Welcome to Centmin Mod Community
Become a Member

Beta Branch add CRYPTO_DEVTOOLSETGCC variable support for LibreSSL or OpenSSL com…

Discussion in 'Centmin Mod Github Commits' started by eva2000, Jan 19, 2017.

  1. eva2000

    eva2000 Administrator Staff Member

    29,720
    6,711
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,015
    Local Time:
    7:57 PM
    Nginx 1.13.x
    MariaDB 5.5
    add CRYPTO_DEVTOOLSETGCC variable support for LibreSSL or OpenSSL compiles

    In 123.09beta01, add new variable CRYPTO_DEVTOOLSETGCC='n' which defaults to disabled. When set to CRYPTO_DEVTOOLSETGCC='y' in persistent config file /etc/centminmod/custom_config.inc and you recompile nginx via centmin.sh menu option 4 then LibreSSL (default used with LIBRESSL_SWITCH='y') or OpenSSL (alternate when LIBRESSL_SWITCH='n') source compile will use newer Intel GCC 5.2 via devtoolset-4 for CentOS 6/7 if it detects Intel processors.

    Continue reading...

    123.09beta01 branch
     
  2. eva2000

    eva2000 Administrator Staff Member

    29,720
    6,711
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,015
    Local Time:
    7:57 PM
    Nginx 1.13.x
    MariaDB 5.5
    LibreSSL 2.4.4 build with LIBRESSL_SWITCH='y' default and CRYPTO_DEVTOOLSETGCC='y' in persistent config file /etc/centminmod/custom_config.inc to use GCC 5.3.1

    Code (Text):
    gcc (GCC) 5.3.1 20160406 (Red Hat 5.3.1-6)
    Copyright (C) 2015 Free Software Foundation, Inc.
    This is free software; see the source for copying conditions.  There is NO
    warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
    
