> > > Here's a simpler nginx.conf to reproduce. Note that the leak goes > > away if you don't use Connection: Upgrade.
It also goes away if you use the 'sophisticated' example from https://nginx.org/en/docs/http/websocket.html and the client does not request an upgrade. Obviously, it returns if an upgrade is requested. I am not really sure whether this is an openbsd/libressl issue then. Let me test this against a linux box. With best regards, Tobias
