summaryrefslogtreecommitdiffhomepage
path: root/src/event (follow)
AgeCommit message (Collapse)AuthorFilesLines
2010-06-07merge r3489, r3493:Igor Sysoev1-0/+3
*) MSVC8 compatibility with OpenSSL 1.0.0 *) fix building OpenSSL-1.0.0 on 64-bit Linux: make installs the libraries in lib64 directory and build nginx/Windows against OpenSSL-0.9.8n
2010-06-07merge r3473, r3474, r3385, r3386, r3537:Igor Sysoev10-22/+20
signal processing stability: *) use sys_errlist[] in signal handler instead of non Async-Signal-Safe strerror_r() *) do not update time in the timer signal handler, since localtime_r() is not Async-Signal-Safe function *) use previously cached GMT offset value to update time from a signal handler *) change ngx_time_update() interface since there are no notification methods those return time *) introduce ngx_time_sigsafe_update() to update the error log time only *) change ngx_time_update() interface
2010-06-07merge r3456, r3458, r3465:Igor Sysoev2-2/+10
SSL fixes: *) decrease SSL handshake error level to info *) Set SSL session context for "ssl_session_cache none". This fixes a bug when client certficate is used and nginx closes connection with the message: "SSL_GET_PREV_SESSION:session id context uninitialized". *) add OpenSSL_add_all_algorithms(), this fixes the error "ASN1_item_verify:unknown message digest algorithm" occurred if client certificate is signed using sha256WithRSAEncryption
2010-02-01merge r3283, r3284:Igor Sysoev1-3/+2
fix segfault if $limit_rate was logged fix segfault in SSL if limit_rate is used
2010-02-01merge r3155, r3156, r3160, r969, r3191, r3197, r3358:Igor Sysoev2-3/+40
SSL fixes: *) $ssl_session_id *) allow "make clean" for OpenSSL, the bug was introduced in r2874 *) disable SSLv2 and use only strong ciphers by default *) decrease SSL handshake error level to info
2009-11-16r3301 merge:Igor Sysoev2-0/+41
disable SSL renegotiation (CVE-2009-3555)
2009-10-26merge r3024, r3025, r3028, r3033, r3034, r3035, r3036:Igor Sysoev1-13/+21
allow cross device temporary files atomic copying
2009-10-26merge r2995, r2996, r2997, r2998, r3003, r3141, r3210, r3211, r3232:Igor Sysoev2-26/+78
various SSL fixes and features: *) $ssl_client_verify *) "ssl_verify_client ask" was changed to "ssl_verify_client optional" *) ssl_crl *) delete OpenSSL pre-0.9.7 compatibility: the sources were not actually compatible with OpenSSL 0.9.6 since ssl_session_cache introduction *) fix memory corruption in $ssl_client_cert *) issue SNI warning instead of failure: this is too common case *) use ngx_log_error(), since OpenSSL does not set an error on the failure *) add SNI support in -V output
2009-10-26merge r2903, r2911, r2912, r3002:Igor Sysoev7-8/+8
fix various failures handling
2009-06-22merge r2952:Igor Sysoev1-4/+4
ignore ngx_atomic_fetch_add() result this fixes building at least by gcc 4.2.1 on Mac OS X 10.6
2009-05-14style fixIgor Sysoev1-2/+4
2009-05-06divide select module into two modules: Unix and Win32 onesIgor Sysoev2-137/+404
2009-05-06make code clearerIgor Sysoev1-2/+4
2009-05-06test event type to prevent errorsIgor Sysoev1-0/+10
2009-05-04do not free buffer with cache header before it would be written,Igor Sysoev1-1/+1
it seems this affected header only FastCGI responses only: proxied header only responses were cached right
