Beta Branch add CRYPTO_DEVTOOLSETGCC variable support for LibreSSL or OpenSSL com…

add CRYPTO_DEVTOOLSETGCC variable support for LibreSSL or OpenSSL compiles

In 123.09beta01, add new variable CRYPTO_DEVTOOLSETGCC='n' which defaults to disabled. When set to CRYPTO_DEVTOOLSETGCC='y' in persistent config file /etc/centminmod/custom_config.inc and you recompile nginx via centmin.sh menu option 4 then LibreSSL (default used with LIBRESSL_SWITCH='y') or OpenSSL (alternate when LIBRESSL_SWITCH='n') source compile will use newer Intel GCC 5.2 via devtoolset-4 for CentOS 6/7 if it detects Intel processors.

---

Continue reading...

123.09beta01 branch

• Branch: https://github.com/centminmod/centminmod/tree/123.09beta01
• Commit History: https://github.com/centminmod/centminmod/commits/123.09beta01

 

LibreSSL 2.4.4 build with LIBRESSL_SWITCH='y' default and CRYPTO_DEVTOOLSETGCC='y' in persistent config file /etc/centminmod/custom_config.inc to use GCC 5.3.1

Code (Text):

gcc (GCC) 5.3.1 20160406 (Red Hat 5.3.1-6)
Copyright (C) 2015 Free Software Foundation, Inc.
This is free software; see the source for copying conditions.  There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

