summaryrefslogtreecommitdiffhomepage
path: root/src/event (follow)
AgeCommit message (Collapse)AuthorFilesLines
2010-02-01merge r3283, r3284:Igor Sysoev1-3/+2
fix segfault if $limit_rate was logged fix segfault in SSL if limit_rate is used
2010-02-01merge r3155, r3156, r3160, r969, r3191, r3197, r3358:Igor Sysoev2-3/+40
SSL fixes: *) $ssl_session_id *) allow "make clean" for OpenSSL, the bug was introduced in r2874 *) disable SSLv2 and use only strong ciphers by default *) decrease SSL handshake error level to info
2009-11-16r3301 merge:Igor Sysoev2-0/+41
disable SSL renegotiation (CVE-2009-3555)
2009-10-26merge r3024, r3025, r3028, r3033, r3034, r3035, r3036:Igor Sysoev1-13/+21
allow cross device temporary files atomic copying
2009-10-26merge r2995, r2996, r2997, r2998, r3003, r3141, r3210, r3211, r3232:Igor Sysoev2-26/+78
various SSL fixes and features: *) $ssl_client_verify *) "ssl_verify_client ask" was changed to "ssl_verify_client optional" *) ssl_crl *) delete OpenSSL pre-0.9.7 compatibility: the sources were not actually compatible with OpenSSL 0.9.6 since ssl_session_cache introduction *) fix memory corruption in $ssl_client_cert *) issue SNI warning instead of failure: this is too common case *) use ngx_log_error(), since OpenSSL does not set an error on the failure *) add SNI support in -V output
2009-10-26merge r2903, r2911, r2912, r3002:Igor Sysoev7-8/+8
fix various failures handling
2009-06-22merge r2952:Igor Sysoev1-4/+4
ignore ngx_atomic_fetch_add() result this fixes building at least by gcc 4.2.1 on Mac OS X 10.6
2009-05-14style fixIgor Sysoev1-2/+4
2009-05-06divide select module into two modules: Unix and Win32 onesIgor Sysoev2-137/+404
2009-05-06make code clearerIgor Sysoev1-2/+4
2009-05-06test event type to prevent errorsIgor Sysoev1-0/+10
2009-05-04do not free buffer with cache header before it would be written,Igor Sysoev1-1/+1
it seems this affected header only FastCGI responses only: proxied header only responses were cached right
2009-04-29try to repair the case "select ready != events"Igor Sysoev1-1/+4
2009-04-29ngx_select_repair_fd_sets()Igor Sysoev1-0/+96
2009-04-29delete useless debug logIgor Sysoev1-10/+0
2009-04-29style fixIgor Sysoev1-6/+6
2009-04-29handle Winsock select() WSAEINVALIgor Sysoev1-1/+15
2009-04-28add listen events for win32 only after accept mutex is holdIgor Sysoev1-0/+8
2009-04-27use ngx_vslprintf(), ngx_slprintf()Igor Sysoev1-1/+1
2009-04-20Win32 master/workers modelIgor Sysoev1-1/+1
2009-04-19add variadic macros support for msvc8Igor Sysoev1-2/+2
2009-04-18support attaching to an existent Win32 shared memoryIgor Sysoev2-3/+11
2009-04-16move zone name from ngx_shm_zone_t to ngx_shm_t to use Win32 shared memoryIgor Sysoev1-2/+2
2009-04-15fix building by MSVC8Igor Sysoev1-1/+1
2009-03-27improve ngx_slab_alloc() error loggingIgor Sysoev1-0/+11
2009-03-23a prelimiary proxy cache supportIgor Sysoev1-1/+13
2009-02-25lower ECONNRESET levelIgor Sysoev1-0/+1
2009-02-24prepare ngx_ptocidr() for IPv6Igor Sysoev1-6/+14
2009-02-24small optimization: " == NGX_ERROR" > " != NGX_OK"Igor Sysoev1-4/+4
2009-02-24use variable for often used fieldIgor Sysoev1-14/+15
2009-02-21a prelimiary IPv6 support, HTTP listenIgor Sysoev2-9/+7
2009-02-16load SSL engine before certificates,Igor Sysoev1-34/+25
otherwise RSA keys will use built-in RSA methods
2008-12-09use "!= NGX_OK" instead of "== NGX_ERROR"Igor Sysoev2-12/+12
2008-11-18low some SSL handshake errors levelIgor Sysoev1-16/+30
2008-10-23always use buffer, if connection is buffered,Igor Sysoev1-15/+1
this fixes OpenSSL "bad write retry" error, when *) nginx passed a single buf greater than our buffer (say 32K) to OpenSSL, *) OpenSSL returns SSL_ERROR_WANT_WRITE, *) after some time nginx has to send a new data, *) so there are at least two bufs nginx does pass them directly to OpenSSL, *) but copies the first buf part to buffer, and sends the buffer to OpenSSL. *) because the data length is lesser than it was in previous SSL_write(): 16K < 32K, OpenSSL returns SSL_R_BAD_WRITE_RETRY.
2008-09-19dynamic accept thresholdIgor Sysoev1-1/+1
2008-08-26*) refactor ngx_ptocidr()Igor Sysoev1-7/+0
*) allow address without bitmask *) thus now ngx_http_geo_module accepts addresses without bitmask
2008-08-21ngx_sock_ntop() takes family from sockaddr, remove duplicate fieldIgor Sysoev2-5/+3
2008-08-12backout both r2162 and r2128 and implement a new fixIgor Sysoev1-6/+0
2008-08-11SSL connection readiness is required for level-triggered events only,Igor Sysoev1-1/+4
broken in r2128
2008-07-30update connection readiness after SSL handshake,Igor Sysoev1-0/+3
this fixes mail proxy SSL connection hanging if level-triggered event is used
2008-07-29*) ssl_verify_client askIgor Sysoev2-1/+47
*) test ssl_client_certificate for ssl_verify_client *) $ssl_client_cert adds TAB before each line except first one *) $ssl_client_raw_cert contains certificate as is
2008-07-09handle connect()'s EAGAIN on LinuxIgor Sysoev1-3/+14
2008-06-23prepare to allow various number of connections in child processesIgor Sysoev3-44/+32
2008-06-20fix "proxy_pass https://..." broken in r1427Igor Sysoev1-0/+5
2008-06-17*) back out r2040Igor Sysoev3-7/+7
*) refactor ngx_palloc() *) introduce ngx_pnalloc() *) additional pool blocks have smaller header
2008-06-16$ssl_client_certIgor Sysoev2-0/+52
2008-06-16DH parameters, ssl_dhparamIgor Sysoev2-0/+85
2008-05-26ssl_session_cache noneIgor Sysoev2-3/+27
2008-05-22style fixIgor Sysoev3-4/+4