<div dir="ltr">Hi Maxim,<div><br></div><div>Here is the version details from my full recompile of NGINX 64-bit on Windows.  My code base is 2 months old, but it reproduced Saint's issue.</div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><font face="monospace">nginx version: nginx/1.23.3<br>built by cl 19.34.31937 for x64<br><b style="background-color:rgb(0,255,0)">built with OpenSSL 3.1.0-beta1-dev</b><br>TLS SNI support enabled<br>configure arguments: --with-cc=cl --builddir=objs --with-debug --prefix=. --conf-path=conf/nginx.conf --pid-path=logs/nginx.pid --http-log-path=logs/access.log --error-log-path=logs/error.log --sbin-path=nginx.exe --http-client-body-temp-path=temp/client_body_temp --http-proxy-temp-path=temp/proxy_temp --http-fastcgi-temp-path=temp/fastcgi_temp --http-scgi-temp-path=temp/scgi_temp --http-uwsgi-temp-path=temp/uwsgi_temp --with-cc-opt=-DFD_SETSIZE=1024 --with-pcre=objs/lib/pcre2 --with-zlib=objs/lib/zlib --with-select_module --with-http_v2_module --with-http_realip_module --with-http_addition_module --with-http_sub_module --with-http_dav_module --with-http_stub_status_module --with-http_flv_module --with-http_mp4_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_auth_request_module --with-http_random_index_module --with-http_secure_link_module --with-http_slice_module --with-mail --with-stream --with-http_ssl_module --with-mail_ssl_module --with-stream_ssl_module --with-openssl=objs/lib/openssl --add-module=objs/lib/spnego-http-auth-nginx-module --with-cc-opt='-I objs/lib/krb5/objs/include'</font><br></blockquote><div><br></div><div>I'm using a OpenSSL beta build from earlier, but I was able to reproduce Saint's issue and discovered the work-around with lowering the ssl_buffer_size to 4k,  Something for Saint to try out. </div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Feb 23, 2023 at 10:26 PM Maxim Dounin <<a href="mailto:mdounin@mdounin.ru">mdounin@mdounin.ru</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Hello!<br>
<br>
On Thu, Feb 23, 2023 at 09:42:29PM -0500, Dan Swaney wrote:<br>
<br>
> Ah-ah...I caught the NGINX failure in the SSL response:<br>
<br>
[...]<br>
<br>
> > 2023/02/23 21:24:49 [debug] 4768#4528: *1 malloc: 000002DC83A8F350:16384<br>
> > 2023/02/23 21:24:49 [debug] 4768#4528: *1 SSL buf copy: 626<br>
> > 2023/02/23 21:24:49 [debug] 4768#4528: *1 SSL buf copy: 15758<br>
> > *2023/02/23 21:24:49 [debug] 4768#4528: *1 SSL to write: 16384*<br>
> > 2023/02/23 21:24:49 [debug] 4768#4528: ssl remove session: B87DD7B9:32<br>
> > 2023/02/23 21:24:49 [debug] 4768#4528: shmtx lock<br>
> > 2023/02/23 21:24:49 [debug] 4768#4528: shmtx unlock<br>
> > 2023/02/23 21:24:49 [debug] 4768#4528: *1 SSL_write: -1<br>
> > 2023/02/23 21:24:49 [debug] 4768#4528: *1 SSL_get_error: 1<br>
> ><br>
> > *2023/02/23 21:24:49 [crit] 4768#4528: *1 SSL_write() failed (SSL:<br>
> > error:0A0C0103:SSL routines::internal error) while sending response to<br>
> > client, client: 192.168.80.130, server: <a href="http://win10-web-svr.dreamstone.com" rel="noreferrer" target="_blank">win10-web-svr.dreamstone.com</a><br>
> > <<a href="http://win10-web-svr.dreamstone.com" rel="noreferrer" target="_blank">http://win10-web-svr.dreamstone.com</a>>, request: "GET /images/image001.jpg<br>
> > HTTP/1.1", host: "<a href="http://win10-web-svr.dreamstone.com" rel="noreferrer" target="_blank">win10-web-svr.dreamstone.com</a><br>
> > <<a href="http://win10-web-svr.dreamstone.com" rel="noreferrer" target="_blank">http://win10-web-svr.dreamstone.com</a>>", referrer:<br>
> > "<a href="https://win10-web-svr.dreamstone.com/" rel="noreferrer" target="_blank">https://win10-web-svr.dreamstone.com/</a><br>
> > <<a href="https://win10-web-svr.dreamstone.com/" rel="noreferrer" target="_blank">https://win10-web-svr.dreamstone.com/</a>>"*<br>
<br>
The error suggests there is a bug in the SSL library you are <br>
using.  What does "nginx -V" show?<br>
<br>
(IIRC, there was something like this in the OpenSSL development <br>
recently, though I believe it doesn't affect any of the released <br>
versions.  I may be wrong though.)<br>
<br>
-- <br>
Maxim Dounin<br>
<a href="http://mdounin.ru/" rel="noreferrer" target="_blank">http://mdounin.ru/</a><br>
_______________________________________________<br>
nginx mailing list<br>
<a href="mailto:nginx@nginx.org" target="_blank">nginx@nginx.org</a><br>
<a href="https://mailman.nginx.org/mailman/listinfo/nginx" rel="noreferrer" target="_blank">https://mailman.nginx.org/mailman/listinfo/nginx</a><br>
</blockquote></div>