  -m64                                  [enabled]
  -m80387                               [enabled]
  -m96bit-long-double                   [enabled]
  -maes                                 [enabled]
  -malign-stringops                     [enabled]
  -march=                               ivybridge
  -mavx                                 [enabled]
  -mcx16                                [enabled]
  -mfancy-math-387                      [enabled]
  -mfentry                              [enabled]
  -mfp-ret-in-387                       [enabled]
  -mfpmath=                             387
  -mfxsr                                [enabled]
  -mglibc                               [enabled]
  -mhard-float                          [enabled]
  -mieee-fp                             [enabled]
  -mlong-double-80                      [enabled]
  -mmmx                                 [enabled]
  -mpclmul                              [enabled]
  -mpopcnt                              [enabled]
  -mpush-args                           [enabled]
  -mrdrnd                               [enabled]
  -mred-zone                            [enabled]
  -msahf                                [enabled]
  -msse                                 [enabled]
  -msse2                                [enabled]
  -msse3                                [enabled]
  -msse4                                [enabled]
  -msse4.1                              [enabled]
  -msse4.2                              [enabled]
  -mssse3                               [enabled]
  -mstackrealign                        [enabled]
  -mtls-direct-seg-refs                 [enabled]
  -mtune-ctrl=                
  -mtune=                               ivybridge
  -mxsave                               [enabled]
  Valid arguments to -mfpmath=:
checking build system type... x86_64-pc-linux-gnu
checking host system type... x86_64-pc-linux-gnu
checking for a BSD-compatible install... /bin/install -c
checking whether build environment is sane... yes
checking for a thread-safe mkdir -p... /bin/mkdir -p
checking for gawk... gawk
checking whether make sets $(MAKE)... yes
checking whether make supports nested variables... yes
checking whether make supports nested variables... (cached) yes
checking for gcc... ccache /opt/rh/devtoolset-4/root/usr/bin/gcc
checking whether the C compiler works... yes
checking for C compiler default output file name... a.out
checking for suffix of executables... 
checking whether we are cross compiling... no
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether ccache /opt/rh/devtoolset-4/root/usr/bin/gcc accepts -g... yes
checking for ccache /opt/rh/devtoolset-4/root/usr/bin/gcc option to accept ISO C89... none needed
checking whether ccache /opt/rh/devtoolset-4/root/usr/bin/gcc understands -c and -o together... yes
checking for style of include used by make... GNU
checking dependency style of ccache /opt/rh/devtoolset-4/root/usr/bin/gcc... gcc3
checking for ccache /opt/rh/devtoolset-4/root/usr/bin/gcc option to accept ISO C99... none needed
checking for ccache /opt/rh/devtoolset-4/root/usr/bin/gcc option to accept ISO Standard C... (cached) none needed
checking how to print strings... printf
checking for a sed that does not truncate output... /bin/sed
checking for grep that handles long lines and -e... /bin/grep
checking for egrep... /bin/grep -E
checking for fgrep... /bin/grep -F
checking for ld used by ccache /opt/rh/devtoolset-4/root/usr/bin/gcc... /opt/rh/devtoolset-4/root/usr/libexec/gcc/x86_64-redhat-linux/5.3.1/ld
checking if the linker (/opt/rh/devtoolset-4/root/usr/libexec/gcc/x86_64-redhat-linux/5.3.1/ld) is GNU ld... yes
checking for BSD- or MS-compatible name lister (nm)... /opt/rh/devtoolset-4/root/usr/bin/nm -B
checking the name lister (/opt/rh/devtoolset-4/root/usr/bin/nm -B) interface... BSD nm
checking whether ln -s works... yes
checking the maximum length of command line arguments... 1572864
checking whether the shell understands some XSI constructs... yes
checking whether the shell understands "+="... yes
checking how to convert x86_64-pc-linux-gnu file names to x86_64-pc-linux-gnu format... func_convert_file_noop
checking how to convert x86_64-pc-linux-gnu file names to toolchain format... func_convert_file_noop
checking for /opt/rh/devtoolset-4/root/usr/libexec/gcc/x86_64-redhat-linux/5.3.1/ld option to reload object files... -r
checking for objdump... objdump
checking how to recognize dependent libraries... pass_all
checking for dlltool... no
checking how to associate runtime and link libraries... printf %s\n
checking for ar... ar
checking for archiver @FILE support... @
checking for strip... strip
checking for ranlib... ranlib
checking command to parse /opt/rh/devtoolset-4/root/usr/bin/nm -B output from ccache /opt/rh/devtoolset-4/root/usr/bin/gcc object... ok
