RE: nginx Digest, Vol 62, Issue 43

Gtx

-mensag. original-
Assunto: nginx Digest, Vol 62, Issue 43
De: [email protected]
Data: 29/12/2014 14:48

Send nginx mailing list submissions to
[email protected]

To subscribe or unsubscribe via the World Wide Web, visit
nginx Info Page
or, via email, send a message with subject or body ‘help’ to
[email protected]

You can reach the person managing the list at
[email protected]

When replying, please edit your Subject line so it is more specific
than “Re: Contents of nginx digest…”

Today’s Topics:

  1. Re: Having multiple Symfony2 apps on same domain (B.R.)
  2. Re: nginx removes double slashes (Maxim D.)
  3. Header SSL client certificate (Equipe R&S Netplus)
  4. Re: How Nginx behaves with “proxy_bind” and DNS resolver with
    non matching ip versions between bind ip and resolved ip?
    (Maxim D.)

Message: 1
Date: Mon, 29 Dec 2014 16:47:51 +0100
From: “B.R.” [email protected]
To: Nginx ML [email protected]
Subject: Re: Having multiple Symfony2 apps on same domain
Message-ID:
CALqce=1ZzBf5MbLP9+57sxvkfFHQHH=removed_email_address@domain.invalid
Content-Type: text/plain; charset=“utf-8”

Glad I helped ! :o)

B. R.

On Mon, Dec 29, 2014 at 3:52 PM, Naji Astier
[email protected]
wrote:

be
Now after many hours of configuration, with the help of debug logs, I
}
set $root “/server/www/main-app/web”;
fastcgi_param SCRIPT_FILENAME $root$fastcgi_script_name;
the first root directive in the server or the default root location.
So is their a way to achieve this configuration ? Thanks you !

nginx mailing [email protected]://mailman.nginx.org/mailman/listinfo/nginx


nginx mailing list
[email protected]
nginx Info Page

-------------- next part --------------
An HTML attachment was scrubbed…
URL:
http://mailman.nginx.org/pipermail/nginx/attachments/20141229/e6f01b2c/attachment-0001.html


Message: 2
Date: Mon, 29 Dec 2014 19:00:28 +0300
From: Maxim D. [email protected]
To: [email protected]
Subject: Re: nginx removes double slashes
Message-ID: [email protected]
Content-Type: text/plain; charset=us-ascii

Hello!

On Mon, Dec 29, 2014 at 01:04:06PM +0200, Gregory E. wrote:

            proxy_set_header X-Forwarded-Proto $scheme;

Is there any way to handle it?
Module ngx_http_core_module


Maxim D.
http://nginx.org/


Message: 3
Date: Mon, 29 Dec 2014 17:26:51 +0100
From: “Equipe R&S Netplus” [email protected]
To: [email protected]
Subject: Header SSL client certificate
Message-ID:
[email protected]
Content-Type: text/plain; charset=“utf-8”

Hello,

I use nginx as a reverse-proxy.
I would like to set a header, more precisely a header that contain the
SSL
client certificate.
However, the variable ‘$ssl_client_cert’ add some character that I don’t
want (like tab characters)

<<
proxy_set_header X-SSL-CLI-CERT $ssl_client_cert;

I test with ‘$ssl_client_raw_cert’, but the webserver in backend (here
apache) doesn’t understand the certificate and return this :

<<
request failed: error reading the headers

I see a previous post mentionning a workarount with ‘map’ (
Problem with proxy_set_header $ssl_client_cert) :

<<
map $ssl_client_raw_cert $a {
“~^(-.-\n)(?<1st>[^\n]+)\n((?[^\n]+)\n)?((?[^\n]+)\n)?((?[^\n]+)\n)?((?[^\n]+)\n)?((?[^\n]+)\n)?((?[^\n]+)\n)?((?[^\n]+)\n)?((?[^\n]+)\n)?((?[^\n]+)\n)?((?[^\n]+)\n)?((?[^\n]+)\n)?((?[^\n]+)\n)?((?[^\n]+)\n)?((?[^\n]+)\n)?((?

[^\n]+)\n)?((?[^\n]+)\n)?((?[^\n]+)\n)?((?[^\n]+)\n)?((?[^\n]+)\n)?((?[^\n]+)\n)?((?[^\n]+)\n)?((?[^\n]+)\n)?((?[^\n]+)\n)?((?[^\n]+)\n)?((?[^\n]+)\n)?(-.-)$”
$1st;
}

But in debug log file of nginx, I have an error :

<<
[alert] 19820#0: 21 pcre_exec() failed: -8 on "

CERTIFICATE CONTENT

" using "^(-.
-
)(?<1st>[^

I’m using nginx version 1.6.2, do you know another workaround please ?

Thank you.
-------------- next part --------------
An HTML attachment was scrubbed…
URL:
http://mailman.nginx.org/pipermail/nginx/attachments/20141229/80be1827/attachment-0001.html


Message: 4
Date: Mon, 29 Dec 2014 19:48:44 +0300
From: Maxim D. [email protected]
To: [email protected]
Subject: Re: How Nginx behaves with “proxy_bind” and DNS resolver with
non matching ip versions between bind ip and resolved ip?
Message-ID: [email protected]
Content-Type: text/plain; charset=us-ascii

Hello!

On Mon, Dec 29, 2014 at 02:36:55AM -0500, shmulik wrote:

addresses (and the other way around - binding to ipv4, resolving only to
ipv6).

  1. “proxy_bind” binds to an ipv6 address, the resolver returns both ipv4 and
    ipv6 addresses, but the first attempted ip address is an ipv4 address (and
    the other way around - binding to ipv4, first attempted is ipv6).

Can you please shed some light on this?

In either case nginx will call bind() syscall with the address
provided in the proxy_bind directive. If address family doesn’t
match one used in the connection, this is expected to result in an
error. The error itself will be logged into error log, and 500
(Internal Server Error) will be returned to the client.


Maxim D.
http://nginx.org/



nginx mailing list
[email protected]
http://mailman.nginx.org/mailman/listinfo/nginx

End of nginx Digest, Vol 62, Issue 43