doesn't >> support passing thru the AUTH to the backend for SMTP, same as with IMAP/POP? > > I looked at adding this, using ID for IMAP and XCLIENT for POP3 (what > Dovecot supports)... didn't get the time and don't need it

Re: SNI support in `mail` context (fixed formatting)

2020-07-06 Thread Chris Adams
Once upon a time, Denis Sh. said: > Also, I wasn't able to find a reason why NGINX intentionally doesn't support > passing thru the AUTH to the backend for SMTP, same as with IMAP/POP? I looked at adding this, using ID for IMAP and XCLIENT for POP3 (what Dovecot supports)..

Re: SNI support in `mail` context (fixed formatting)

2020-07-06 Thread Chris Adams
Once upon a time, Maxim Dounin said: > Note though that in general there is no concept of name-based > virtual hosts in mail protocols, and using name-based virtual > hosts for SSL might not be a good idea either. Also, status of > SNI support by email clients varies, and "

Re: SNI support in `mail` context (fixed formatting)

2020-07-06 Thread Denis Sh .
is to provide >> different certificates to different names requested via SNI in >> SMTPS and IMAPS connections I'm afraid I need to support STARTTLS and either completely do AUTH on NGINX or backends. Also, I wasn't able to find a reason why NGINX intentionally doesn

Re: SNI support in `mail` context (fixed formatting)

2020-07-06 Thread Denis Sh .
ifferent names requested via SNI in> SMTPS and IMAPS connections I'm afraid I need to support STARTTLS and either completely do AUTH on NGINX or backends. Also, I wasn't able to find a reason why NGINX intentionally doesn't support passing thru the AUTH to the backend for SMTP, same as

Re: SNI support in `mail` context (fixed formatting)

2020-07-06 Thread Maxim Dounin
I in SMTPS and IMAPS connections, proxying via the stream module with ssl_preread (http://nginx.org/r/ssl_preread) might work for you. Note though that in general there is no concept of name-based virtual hosts in mail protocols, and using name-based virtual hosts for SSL might not be a good id

SNI support in `mail` context (fixed formatting)

2020-07-06 Thread Denis Sh .
Hi! So, when proxying SMTP/IMAP, is it possible to get the Server Name that mail clients send as a part of Client Hello? Similar to Embedded Variables for ngx_http_ssl_module: $ssl_server_name returns the server name requested through SNI (1.7.0); I don't see these vars defined here https://gi

SNI support in `mail` context

2020-07-06 Thread Denis Sh .
Hi! So, when proxying SMTP/IMAP, is it possible to get the Server Name that mail clients send as a part of Client Hello? Similar to Embedded Variables for ngx_http_ssl_module:$ssl_server_namereturns the server name requested through SNI (1.7.0); Or should I use `stream` to proxy mail? What about ST

Re: Compilation with Passenger support hangs on "adding module"

2020-05-26 Thread svoop
> Following the "adding module ..." line, nginx configure calls the > "config" script from the module directory. And since there is no > further output, it hangs somewhere in the config script of the > passenger module. You're right, I spend a good part of the day to track this down and figured ou

Re: Compilation with Passenger support hangs on "adding module"

2020-05-26 Thread Maxim Dounin
Hello! On Tue, May 26, 2020 at 06:33:35AM -0400, svoop wrote: > I'm using Nginx on a Gentoo Linux box to serve Ruby apps with Passenger for > years now and up to this point, never any real trouble compiling Nginx. > > Today, however, trying to upgrade Nginx from 1.16.1 to 1.17.10, the > compilat

Compilation with Passenger support hangs on "adding module"

2020-05-26 Thread svoop
Hi I'm using Nginx on a Gentoo Linux box to serve Ruby apps with Passenger for years now and up to this point, never any real trouble compiling Nginx. Today, however, trying to upgrade Nginx from 1.16.1 to 1.17.10, the compilation hangs early when adding the Passenger module. The version of Passe

Re: Does nginx support multiple http {} blocks?

2020-02-28 Thread Francis Daly
On Fri, Feb 28, 2020 at 10:22:21PM +0800, 2535191782 wrote: Hi there, > In nginx.conf:http{ > > > } > http{ > > > } > can be allowed? It seems fairly easy to check. $ sbin/nginx -t nginx: [emerg] "http" directive is duplicate in /usr/local/nginx/conf/nginx.conf:8 nginx: configuration file

Does nginx support multiple http {} blocks?

2020-02-28 Thread 2535191782
In nginx.conf:http{ } http{ } can be allowed?___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Come on... Bring the Official PROPFIND and OPTIONS support!

