1923:9f268a8a1a2f | 23-Jul-2021 |
Zhidao HONG |
Router: split nxt_http_static_conf_t from nxt_http_action_t.
No functional changes. |
1921:b0deb6fa9219 | 22-Jul-2021 |
Andrey Suvorov |
Changing SNI callback return code if a client sends no SNI.
When a client sends no SNI is a common situation. But currently the server processes it as an error and returns SSL_TLSEXT_ERR_ALERT_FATA
Changing SNI callback return code if a client sends no SNI.
When a client sends no SNI is a common situation. But currently the server processes it as an error and returns SSL_TLSEXT_ERR_ALERT_FATAL causing termination of a current TLS session. The problem occurs if configuration has more than one certificate bundle in a listener.
This fix changes the return code to SSL_TLSEXT_ERR_OK and the log level of a message.
show more ...
|
1920:7c19530e2502 | 21-Jul-2021 |
Andrey Suvorov |
Enabling configure TLS sessions.
To support TLS sessions, Unit uses the OpenSSL built-in session cache; the cache_size option defines the number sessions to store. To disable the feather, the optio
Enabling configure TLS sessions.
To support TLS sessions, Unit uses the OpenSSL built-in session cache; the cache_size option defines the number sessions to store. To disable the feather, the option must be zero.
show more ...
|
1918:b15674b9a39a | 20-Jul-2021 |
Max Romanov |
Python: using default event_loop for main thread for ASGI.
Unit's ASGI implementation creates a new event loop to run an application for each thread since 542b5b8c0647. This may cause unexpected ex
Python: using default event_loop for main thread for ASGI.
Unit's ASGI implementation creates a new event loop to run an application for each thread since 542b5b8c0647. This may cause unexpected exceptions or strange bugs if asyncio synchronisation primitives are initialised before the application starts (e.g. globally).
Although the approach with a new event loop for the main thread is consistent and helps to prepare the application to run in multiple threads, it can be a source of pain for people who just want to run single-threaded ASGI applications in Unit.
This is related to #560 issue on GitHub.
show more ...
|
1917:a7e80c97def4 | 20-Jul-2021 |
Max Romanov |
Python: fixing exceptions in Future.set_result for ASGI implementation.
An ASGI application can cancel the Future object returned by the receive() call. In this case, Unit's ASGI implementation sho
Python: fixing exceptions in Future.set_result for ASGI implementation.
An ASGI application can cancel the Future object returned by the receive() call. In this case, Unit's ASGI implementation should not call set_result() because the Future is already handled. In particular, the Starlette framework was noted to cancel the received Future.
This patch adds a done() check for the Future before attempting a set_result().
This is related to #564 issue on GitHub.
show more ...
|
1916:2d7e54265010 | 20-Jul-2021 |
Max Romanov |
Python: fixing ASGI receive() issues.
The receive() call never blocks for a GET request and always returns the same empty body message. The Starlette framework creates a separate task when receive(
Python: fixing ASGI receive() issues.
The receive() call never blocks for a GET request and always returns the same empty body message. The Starlette framework creates a separate task when receive() is called in a loop until an 'http.disconnect' message is received.
The 'http.disconnect' message was previously issued after the response header had been sent. However, the correct behavior is to respond with 'http.disconnect' after sending the response is complete.
This closes #564 issue on GitHub.
show more ...
|
1915:48167dd83aa5 | 19-Jul-2021 |
Max Romanov |
Router: fixing assertion on app thread port handle.
A new application thread port message can be processed in the router after the application is removed from the router. Assertion for this case is
Router: fixing assertion on app thread port handle.
A new application thread port message can be processed in the router after the application is removed from the router. Assertion for this case is replaced by a condition to store the new thread port until receiving the stop notification from the application process.
show more ...
|
1910:b9e844d85f21 | 02-Jul-2021 |
Oisin Canty |
Ruby: process and thread lifecycle hooks.