checking for sysroot... no
checking for mt... no
checking if : is a manifest tool... no
checking how to run the C preprocessor... ccache /opt/rh/devtoolset-4/root/usr/bin/gcc -E
checking for ANSI C header files... yes
checking for sys/types.h... yes
checking for sys/stat.h... yes
checking for stdlib.h... yes
checking for string.h... yes
checking for memory.h... yes
checking for strings.h... yes
checking for inttypes.h... yes
checking for stdint.h... yes
checking for unistd.h... yes
checking for dlfcn.h... yes
checking for objdir... .libs
checking if ccache /opt/rh/devtoolset-4/root/usr/bin/gcc supports -fno-rtti -fno-exceptions... no
checking for ccache /opt/rh/devtoolset-4/root/usr/bin/gcc option to produce PIC... -fPIC -DPIC
checking if ccache /opt/rh/devtoolset-4/root/usr/bin/gcc PIC flag -fPIC -DPIC works... yes
checking if ccache /opt/rh/devtoolset-4/root/usr/bin/gcc static flag -static works... no
checking if ccache /opt/rh/devtoolset-4/root/usr/bin/gcc supports -c -o file.o... yes
checking if ccache /opt/rh/devtoolset-4/root/usr/bin/gcc supports -c -o file.o... (cached) yes
checking whether the ccache /opt/rh/devtoolset-4/root/usr/bin/gcc linker (/opt/rh/devtoolset-4/root/usr/libexec/gcc/x86_64-redhat-linux/5.3.1/ld -m elf_x86_64) supports shared libraries... yes
checking whether -lc should be explicitly linked in... no
checking dynamic linker characteristics... GNU/Linux ld.so
checking how to hardcode library paths into programs... immediate
checking whether stripping libraries is possible... yes
checking if libtool supports shared libraries... yes
checking whether to build shared libraries... yes
checking whether to build static libraries... yes
checking if ccache /opt/rh/devtoolset-4/root/usr/bin/gcc supports "-fno-strict-overflow"... yes
checking if ccache /opt/rh/devtoolset-4/root/usr/bin/gcc supports "-D_FORTIFY_SOURCE=2"... no
checking if /opt/rh/devtoolset-4/root/usr/libexec/gcc/x86_64-redhat-linux/5.3.1/ld -m elf_x86_64 supports "-Wl,-z,relro"... yes
checking if /opt/rh/devtoolset-4/root/usr/libexec/gcc/x86_64-redhat-linux/5.3.1/ld -m elf_x86_64 supports "-Wl,-z,now"... yes
checking if ccache /opt/rh/devtoolset-4/root/usr/bin/gcc supports "-fstack-protector-strong"... yes
checking whether AS supports .note.GNU-stack... yes
checking dependency style of ccache /opt/rh/devtoolset-4/root/usr/bin/gcc... gcc3
checking if compiling with clang... no
checking whether CC supports -Wno-pointer-sign... yes
checking for symlink... yes
checking for funopen... no
checking err.h usability... yes
checking err.h presence... yes
checking for err.h... yes
checking readpassphrase.h usability... no
checking readpassphrase.h presence... no
checking for readpassphrase.h... no
checking for asprintf... yes
checking for inet_pton... yes
checking for memmem... yes
checking for readpassphrase... no
checking for reallocarray... no
checking for strlcat... no
checking for strlcpy... no
checking for strndup... yes
checking for strnlen... yes
checking for strsep... yes
checking for strtonum... no
checking for timegm... yes
checking for _mkgmtime... no
checking for accept4... yes
checking for pledge... no
checking for poll... yes
checking for arc4random... no
checking for arc4random_buf... no
checking for arc4random_uniform... no
checking for explicit_bzero... no
checking for getauxval... yes
checking for getentropy... no
checking for timingsafe_bcmp... no
checking for timingsafe_memcmp... no
checking for getauxval... (cached) yes
checking for library containing clock_gettime... none required
checking for clock_gettime... yes
checking for library containing dl_iterate_phdr... none required
checking for dl_iterate_phdr... yes
checking whether va_copy exists... yes
checking whether __va_copy exists... yes
checking for library containing b64_ntop... no
checking for library containing __b64_ntop... -lresolv
checking for b64_ntop... yes
checking if BSWAP4 builds without __STRICT_ALIGNMENT... no
checking if .gnu.warning accepts long strings... yes
checking size of time_t... 8
checking that generated files are newer than configure... done
configure: creating ./config.status
config.status: creating Makefile
config.status: creating include/Makefile
config.status: creating include/openssl/Makefile
config.status: creating crypto/Makefile
config.status: creating ssl/Makefile
config.status: creating tls/Makefile
config.status: creating tests/Makefile
config.status: creating apps/Makefile
config.status: creating apps/openssl/Makefile
config.status: creating apps/nc/Makefile
config.status: creating man/Makefile
config.status: creating libcrypto.pc
config.status: creating libssl.pc
config.status: creating libtls.pc
config.status: creating openssl.pc
config.status: executing depfiles commands
config.status: executing libtool commands
Making all in crypto