2020-02-22 Thread LilFag
Nginx handles symlinks 100x better than Apache regardless of settings. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,287089,287091#msg-287091 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Come on... Bring the Official PROPFIND and OPTIONS support!

2020-02-22 Thread Ralph Seichter
* LilFag: > I'm using Windows and I want Nginx to support these methods in their > WebDAV. Free software meets entitlement issues. What's the magic word? -Ralph ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Come on... Bring the Official PROPFIND and OPTIONS support!

2020-02-22 Thread LilFag
Same request: https://forum.nginx.org/read.php?2,227415,227487#msg-227487 I'm using Windows and I want Nginx to support these methods in their WebDAV. There are two things that Nginx and Windows support together so I won't change to Linux and I cannot compile Roman's ext-dav-mod

RE: Google QUIC support in nginx

2020-02-17 Thread eric tang
Test From: nginx On Behalf Of Mathew Heard Sent: 2020年1月10日星期五 上午10:30 To: nginx@nginx.org Subject: Fwd: Google QUIC support in nginx Hey nginx team, How does the roadmap now look given the Cloudflare Quiche "experiment" release? Is QUIC/HTTP3 still scheduled for mainline? On F

Fwd: Google QUIC support in nginx

2020-01-09 Thread Mathew Heard
Hey nginx team, How does the roadmap now look given the Cloudflare Quiche "experiment" release? Is QUIC/HTTP3 still scheduled for mainline? On Fri, 31 May 2019 at 16:54, George wrote: > Roadmap suggests it is in Nginx 1.17 mainline QUIC = HTTP/3 > https://trac.nginx.org/nginx/roadmap :) > > Pos

Does stream module have support to negotiate ALPN when terminating TLS?

2019-12-14 Thread sojuro
Is there support for forwarding to backends when clients are sending ALPN? I would like to use the stream module if possible. The following nginx config works successfully with a Go client but not with the Ruby client. This is similar to the problem with AWS ELB https://github.com/grpc/grpc/issues

[njs] Would njs js_content support dynamic script?

2019-10-17 Thread gaoyan09
Njs js_content can only call js function for now. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,285909,285909#msg-285909 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: How is the progress to support DTLS

2019-09-10 Thread everhardt
I’m using it for termination. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,278434,285603#msg-285603 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: How is the progress to support DTLS

2019-09-10 Thread Vladimir Homutov
onality are you using? Do you terminate DTLS or proxy it ? For the latter, you don't need patches, as recent nginx version support UDP "sessions". ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: How is the progress to support DTLS

2019-09-10 Thread everhardt
I have been using it for more than a year now for more than 500 IoT devices with a cellular connection that connect on average about 4 times per day. My experience has been very positive: easy to set up and no issues at all (both for the 1.13.0 and the 1.13.9 patch). As NGINX is at 1.17 already, I

Re: TLS 1.3 support in nginx-1.17.1 binary for Ubuntu 18.04 "bionic" provided by nginx.org

2019-07-23 Thread Konstantin Pavlov
Hello, 09.07.2019 13:35, Konstantin Pavlov wrote: > Thanks for the heads up on the openssl version change in 18.04 - it > definitely is on our roadmap to provide prebuilt packages based on > openssl 1.1.1! > > Indeed, new packages built with openssl 1.1.1 will not work on the older > Ubuntu 18.04

Re: FIPS support in nginx?

2019-07-09 Thread tlemons
Thanks for this reply, Vladimir! Where can I find nginx' use of openssl explained in the nginx documentation? I searched but didn't find it. Also, kirti mentioned re-compiling nginx to achieve a FIPS-compliant environment; is that necessary? Thanks! tl Posted at Nginx Forum: https://forum.nginx

Re: TLS 1.3 support in nginx-1.17.1 binary for Ubuntu 18.04 "bionic" provided by nginx.org

2019-07-09 Thread Konstantin Pavlov
/n/nginx/nginx_1.17.1-1~bionic_amd64.deb > and it doesn't have TLS 1.3 support. > According to > https://mailman.nginx.org/pipermail/nginx/2019-January/057402.html this > would be because it was built on an Ubuntu 18.04 "bionic" that was not > fully updated. > Ubuntu 18.

Re: FIPS support in nginx?

2019-07-09 Thread Maxim Dounin
Hello! On Tue, Jul 09, 2019 at 02:09:47AM -0400, kirti maindargikar wrote: > Hi, We are using 1.10.3 nginx in FIPS mode. As discussed above we already > have FIPS enabled on RHEL and we have recompiled nginx with OpenSSL FIPS. > However we still see that Nginx is using MD5 algorithms ( which is

  1   2   3   4   >