Get the most out of your Centmin Mod LEMP stack
Become a Member

Nginx [PATCH] Nginx server header removal

Discussion in 'Nginx and PHP-FPM news & discussions' started by buik, Jun 13, 2018.

Tags:
  1. buik

    buik “The best traveler is one without a camera.”

    1,917
    500
    83
    Apr 29, 2016
    Flanders
    Ratings:
    +1,605
    Local Time:
    6:32 AM
    Yup both features are supported. It is OpenSSL+quic.
    No OCSP stapling is BoringSSL land and I almost forgot but you are right.
    BoringSSL doesn't do duel cert either.

     
  2. buik

    buik “The best traveler is one without a camera.”

    1,917
    500
    83
    Apr 29, 2016
    Flanders
    Ratings:
    +1,605
    Local Time:
    6:32 AM
  3. buik

    buik “The best traveler is one without a camera.”

    1,917
    500
    83
    Apr 29, 2016
    Flanders
    Ratings:
    +1,605
    Local Time:
    6:32 AM
    Tested the patch with the latest Nginx + quic code: changeset 4eff17414a43:55b38514729b. As of today Nginx + quic is based on nginx-1.21.7 + the quic code.
     
  4. rdan

    rdan Well-Known Member

    5,426
    1,389
    113
    May 25, 2014
    Ratings:
    +2,172
    Local Time:
    1:32 PM
    Mainline
    10.2
    Thanks a lot.
    I guess I use the wrong patch file?
    Using Nginx 1.21.6 on Ubuntu.

    Code:
    --2022-02-23 11:58:11--  https://gitlab.com/buik/nginx/-/raw/master/nginx-remove-server-header-quic.patch
    Resolving gitlab.com (gitlab.com)... 172.65.251.78, 2606:4700:90:0:f22e:fbec:5bed:a9b9
    Connecting to gitlab.com (gitlab.com)|172.65.251.78|:443... connected.
    HTTP request sent, awaiting response... 200 OK
    Length: 5925 (5.8K) [text/plain]
    Saving to: ‘ngx-head-remove.patch’
    
    ngx-head-remove.patch             100%[============================================================>]   5.79K  --.-KB/s    in 0s     
    
    2022-02-23 11:58:12 (54.9 MB/s) - ‘ngx-head-remove.patch’ saved [5925/5925]
    
    patching file src/core/nginx.h
    Hunk #1 FAILED at 8.
    1 out of 1 hunk FAILED -- saving rejects to file src/core/nginx.h.rej
    patching file src/http/ngx_http_header_filter_module.c
    patching file src/http/ngx_http_special_response.c
    patching file src/http/v2/ngx_http_v2_filter_module.c
    can't find file to patch at input line 134
    Perhaps you used the wrong -p or --strip option?
    The text leading up to this was:
    --------------------------
    |diff --git a/src/http/v3/ngx_http_v3_filter_module.c b/src/http/v3/ngx_http_v3_filter_module.c
    |index f835f8e..d1f10a9 100644
    |--- a/src/http/v3/ngx_http_v3_filter_module.c
    |+++ b/src/http/v3/ngx_http_v3_filter_module.c
    --------------------------
    
    
     
  5. rdan

    rdan Well-Known Member

    5,426
    1,389
    113
    May 25, 2014
    Ratings:
    +2,172
    Local Time:
    1:32 PM
    Mainline
    10.2
  6. buik

    buik “The best traveler is one without a camera.”

    1,917
    500
    83
    Apr 29, 2016
    Flanders
    Ratings:
    +1,605
    Local Time:
    6:32 AM
    Good to see that you found the solution yourself!:)
    Ubuntu only uses the stable releases.
    The quic code is not yet integrated into the official Ubuntu code of Nginx.
     
  7. buik

    buik “The best traveler is one without a camera.”

    1,917
    500
    83
    Apr 29, 2016
    Flanders
    Ratings:
    +1,605
    Local Time:
    6:32 AM
  8. buik

    buik “The best traveler is one without a camera.”

    1,917
    500
    83
    Apr 29, 2016
    Flanders
    Ratings:
    +1,605
    Local Time:
    6:32 AM
  9. buik

    buik “The best traveler is one without a camera.”

    1,917
    500
    83
    Apr 29, 2016
    Flanders
    Ratings:
    +1,605
    Local Time:
    6:32 AM
  10. buik

    buik “The best traveler is one without a camera.”

    1,917
    500
    83
    Apr 29, 2016
    Flanders
    Ratings:
    +1,605
    Local Time:
    6:32 AM