All files from this thread

File Name	File Size		Posted by	Date
image.png	46.7 KB	open | download	Dan Swaney	02/23/2023	Read message
image.png	46.7 KB	open | download	Saint Michael	02/23/2023	Read message
image.png	276 KB	open | download	Saint Michael	02/23/2023	Read message
image.png	109.2 KB	open | download	Saint Michael	02/23/2023	Read message
image.png	46.7 KB	open | download	Dan Swaney	02/23/2023	Read message
image.png	276 KB	open | download	Dan Swaney	02/23/2023	Read message
image.png	109.2 KB	open | download	Dan Swaney	02/23/2023	Read message
image.png	46.7 KB	open | download	Saint Michael	02/23/2023	Read message
image.png	276 KB	open | download	Saint Michael	02/23/2023	Read message
image.png	109.2 KB	open | download	Saint Michael	02/23/2023	Read message
image.png	46.7 KB	open | download	Dan Swaney	02/23/2023	Read message
image.png	276 KB	open | download	Dan Swaney	02/23/2023	Read message
image.png	109.2 KB	open | download	Dan Swaney	02/23/2023	Read message
image.png	188.7 KB	open | download	Dan Swaney	02/23/2023	Read message
image.png	46.7 KB	open | download	Saint Michael	02/23/2023	Read message
image.png	276 KB	open | download	Saint Michael	02/23/2023	Read message
image.png	109.2 KB	open | download	Saint Michael	02/23/2023	Read message
image.png	188.7 KB	open | download	Saint Michael	02/23/2023	Read message
image.png	46.7 KB	open | download	Dan Swaney	02/23/2023	Read message
image.png	276 KB	open | download	Dan Swaney	02/23/2023	Read message
image.png	109.2 KB	open | download	Dan Swaney	02/23/2023	Read message
image.png	188.7 KB	open | download	Dan Swaney	02/23/2023	Read message

Hello!

On Thu, Feb 23, 2023 at 10:35:16PM -0500, Dan Swaney wrote:

> Hi Maxim,
>
> Here is the version details from my full recompile of NGINX 64-bit on
> Windows. My code base is 2 months old, but it reproduced Saint's issue.
>
> nginx version: nginx/1.23.3
> > built by cl 19.34.31937 for x64
> > *built with OpenSSL 3.1.0-beta1-dev*
> > TLS SNI support enabled
> > configure arguments: --with-cc=cl --builddir=objs --with-debug --prefix=.
> > --conf-path=conf/nginx.conf --pid-path=logs/nginx.pid
> > --http-log-path=logs/access.log --error-log-path=logs/error.log
> > --sbin-path=nginx.exe --http-client-body-temp-path=temp/client_body_temp
> > --http-proxy-temp-path=temp/proxy_temp
> > --http-fastcgi-temp-path=temp/fastcgi_temp
> > --http-scgi-temp-path=temp/scgi_temp --http-uwsgi-temp-path=temp/uwsgi_temp
> > --with-cc-opt=-DFD_SETSIZE=1024 --with-pcre=objs/lib/pcre2
> > --with-zlib=objs/lib/zlib --with-select_module --with-http_v2_module
> > --with-http_realip_module --with-http_addition_module
> > --with-http_sub_module --with-http_dav_module
> > --with-http_stub_status_module --with-http_flv_module
> > --with-http_mp4_module --with-http_gunzip_module
> > --with-http_gzip_static_module --with-http_auth_request_module
> > --with-http_random_index_module --with-http_secure_link_module
> > --with-http_slice_module --with-mail --with-stream --with-http_ssl_module
> > --with-mail_ssl_module --with-stream_ssl_module
> > --with-openssl=objs/lib/openssl
> > --add-module=objs/lib/spnego-http-auth-nginx-module --with-cc-opt='-I
> > objs/lib/krb5/objs/include'
> >
>
> I'm using a OpenSSL beta build from earlier, but I was able to reproduce

Thanks for the details, OpenSSL 3.1.0-beta1 perfectly explains the
issue you are seeing. Avoid using it for anything but testing
OpenSSL itself.

> Saint's issue and discovered the work-around with lowering the
> ssl_buffer_size to 4k, Something for Saint to try out.

I don't think it's related. The issue you are seeing is very
specific to some broken OpenSSL development builds, and shouldn't
appear anywhere else.

--
Maxim Dounin
http://mdounin.ru/
_______________________________________________
nginx mailing list
nginx@nginx.org
https://mailman.nginx.org/mailman/listinfo/nginx