<div dir="auto">Hello dears i want to install nginx as proxy cache server how can i do it and where i can get license.. </div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, 28 Oct 2020, 3:00 pm , <<a href="mailto:nginx-request@nginx.org">nginx-request@nginx.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Send nginx mailing list submissions to<br>
<a href="mailto:nginx@nginx.org" target="_blank" rel="noreferrer">nginx@nginx.org</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="http://mailman.nginx.org/mailman/listinfo/nginx" rel="noreferrer noreferrer" target="_blank">http://mailman.nginx.org/mailman/listinfo/nginx</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:nginx-request@nginx.org" target="_blank" rel="noreferrer">nginx-request@nginx.org</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:nginx-owner@nginx.org" target="_blank" rel="noreferrer">nginx-owner@nginx.org</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of nginx digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. nginx-1.19.4 (Maxim Dounin)<br>
2. upstream SSL certificate does not match "x.x.x.x" (bouvierh)<br>
3. Nginx logging phase (Vikas Kumar)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Tue, 27 Oct 2020 18:26:06 +0300<br>
From: Maxim Dounin <<a href="mailto:mdounin@mdounin.ru" target="_blank" rel="noreferrer">mdounin@mdounin.ru</a>><br>
To: <a href="mailto:nginx@nginx.org" target="_blank" rel="noreferrer">nginx@nginx.org</a><br>
Subject: nginx-1.19.4<br>
Message-ID: <<a href="mailto:20201027152606.GD50919@mdounin.ru" target="_blank" rel="noreferrer">20201027152606.GD50919@mdounin.ru</a>><br>
Content-Type: text/plain; charset=us-ascii<br>
<br>
Changes with nginx 1.19.4 27 Oct 2020<br>
<br>
*) Feature: the "ssl_conf_command", "proxy_ssl_conf_command",<br>
"grpc_ssl_conf_command", and "uwsgi_ssl_conf_command" directives.<br>
<br>
*) Feature: the "ssl_reject_handshake" directive.<br>
<br>
*) Feature: the "proxy_smtp_auth" directive in mail proxy.<br>
<br>
<br>
-- <br>
Maxim Dounin<br>
<a href="http://nginx.org/" rel="noreferrer noreferrer" target="_blank">http://nginx.org/</a><br>
<br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Wed, 28 Oct 2020 00:28:04 -0400<br>
From: "bouvierh" <<a href="mailto:nginx-forum@forum.nginx.org" target="_blank" rel="noreferrer">nginx-forum@forum.nginx.org</a>><br>
To: <a href="mailto:nginx@nginx.org" target="_blank" rel="noreferrer">nginx@nginx.org</a><br>
Subject: upstream SSL certificate does not match "x.x.x.x"<br>
Message-ID:<br>
<<a href="mailto:e2daca895c920269e52b2b369cea2fa9.NginxMailingListEnglish@forum.nginx.org" target="_blank" rel="noreferrer">e2daca895c920269e52b2b369cea2fa9.NginxMailingListEnglish@forum.nginx.org</a>><br>
<br>
Content-Type: text/plain; charset=UTF-8<br>
<br>
Hello,<br>
<br>
I have a configuration an nginx proxy server "NGINX_SERVER" as the<br>
following:<br>
listen 443 ssl default_server;<br>
<br>
chunked_transfer_encoding on;<br>
<br>
ssl_certificate server.crt;<br>
ssl_certificate_key private_key_server.pem;<br>
ssl_client_certificate trustedCA.crt;<br>
#ssl_verify_depth 7;<br>
ssl_verify_client optional_no_ca;<br>
<br>
location / {<br>
proxy_http_version 1.1;<br>
resolver 127.0.0.11;<br>
proxy_ssl_trusted_certificate trustedCA.crt;<br>
proxy_ssl_verify_depth 7;<br>
proxy_ssl_verify on;<br>
proxy_pass <a href="https://13.78.229.75:443" rel="noreferrer noreferrer" target="_blank">https://13.78.229.75:443</a>;<br>