OpenSSL 1.0.2j build with LIBRESSL_SWITCH='n' and CRYPTO_DEVTOOLSETGCC='y' in persistent config file /etc/centminmod/custom_config.inc to use GCC 5.3.1

Code (Text):

gcc (GCC) 5.3.1 20160406 (Red Hat 5.3.1-6)
Copyright (C) 2015 Free Software Foundation, Inc.
This is free software; see the source for copying conditions.  There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

  -m64                                  [enabled]
  -m80387                               [enabled]
  -m96bit-long-double                   [enabled]
  -maes                                 [enabled]
  -malign-stringops                     [enabled]
  -march=                               ivybridge
  -mavx                                 [enabled]
  -mcx16                                [enabled]
  -mfancy-math-387                      [enabled]
  -mfentry                              [enabled]
  -mfp-ret-in-387                       [enabled]
  -mfpmath=                             387
  -mfxsr                                [enabled]
  -mglibc                               [enabled]
  -mhard-float                          [enabled]
  -mieee-fp                             [enabled]
  -mlong-double-80                      [enabled]
  -mmmx                                 [enabled]
  -mpclmul                              [enabled]
  -mpopcnt                              [enabled]
  -mpush-args                           [enabled]
  -mrdrnd                               [enabled]
  -mred-zone                            [enabled]
  -msahf                                [enabled]
  -msse                                 [enabled]
  -msse2                                [enabled]
  -msse3                                [enabled]
  -msse4                                [enabled]
  -msse4.1                              [enabled]
  -msse4.2                              [enabled]
  -mssse3                               [enabled]
  -mstackrealign                        [enabled]
  -mtls-direct-seg-refs                 [enabled]
  -mtune-ctrl=                
  -mtune=                               ivybridge
  -mxsave                               [enabled]
  Valid arguments to -mfpmath=:
Operating system: x86_64-whatever-linux2
Configuring for linux-x86_64
Configuring for linux-x86_64
    no-gmp          [default]  OPENSSL_NO_GMP (skip dir)
    no-jpake        [experimental] OPENSSL_NO_JPAKE (skip dir)
    no-krb5         [krb5-flavor not specified] OPENSSL_NO_KRB5
    no-libunbound   [experimental] OPENSSL_NO_LIBUNBOUND (skip dir)
    no-md2          [default]  OPENSSL_NO_MD2 (skip dir)
    no-rc5          [default]  OPENSSL_NO_RC5 (skip dir)
    no-rfc3779      [default]  OPENSSL_NO_RFC3779 (skip dir)
    no-sctp         [default]  OPENSSL_NO_SCTP (skip dir)
    no-ssl-trace    [default]  OPENSSL_NO_SSL_TRACE (skip dir)
    no-ssl2         [default]  OPENSSL_NO_SSL2 (skip dir)
    no-store        [experimental] OPENSSL_NO_STORE (skip dir)
    no-unit-test    [default]  OPENSSL_NO_UNIT_TEST (skip dir)
    no-weak-ssl-ciphers [default]  OPENSSL_NO_WEAK_SSL_CIPHERS (skip dir)
    no-zlib         [default] 
    no-zlib-dynamic [default] 
IsMK1MF=0
CC            =ccache /opt/rh/devtoolset-4/root/usr/bin/gcc
CFLAG         =-fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -Wa,--noexecstack -m64 -DL_ENDIAN -O3 -Wall -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DRC4_ASM -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DCHAPOLY_ASM
EX_LIBS       =-ldl
CPUID_OBJ     =x86_64cpuid.o
BN_ASM        =x86_64-gcc.o x86_64-mont.o x86_64-mont5.o x86_64-gf2m.o rsaz_exp.o rsaz-x86_64.o rsaz-avx2.o
EC_ASM        =ecp_nistz256.o ecp_nistz256-x86_64.o
DES_ENC       =des_enc.o fcrypt_b.o
AES_ENC       =aes-x86_64.o vpaes-x86_64.o bsaes-x86_64.o aesni-x86_64.o aesni-sha1-x86_64.o aesni-sha256-x86_64.o aesni-mb-x86_64.o
BF_ENC        =bf_enc.o
CAST_ENC      =c_enc.o
RC4_ENC       =rc4-x86_64.o rc4-md5-x86_64.o
RC5_ENC       =rc5_enc.o
MD5_OBJ_ASM   =md5-x86_64.o
SHA1_OBJ_ASM  =sha1-x86_64.o sha256-x86_64.o sha512-x86_64.o sha1-mb-x86_64.o sha256-mb-x86_64.o
RMD160_OBJ_ASM=
CMLL_ENC      =cmll-x86_64.o cmll_misc.o
MODES_OBJ     =ghash-x86_64.o aesni-gcm-x86_64.o
CHAPOLY_ASM   =chacha20_poly1305_x86_64.o poly1305_x86_64.o chacha20_x86_64.o
ENGINES_OBJ   =
PROCESSOR     =
RANLIB        =/opt/rh/devtoolset-4/root/usr/bin/ranlib
ARFLAGS       =
PERL          =/bin/perl
SIXTY_FOUR_BIT_LONG mode
DES_UNROLL used
DES_INT used

 

Difference when enabled doesn't seem much right now for my testing, hence disabled by default. But i don't have access to the newer Intel Xeon E3/E5 v4/v5 processors to test. If you use E3-12xx v5 or E5-16xx v4 or E5-26xx v4 maybe more useful