This feature allows one to specify blocks of code that are called when certain lifecycle events occur. A user configures a "hooks" property on the app conf
Ruby: process and thread lifecycle hooks.
This feature allows one to specify blocks of code that are called when certain lifecycle events occur. A user configures a "hooks" property on the app configuration that points to a script. This script will be evaluated on boot and should contain blocks of code that will be called on specific events.
An example of configuration:
{ "type": "ruby", "processes": 2, "threads": 2, "user": "vagrant", "group": "vagrant", "script": "config.ru", "hooks": "hooks.rb", "working_directory": "/home/vagrant/unit/rbhooks", "environment": { "GEM_HOME": "/home/vagrant/.ruby" } }
An example of a valid "hooks.rb" file follows:
File.write("./hooks.#{Process.pid}", "hooks evaluated")
on_worker_boot do File.write("./worker_boot.#{Process.pid}", "worker booted") end
on_thread_boot do File.write("./thread_boot.#{Process.pid}.#{Thread.current.object_id}", "thread booted") end
on_thread_shutdown do File.write("./thread_shutdown.#{Process.pid}.#{Thread.current.object_id}", "thread shutdown") end
on_worker_shutdown do File.write("./worker_shutdown.#{Process.pid}", "worker shutdown") end
This closes issue #535 on GitHub.
show more ...
|
1909:d6a5090da2ea | 02-Jul-2021 |
Oisin Canty |
Fixing crash during IPv6 text address generation.
When the textual representation of an IPv6 nxt_sockaddr_t was being generated, a crash would occur if the address had a full IPv6 form:
f607:7403:1
Fixing crash during IPv6 text address generation.
When the textual representation of an IPv6 nxt_sockaddr_t was being generated, a crash would occur if the address had a full IPv6 form:
f607:7403:1e4b:6c66:33b2:843f:2517:da27
This was caused by a variable that tracks the location of a collapsed group ("::") that was not set to a sane default. When the address was generated, a group would be inserted when it was not necessary, thus causing an overflow.
This closes #481 issue on GitHub.
show more ...
|
1908:de0c32ff1931 | 01-Jul-2021 |
Max Romanov |
Deduplicating code for closing fds in nxt_port_send_msg_t. |
1907:75ddb2d89b42 | 01-Jul-2021 |
Max Romanov |
Fixing memory and descriptor leakage in case of port send failure.
In rare cases, when the destination process had finished running but no notification of this was received yet, send could fail with
Fixing memory and descriptor leakage in case of port send failure.
In rare cases, when the destination process had finished running but no notification of this was received yet, send could fail with an error, and the send message structure with file descriptors could leak.
The leakage was periodically reproduced by respawn tests on FreeBSD 12.
show more ...
|
1905:d66a5f909497 | 01-Jul-2021 |
Oisin Canty |
Ruby: improved logging of exceptions without backtraces.
If an exception was raised with a backtrace of zero length, the nxt_ruby_exception_log() routine would return without logging the exception c
Ruby: improved logging of exceptions without backtraces.
If an exception was raised with a backtrace of zero length, the nxt_ruby_exception_log() routine would return without logging the exception class and message. This commit fixes the issue.
show more ...
|
1904:da7a4754f8bd | 01-Jul-2021 |
Max Romanov |
Fixing multiple TLS-enabled listeners initialization.
Because of the incorrect 'last' field assignment, multiple listeners with a TLS certificate did not initialize properly, which caused a router c
Fixing multiple TLS-enabled listeners initialization.
Because of the incorrect 'last' field assignment, multiple listeners with a TLS certificate did not initialize properly, which caused a router crash while establishing a connection.
Test with multiple TLS listeners added.
The issue was introduced in the c548e46fe516 commit.
This closes #561 issue on GitHub.
show more ...
|
1903:f17827e75e25 | 24-May-2021 |
Zhidao HONG |
Router: split nxt_http_return_conf_t from nxt_http_action_t.