}<br>
<br>
The server "13.78.229.75" has a server certificate generate for an IP. When<br>
I do <br>
curl --cacert trustedCA.crt <a href="https://13.78.229.75:443" rel="noreferrer noreferrer" target="_blank">https://13.78.229.75:443</a> -v <br>
from "NGINX_SERVER", everything works fine. So the server certificate from<br>
"13.78.229.75" should be good.<br>
Additionnally openssl s_client -connect <a href="http://13.78.229.75:443" rel="noreferrer noreferrer" target="_blank">13.78.229.75:443</a> -showcerts -verify<br>
9 -CAfile trustedCA.crt is good too.<br>
<br>
However when I try to curl my "NGINX_SERVER":<br>
curl https://"NGINX_SERVER<br>
I get:<br>
*110 upstream SSL certificate does not match "13.78.229.75" while SSL<br>
handshaking to upstream, client: 13.78.128.54, server: , request: <br>
<br>
Looking at the server certificate, everything looks ok:<br>
Subject: CN = 13.78.229.75<br>
X509v3 Subject Alternative Name:<br>
IP Address:13.78.229.75, DNS:iotedgeapiproxy<br>
<br>
I am at loss. How can curl/openssl tell me my server cert is valid while<br>
nginx telling me it is wrong. What am I doing wrong?<br>
Thank you!<br>
Hugues<br>
<br>
Posted at Nginx Forum: <a href="https://forum.nginx.org/read.php?2,289813,289813#msg-289813" rel="noreferrer noreferrer" target="_blank">https://forum.nginx.org/read.php?2,289813,289813#msg-289813</a><br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 3<br>
Date: Wed, 28 Oct 2020 14:14:40 +0530<br>
From: Vikas Kumar <<a href="mailto:hershil@gmail.com" target="_blank" rel="noreferrer">hershil@gmail.com</a>><br>
To: <a href="mailto:nginx@nginx.org" target="_blank" rel="noreferrer">nginx@nginx.org</a><br>
Subject: Nginx logging phase<br>
Message-ID:<br>
<CAExPge647t7PWvdYrSNzivprrjYHHyrAj11opCe=<a href="mailto:qoD30QGr_w@mail.gmail.com" target="_blank" rel="noreferrer">qoD30QGr_w@mail.gmail.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
I'm writing an Nginx plugin (using Openresty Lua) which increments a<br>
counter when a request is received (in ACCESS phase) and decrements the<br>
counter when request is processed (in LOG phase) in order to keep track of<br>
in-flight requests.<br>
<br>
I've seen some cases where the counter increments but does not decrement<br>
and reaches a very high value, but can't reproduce. The core of my logic<br>
depends on the accurate value of the in-flight requests counter.<br>
<br>
I wanted to ask if there are any cases where, for a request, ACCESS phase<br>
is called and LOG phase is not called.<br>
<br>
I can paste the relevant code if required.<br>
<br>
Thanks.<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="http://mailman.nginx.org/pipermail/nginx/attachments/20201028/f7c7b119/attachment-0001.htm" rel="noreferrer noreferrer" target="_blank">http://mailman.nginx.org/pipermail/nginx/attachments/20201028/f7c7b119/attachment-0001.htm</a>><br>
<br>
------------------------------<br>
<br>
Subject: Digest Footer<br>
<br>
_______________________________________________<br>
nginx mailing list<br>
<a href="mailto:nginx@nginx.org" target="_blank" rel="noreferrer">nginx@nginx.org</a><br>
<a href="http://mailman.nginx.org/mailman/listinfo/nginx" rel="noreferrer noreferrer" target="_blank">http://mailman.nginx.org/mailman/listinfo/nginx</a><br>
<br>
------------------------------<br>
<br>
End of nginx Digest, Vol 132, Issue 24<br>
**************************************<br>
</blockquote></div>