Maxim Dounin
fbc51e4c44
Better handling of various per-server ssl options with SNI.
...
SSL_set_SSL_CTX() doesn't touch values cached within ssl connection
structure, it only changes certificates (at least as of now, OpenSSL
1.0.0d and earlier).
As a result settings like ssl_verify_client, ssl_verify_depth,
ssl_prefer_server_ciphers are only configurable on per-socket basis while
with SNI it should be possible to specify them different for two servers
listening on the same socket.
Workaround is to explicitly re-apply settings we care about from context
to ssl connection in servername callback.
Note that SSL_clear_options() is only available in OpenSSL 0.9.8m+. I.e.
with older versions it is not possible to clear ssl_prefer_server_ciphers
option if it's set in default server for a socket.
2011-08-23 14:36:31 +00:00
Igor Sysoev
21fd22d089
always set timer in discard body handler, this fixes the cases
...
when request for static file is redirected by error_page to an SSI page
patch by Maxim Dounin
2011-08-01 13:52:54 +00:00
Igor Sysoev
2505587b4d
lingering_close "off|on|always"
...
patch by Maxim Dounin
2011-08-01 13:26:55 +00:00
Igor Sysoev
41c8a1d27f
do not send RST on normal lingering close read timeout,
...
if reset_timedout_connection is on
patch by Maxim Dounin
2011-08-01 13:08:03 +00:00
Igor Sysoev
2f3668b59b
enable lingering close for pipelined requests
...
patch by Maxim Dounin
2011-08-01 11:08:57 +00:00
Igor Sysoev
6652cc5962
Accept-Encoding refactoring: remove ancient MSIE 4.x test for gzip
2011-07-30 06:20:06 +00:00
Igor Sysoev
4956ac5108
reuse keepalive connections if there are no free worker connections
...
patch by Maxim Dounin
2011-04-04 12:26:53 +00:00
Igor Sysoev
26cf2c96ea
introduce 494 code "Request Header Too Large"
2011-01-20 10:37:58 +00:00
Igor Sysoev
ec4df838c8
"If-Unmodified-Since" support
2010-12-06 11:11:05 +00:00
Igor Sysoev
a5ee005a27
fix recognition of SSLv2 Client Hello Packet large than 255 bytes
2010-07-05 13:35:20 +00:00
Igor Sysoev
da7b5e15de
allow spaces in URI
2010-06-15 09:31:19 +00:00
Igor Sysoev
04e1156d2e
test default NTFS stream "::$DATA"
2010-06-04 15:37:49 +00:00
Igor Sysoev
8164f329fe
disable keepalive for Safari:
...
https://bugs.webkit.org/show_bug.cgi?id=5760
2010-02-01 12:01:01 +00:00
Igor Sysoev
77860d74a5
skip URI trailing spaces under Win32
2010-01-28 14:09:28 +00:00
Igor Sysoev
918ef947da
Fix segfault when while discarding body a write event handler is called,
...
runs ngx_http_core_run_phases(), and starts a request processing again.
The write event has clear type and remained in a keepalive connection.
The bug was introduced in r3050.
2010-01-28 08:33:24 +00:00
Igor Sysoev
c05f20ec2e
regex named captures
2009-11-16 12:19:02 +00:00
Igor Sysoev
bdc154bb73
r->chrome
2009-11-12 14:23:18 +00:00
Igor Sysoev
51aa6dec4d
fix segfault if there is single large_client_header_buffers
...
and a request line fills it completely
2009-11-03 18:12:20 +00:00
Igor Sysoev
663e957957
do not run regex for empty host name since regex always fails in this case,
...
the bug had been introduced in r2196
2009-10-22 09:48:42 +00:00
Igor Sysoev
cd8b43cde7
rename core_srv_conf fields to more understandable default_server and server
2009-10-21 16:52:10 +00:00
Igor Sysoev
2a634f5342
fix r3218:
...
Initially building lists of ports, addresses, and server names had been
placed at final configuration stage, because complete set of the "listen"s
and the "server_names" were required for this operation. r3218 broke it,
because the "listen"s go usually first in configuration, and
cscf->server_names is empty at this stage, therefore no virtual names
were configured.
Now server configurations are stored in array for each address:port
to configure virtual names. Also regex captures flag is moved from
server names to core server configuration.
