summaryrefslogtreecommitdiffhomepage
AgeCommit message (Collapse)AuthorFilesLines
2021-05-11Tests: temporary dir removed after tests execution.Andrei Zeliankou1-0/+6
2021-05-07Tests: added test for TLS with empty Subject field.Andrei Zeliankou1-109/+130
2021-05-07Tests: PHP test with getting variable before the script is loaded.Andrei Zeliankou3-2/+18
2021-05-07PHP: forced initialization of $_SERVER in fastcgi_finish_request().Valentin Bartenev2-1/+33
The "auto_globals_jit" PHP option postponed the initialization of the $_SERVER global variable until the script using it had been loaded (e. g. via the "include" expression). As a result, nxt_php_register_variables() could be called after fastcgi_finish_request() had finished the request and nulled ctx->req, which thus caused a segmentation fault.
2021-05-06Tests: MIME filteringOisin Canty1-0/+170
2021-05-06Static: implemented MIME filteringOisin Canty5-17/+79
2021-05-05Tests: added tests for openat2() features.Andrei Zeliankou6-8/+380
2021-05-05Fixed format and arguments mismatches in error log messages.Zhidao HONG2-3/+3
2021-05-05Fixed building without openat2().Zhidao HONG1-1/+3
2021-04-29Static: support for openat2() features.Zhidao HONG10-27/+313
Support for chrooting, rejecting symlinks, and rejecting crossing mounting points on a per-request basis during static file serving.
2021-04-22Router: grouped app and share fields in nxt_http_action_t.Zhidao HONG5-31/+45
This is a prerequisite for further introduction of openat2() features. No functional changes.
2021-04-21Packages: switched to common address for package maintainers.Andrei Belov7-7/+15
2021-04-14Tests: fixed "skip" descriptors check flag for controller.Andrei Zeliankou1-1/+1
2021-04-12Packages: fixed Amazon Linux 2 module packages to use openssl 1.1Konstantin Pavlov1-0/+4
2021-04-08Tests: preserving unit.log when run without restart.Max Romanov9-96/+94
Introducing "unit.log.Log" class for "unit.log" file management. Moving "findall()" function into TestApplicationProto. Using "os.kill()" to send signals.
2021-04-08Packages: moved Amazon Linux 2 packages to use openssl 1.1Konstantin Pavlov2-0/+8
2021-04-05Tests: style.Andrei Zeliankou67-623/+698
2021-04-01Tests: unset LC_ALL variable in Ruby encoding test.Andrei Zeliankou1-1/+2
This change is necessary to set Encoding.default_external value correctly.
2021-03-31Tests: removed skip_alert().Andrei Zeliankou1-4/+1
2021-03-31Packages: fixed "dist" target to include man page in the archive.Valentin Bartenev1-1/+1
2021-03-31Tests: added file descriptor leak detection.Andrei Zeliankou2-2/+132
2021-03-26Tests: SNI.Andrei Zeliankou3-4/+306
2021-03-26Tests: added test for Ruby default encoding.Andrei Zeliankou2-0/+55
2021-03-26Packages: corrected permissions for /var/log/unit in rpm.Andrei Belov1-1/+1
Found by rpmlint.
2021-03-26Corrected man page permissions in manpage-install.Andrei Belov1-1/+1
Found by rpmlint.
2021-03-26Version bump.Valentin Bartenev2-2/+31
2021-03-25Added tag 1.23.0 for changeset 49ee24c03f57Valentin Bartenev1-0/+1
2021-03-25Generated Dockerfiles for Unit 1.23.0.1.23.0Valentin Bartenev8-8/+8
2021-03-25Added version 1.23.0 CHANGES.Valentin Bartenev2-1/+63
2021-03-25Fixed wording in docs/changes.xml for the 1.23.0 release.Artem Konev1-7/+9
2021-03-25Fixing shm buffer leakage when sending over the port queue.Max Romanov2-13/+91
When the shm buffer is sent over the port queue, it needs to be completed because it's sent over the port socket.
2021-03-25Node.js: used distinct placeholder for version in "package.json".Valentin Bartenev2-2/+2
This makes the "sed" instruction simpler and more portable, as the previous variant didn't work well on BSD systems due to the "\s" metacharacter. Thanks to Sergey A. Osokin <osa@FreeBSD.org.ru> for spotting this issue. Also, this should prevent accidentally creating a version 1.0.0 package.