No functional changes. |
1898:7158c417a711 | 15-Jun-2021 |
Max Romanov |
Node.js: improving and test packaging.
The patch removes the "files" section from package.json to avoid future issues with missing files. For package testing purposes, 'npm pack' is used instead of
Node.js: improving and test packaging.
The patch removes the "files" section from package.json to avoid future issues with missing files. For package testing purposes, 'npm pack' is used instead of plain 'tar' to simulate packaging more accurately.
show more ...
|
1897:7dccbd380eb1 | 02-Jun-2021 |
Max Romanov |
Node.js: packaging new loader.js and loader.mjs.
The files loader.js and loader.mjs (introduced in f85b85094541 and 3c551b9721df) were added to the packaged files list. |
Revision tags: 1.24.0-1, 1.24.0 |
|
1885:09b857a2cca9 | 26-May-2021 |
Andrey Suvorov |
Enabling SSL_CTX configuration by using SSL_CONF_cmd().
To perform various configuration operations on SSL_CTX, OpenSSL provides SSL_CONF_cmd(). Specifically, to configure ciphers for a listener, "
Enabling SSL_CTX configuration by using SSL_CONF_cmd().
To perform various configuration operations on SSL_CTX, OpenSSL provides SSL_CONF_cmd(). Specifically, to configure ciphers for a listener, "CipherString" and "Ciphersuites" file commands are used: https://www.openssl.org/docs/man1.1.1/man3/SSL_CONF_cmd.html
This feature can be configured in the "tls/conf_commands" section.
show more ...
|
1884:4645a43bc248 | 26-May-2021 |
Andrey Suvorov |
Fixing crash during TLS connection shutdown.
A crash was caused by an incorrect timer handler nxt_h1p_idle_timeout() if SSL_shutdown() returned SSL_ERROR_WANT_READ/SSL_ERROR_WANT_WRITE.
The flag SS
Fixing crash during TLS connection shutdown.
A crash was caused by an incorrect timer handler nxt_h1p_idle_timeout() if SSL_shutdown() returned SSL_ERROR_WANT_READ/SSL_ERROR_WANT_WRITE.
The flag SSL_RECEIVED_SHUTDOWN is used to avoid getting SSL_ERROR_WANT_READ, so the server won't wait for a close notification from a client.
For SSL_ERROR_WANT_WRITE, a correct timer handler is set up.
show more ...
|
1883:b075f32408a1 | 26-May-2021 |
Oisin Canty |
Static: handled unknown MIME types when MIME-filtering active. |
1882:65e7dcdd7be4 | 26-May-2021 |
Oisin Canty |
MIME: added PHP. |
1881:46d367c43ded | 25-May-2021 |
Max Romanov |
Fixing racing condition on listen socket close in router (v2).
This patch fixes a possible race between the nxt_router_conf_wait() and nxt_router_listen_socket_release() function calls and improves
Fixing racing condition on listen socket close in router (v2).
This patch fixes a possible race between the nxt_router_conf_wait() and nxt_router_listen_socket_release() function calls and improves the 7f1b2eaa2d58 commit fix.
show more ...
|
1879:fb89cf8544e7 | 25-May-2021 |
Oisin Canty |
Configuration: generalized application "targets" validation. |
1876:f85b85094541 | 24-May-2021 |
Oisin Canty |
Node.js: renamed "require_shim" to "loader". |
1874:3d76ec426540 | 21-May-2021 |
Valentin Bartenev |
PHP: adopted "file_handle" to Zend API changes in 8.1.0-dev.
This fixes building module with the development version of PHP after the change: https://github.com/php/php-src/commit/c732ab400af92c54ee
PHP: adopted "file_handle" to Zend API changes in 8.1.0-dev.
This fixes building module with the development version of PHP after the change: https://github.com/php/php-src/commit/c732ab400af92c54eee47c487a56009f1d79dd5d
show more ...
|
1872:9f8df8b810e0 | 20-May-2021 |
Oisin Canty |
Python: support for multiple targets. |