2009-04-29try to repair the case "select ready != events"Igor Sysoev1-1/+4
2009-04-29ngx_select_repair_fd_sets()Igor Sysoev1-0/+96
2009-04-29delete useless debug logIgor Sysoev1-10/+0
2009-04-29style fixIgor Sysoev1-6/+6
2009-04-29handle Winsock select() WSAEINVALIgor Sysoev1-1/+15
2009-04-28add listen events for win32 only after accept mutex is holdIgor Sysoev1-0/+8
2009-04-27use ngx_vslprintf(), ngx_slprintf()Igor Sysoev1-1/+1
2009-04-20Win32 master/workers modelIgor Sysoev1-1/+1
2009-04-19add variadic macros support for msvc8Igor Sysoev1-2/+2
2009-04-18support attaching to an existent Win32 shared memoryIgor Sysoev2-3/+11
2009-04-16move zone name from ngx_shm_zone_t to ngx_shm_t to use Win32 shared memoryIgor Sysoev1-2/+2
2009-04-15fix building by MSVC8Igor Sysoev1-1/+1
2009-03-27improve ngx_slab_alloc() error loggingIgor Sysoev1-0/+11
2009-03-23a prelimiary proxy cache supportIgor Sysoev1-1/+13
2009-02-25lower ECONNRESET levelIgor Sysoev1-0/+1
2009-02-24prepare ngx_ptocidr() for IPv6Igor Sysoev1-6/+14
2009-02-24small optimization: " == NGX_ERROR" > " != NGX_OK"Igor Sysoev1-4/+4
2009-02-24use variable for often used fieldIgor Sysoev1-14/+15
2009-02-21a prelimiary IPv6 support, HTTP listenIgor Sysoev2-9/+7
2009-02-16load SSL engine before certificates,Igor Sysoev1-34/+25
otherwise RSA keys will use built-in RSA methods
2008-12-09use "!= NGX_OK" instead of "== NGX_ERROR"Igor Sysoev2-12/+12
2008-11-18low some SSL handshake errors levelIgor Sysoev1-16/+30
2008-10-23always use buffer, if connection is buffered,Igor Sysoev1-15/+1
this fixes OpenSSL "bad write retry" error, when *) nginx passed a single buf greater than our buffer (say 32K) to OpenSSL, *) OpenSSL returns SSL_ERROR_WANT_WRITE, *) after some time nginx has to send a new data, *) so there are at least two bufs nginx does pass them directly to OpenSSL, *) but copies the first buf part to buffer, and sends the buffer to OpenSSL. *) because the data length is lesser than it was in previous SSL_write(): 16K < 32K, OpenSSL returns SSL_R_BAD_WRITE_RETRY.
2008-09-19dynamic accept thresholdIgor Sysoev1-1/+1
2008-08-26*) refactor ngx_ptocidr()Igor Sysoev1-7/+0
*) allow address without bitmask *) thus now ngx_http_geo_module accepts addresses without bitmask
2008-08-21ngx_sock_ntop() takes family from sockaddr, remove duplicate fieldIgor Sysoev2-5/+3
2008-08-12backout both r2162 and r2128 and implement a new fixIgor Sysoev1-6/+0
2008-08-11SSL connection readiness is required for level-triggered events only,Igor Sysoev1-1/+4
broken in r2128
2008-07-30update connection readiness after SSL handshake,Igor Sysoev1-0/+3
this fixes mail proxy SSL connection hanging if level-triggered event is used
2008-07-29*) ssl_verify_client askIgor Sysoev2-1/+47
*) test ssl_client_certificate for ssl_verify_client *) $ssl_client_cert adds TAB before each line except first one *) $ssl_client_raw_cert contains certificate as is
2008-07-09handle connect()'s EAGAIN on LinuxIgor Sysoev1-3/+14
2008-06-23prepare to allow various number of connections in child processesIgor Sysoev3-44/+32
2008-06-20fix "proxy_pass https://..." broken in r1427Igor Sysoev1-0/+5
2008-06-17*) back out r2040Igor Sysoev3-7/+7
*) refactor ngx_palloc() *) introduce ngx_pnalloc() *) additional pool blocks have smaller header
2008-06-16$ssl_client_certIgor Sysoev2-0/+52