2021-03-25Node.js: fixing module global installation.Max Romanov1-12/+26
Globally installed modules require a globally installed libunit. The "binding_pub.gyp" file is the correct version, otherwise linked module may have unresolved symbols because libunit is not linked.
2021-03-25Releasing shm buffers for large body requests.Max Romanov2-12/+4
This fixes memory and shm file descriptor leakage that occurred when a large request body was passed via shared memory. The leakage was caught with the "test_settings_body_buffer_size" test. The main condition is the "body_buffer_size" value exceeding 10 Mb (a shm segment). Thus, the router was forced to split the body into several shm segments, but these buffers were not freed because of dummy completion handlers.
2021-03-24Added ability to configure multiple certificates on a listener.Andrey Suvorov5-68/+524
The certificate is selected by matching the arriving SNI to the common name and the alternatives names. If no certificate matches the name, the first bundle in the array is chosen.
2021-03-24Packages: added man page on rpm-based systems.Konstantin Pavlov2-2/+3
2021-03-24Packages: added man page on debian-based systems.Konstantin Pavlov2-2/+4
2021-03-24Added build system support for a man page.Konstantin Pavlov6-6/+42
2021-03-24Added a missing .El directive in man page source.Artem Konev1-0/+1
2021-03-24Added a man page.Artem Konev1-0/+79
Reviewed at https://rb.nginx.com/r/165/
2021-03-24Certificates: fixed in name attributes processing.Valentin Bartenev2-25/+23
The idea is to put SAN after CN, but the previous version of the code incorrectly assumed that CN was always present, which caused writes outside the allocated object if there were no standard name attributes.
2021-03-24Certificates: moved SAN processing to a separate function.Valentin Bartenev1-36/+56
No functional changes.
2021-03-24Certficates: fixed counting DNS SAN entries.Valentin Bartenev2-2/+12
Previously, entries of any type were counted during object allocation but only DNS type entries were actually processed. As a result, if some certificate entries had another type, returning information about the certificate caused uninitialized memory access.
2021-03-24Tests: fixed racing condition in websocket test 5_15.Max Romanov3-9/+33
Test case: "send a text message split into two fragments, then a continuation frame with FIN = false where there is nothing to continue, then an unfragmented text message, all sent in one chop". The test case investigates immediate connection closing since there is no message to continue. The mirror server may send a response for the first frame before the test сontinuation frame is received by the router. In this case, the test will receive a text frame before the close frame.
2021-03-24Workaround for an OpenSSL bug about not closing /dev/*random.Max Romanov1-0/+11
This is a workaround for an issue in OpenSSL 1.1.1, where the /dev/random and /dev/urandom files remain open after all listening sockets were removed: - https://github.com/openssl/openssl/issues/7419
2021-03-24Disabled logging alerts to syslog.Valentin Bartenev2-2/+16
It feels to be causing more harm than good, because syslog() can be blocking, which is even more critical under resource exhaustion conditions when some alerts are expected.
2021-03-22Java: upgrading third-party components.Sergey A. Osokin3-19/+19
2021-03-15Fixed building the PHP 5 module with ZTS, broken by dab8544b5440.Valentin Bartenev2-0/+11
This closes #525 issue on GitHub.
2021-03-15Ruby: fixed encodings initialization.Valentin Bartenev2-0/+10
The Ruby interpreter expects an explicit setlocale() call before initialization to pick up character encodings in the "Encoding" class from the environment. This closes #531 issue on GitHub.
2021-03-15Fixed certificates loading on startup with some filesystems.Valentin Bartenev2-4/+13
It appears that readdir() on Linux detects file types unreliably, always setting the "d_type" field to DT_UNKNOWN for some less common filesystems. As a result, all files were skipped and no certificate bundles were found when the state directory was located on such filesystems. Skipping "." and ".." instead of any non-regular files should be enough, as no other non-regular files normally appear in this directory. This closes #368 issue on GitHub.
generated by cgit (git 2.34.1) at 2024-11-17 14:16:26 +0000