2009-10-21 16:27:48 +00:00
Igor Sysoev
e418e0661c
fix two previous commits: an early parallel body discarding completion
...
disables incomplete ngx_http_writer()
2009-10-20 11:48:28 +00:00
Igor Sysoev
9a1f0ac730
allow discarding body while a long response transfer
2009-10-19 16:13:38 +00:00
Igor Sysoev
801a35df3c
restore discard body handler after ngx_http_set_writer() set it to
...
ngx_http_test_reading(), the bug was introduced in r3050
2009-10-19 16:12:13 +00:00
Igor Sysoev
2495c4d50b
add lingering timeout if a response is short and a request body is being
...
discarded, the bug was introduced in r3050
2009-10-19 14:08:09 +00:00
Igor Sysoev
2d24d749e4
clear r->keepalive to disable preventively calling
...
ngx_http_set_keepalive() while request cleanup
2009-10-02 11:30:47 +00:00
Igor Sysoev
689064b91a
log 499 instead 0, the bug was introduced in r3050
2009-09-30 12:05:08 +00:00
Igor Sysoev
f63a48ce7e
update the previous commit: use ngx_strlow()
2009-09-24 13:23:25 +00:00
Igor Sysoev
6749e92938
$host is always in low case:
...
*) move low case convertation from ngx_http_find_virtual_server()
to ngx_http_validate_host()
*) add in ngx_http_validate_host() capability to copy host name in the pool
allocated memory
2009-09-24 13:15:50 +00:00
Igor Sysoev
7386cf58a7
fix request counter for post_action, the bug was introduced in r3050
2009-09-21 18:34:22 +00:00
Igor Sysoev
56f06e69df
use %*s instead of %V
2009-09-01 12:35:52 +00:00
Igor Sysoev
ddda411d14
*) ngx_http_ephemeral
...
*) use preallocated terminal_posted_request
2009-08-30 09:47:11 +00:00
Igor Sysoev
aa4200b551
do not disable gzip for MSIE 6.0 SV1 in "gzip_disable msie6"
2009-08-28 08:19:02 +00:00
Igor Sysoev
a962506498
FreeBSD and Linux AIO support
2009-08-28 08:12:35 +00:00
Igor Sysoev
1163af9fae
style fix
2009-08-28 07:50:45 +00:00
Igor Sysoev
5297d456d8
axe r->connection->destroyed testing
2009-08-26 16:14:57 +00:00
Igor Sysoev
b603dd4b43
request reference counter
2009-08-26 16:04:05 +00:00
Igor Sysoev
1099f9f657
fix segfault if 400 or 414 errors are handled intricately
2009-07-24 19:20:29 +00:00
Igor Sysoev
5b4b7c58cc
*) $ssl_client_verify
...
*) "ssl_verify_client ask" was changed to "ssl_verify_client optional"
2009-07-22 17:41:42 +00:00
Igor Sysoev
a4038c8e71
fix r2972, it caused "zero size buf" alert.
2009-07-22 13:06:27 +00:00
Igor Sysoev
15e3b01819
geo module supports trusted proxies
2009-07-22 09:43:14 +00:00
Igor Sysoev
2376d6082a
skip URI trailing dots under Win32
2009-07-14 08:51:20 +00:00
Igor Sysoev
2e9542b910
fix ngx_http_send_special() for subrequests handled by perl
2009-07-09 13:32:51 +00:00
Igor Sysoev
a5fe5881c6
ignore ngx_atomic_fetch_add() result
...
this fixes building at least by gcc 4.2.1 on Mac OS X 10.6
2009-06-18 13:14:51 +00:00
Igor Sysoev
8416832621
fix "out of memory" case handling
2009-05-29 11:42:55 +00:00
Igor Sysoev
e959128b4a
keepalive_requests
2009-05-25 15:38:36 +00:00
Igor Sysoev
3b74b8eeb9
fix socket leak introduced in r2378
2009-05-25 09:56:01 +00:00
Igor Sysoev
2a9ce62631
use ngx_connection_local_sockaddr() instead of ngx_http_server_addr()
2009-05-18 12:58:19 +00:00
Igor Sysoev
868d805c8b
delete unneeded cast
2009-05-18 07:47:58 +00:00
Igor Sysoev
fd4191845b
handle big responses for "size" and "test" image_filters
2009-05-08 14:25:51 +00:00