      -m64                                  [enabled]
      -m80387                               [enabled]
      -m96bit-long-double                   [enabled]
      -maes                                 [enabled]
      -malign-stringops                     [enabled]
      -march=                               ivybridge
      -mavx                                 [enabled]
      -mcx16                                [enabled]
      -mfancy-math-387                      [enabled]
      -mfentry                              [enabled]
      -mfp-ret-in-387                       [enabled]
      -mfpmath=                             387
      -mfxsr                                [enabled]
      -mglibc                               [enabled]
      -mhard-float                          [enabled]
      -mieee-fp                             [enabled]
      -mlong-double-80                      [enabled]
      -mmmx                                 [enabled]
      -mpclmul                              [enabled]
      -mpopcnt                              [enabled]
      -mpush-args                           [enabled]
      -mrdrnd                               [enabled]
      -mred-zone                            [enabled]
      -msahf                                [enabled]
      -msse                                 [enabled]
      -msse2                                [enabled]
      -msse3                                [enabled]
      -msse4                                [enabled]
      -msse4.1                              [enabled]
      -msse4.2                              [enabled]
      -mssse3                               [enabled]
      -mstackrealign                        [enabled]
      -mtls-direct-seg-refs                 [enabled]
      -mtune-ctrl=                
      -mtune=                               ivybridge
      -mxsave                               [enabled]
      Valid arguments to -mfpmath=:
    checking build system type... x86_64-pc-linux-gnu
    checking host system type... x86_64-pc-linux-gnu
    checking for a BSD-compatible install... /bin/install -c
    checking whether build environment is sane... yes
    checking for a thread-safe mkdir -p... /bin/mkdir -p
    checking for gawk... gawk
    checking whether make sets $(MAKE)... yes
    checking whether make supports nested variables... yes
    checking whether make supports nested variables... (cached) yes
    checking for gcc... ccache /opt/rh/devtoolset-4/root/usr/bin/gcc
    checking whether the C compiler works... yes
    checking for C compiler default output file name... a.out
    checking for suffix of executables... 
    checking whether we are cross compiling... no
    checking for suffix of object files... o
    checking whether we are using the GNU C compiler... yes
    checking whether ccache /opt/rh/devtoolset-4/root/usr/bin/gcc accepts -g... yes
    checking for ccache /opt/rh/devtoolset-4/root/usr/bin/gcc option to accept ISO C89... none needed
    checking whether ccache /opt/rh/devtoolset-4/root/usr/bin/gcc understands -c and -o together... yes
    checking for style of include used by make... GNU
    checking dependency style of ccache /opt/rh/devtoolset-4/root/usr/bin/gcc... gcc3
    checking for ccache /opt/rh/devtoolset-4/root/usr/bin/gcc option to accept ISO C99... none needed
    checking for ccache /opt/rh/devtoolset-4/root/usr/bin/gcc option to accept ISO Standard C... (cached) none needed
    checking how to print strings... printf
    checking for a sed that does not truncate output... /bin/sed
    checking for grep that handles long lines and -e... /bin/grep
    checking for egrep... /bin/grep -E
    checking for fgrep... /bin/grep -F
    checking for ld used by ccache /opt/rh/devtoolset-4/root/usr/bin/gcc... /opt/rh/devtoolset-4/root/usr/libexec/gcc/x86_64-redhat-linux/5.3.1/ld
    checking if the linker (/opt/rh/devtoolset-4/root/usr/libexec/gcc/x86_64-redhat-linux/5.3.1/ld) is GNU ld... yes
    checking for BSD- or MS-compatible name lister (nm)... /opt/rh/devtoolset-4/root/usr/bin/nm -B
    checking the name lister (/opt/rh/devtoolset-4/root/usr/bin/nm -B) interface... BSD nm
    checking whether ln -s works... yes
    checking the maximum length of command line arguments... 1572864
    checking whether the shell understands some XSI constructs... yes
    checking whether the shell understands "+="... yes
    checking how to convert x86_64-pc-linux-gnu file names to x86_64-pc-linux-gnu format... func_convert_file_noop
    checking how to convert x86_64-pc-linux-gnu file names to toolchain format... func_convert_file_noop
    checking for /opt/rh/devtoolset-4/root/usr/libexec/gcc/x86_64-redhat-linux/5.3.1/ld option to reload object files... -r
    checking for objdump... objdump
    checking how to recognize dependent libraries... pass_all
    checking for dlltool... no
    checking how to associate runtime and link libraries... printf %s\n
    checking for ar... ar
    checking for archiver @FILE support... @
    checking for strip... strip
    checking for ranlib... ranlib
    checking command to parse /opt/rh/devtoolset-4/root/usr/bin/nm -B output from ccache /opt/rh/devtoolset-4/root/usr/bin/gcc object... ok
    checking for sysroot... no
    checking for mt... no
    checking if : is a manifest tool... no
    checking how to run the C preprocessor... ccache /opt/rh/devtoolset-4/root/usr/bin/gcc -E
    checking for ANSI C header files... yes
    checking for sys/types.h... yes
    checking for sys/stat.h... yes
    checking for stdlib.h... yes
    checking for string.h... yes
    checking for memory.h... yes
    checking for strings.h... yes
    checking for inttypes.h... yes
    checking for stdint.h... yes
    checking for unistd.h... yes
    checking for dlfcn.h... yes
    checking for objdir... .libs
    checking if ccache /opt/rh/devtoolset-4/root/usr/bin/gcc supports -fno-rtti -fno-exceptions... no
    checking for ccache /opt/rh/devtoolset-4/root/usr/bin/gcc option to produce PIC... -fPIC -DPIC
    checking if ccache /opt/rh/devtoolset-4/root/usr/bin/gcc PIC flag -fPIC -DPIC works... yes
    checking if ccache /opt/rh/devtoolset-4/root/usr/bin/gcc static flag -static works... no
    checking if ccache /opt/rh/devtoolset-4/root/usr/bin/gcc supports -c -o file.o... yes
    checking if ccache /opt/rh/devtoolset-4/root/usr/bin/gcc supports -c -o file.o... (cached) yes
    checking whether the ccache /opt/rh/devtoolset-4/root/usr/bin/gcc linker (/opt/rh/devtoolset-4/root/usr/libexec/gcc/x86_64-redhat-linux/5.3.1/ld -m elf_x86_64) supports shared libraries... yes
    checking whether -lc should be explicitly linked in... no
    checking dynamic linker characteristics... GNU/Linux ld.so
    checking how to hardcode library paths into programs... immediate
    checking whether stripping libraries is possible... yes
    checking if libtool supports shared libraries... yes
    checking whether to build shared libraries... yes
    checking whether to build static libraries... yes
    checking if ccache /opt/rh/devtoolset-4/root/usr/bin/gcc supports "-fno-strict-overflow"... yes
    checking if ccache /opt/rh/devtoolset-4/root/usr/bin/gcc supports "-D_FORTIFY_SOURCE=2"... no
    checking if /opt/rh/devtoolset-4/root/usr/libexec/gcc/x86_64-redhat-linux/5.3.1/ld -m elf_x86_64 supports "-Wl,-z,relro"... yes
    checking if /opt/rh/devtoolset-4/root/usr/libexec/gcc/x86_64-redhat-linux/5.3.1/ld -m elf_x86_64 supports "-Wl,-z,now"... yes
    checking if ccache /opt/rh/devtoolset-4/root/usr/bin/gcc supports "-fstack-protector-strong"... yes
    checking whether AS supports .note.GNU-stack... yes
    checking dependency style of ccache /opt/rh/devtoolset-4/root/usr/bin/gcc... gcc3
    checking if compiling with clang... no
    checking whether CC supports -Wno-pointer-sign... yes
    checking for symlink... yes
    checking for funopen... no
    checking err.h usability... yes
    checking err.h presence... yes
    checking for err.h... yes
    checking readpassphrase.h usability... no
    checking readpassphrase.h presence... no
    checking for readpassphrase.h... no
    checking for asprintf... yes
    checking for inet_pton... yes
    checking for memmem... yes
    checking for readpassphrase... no
    checking for reallocarray... no
    checking for strlcat... no
    checking for strlcpy... no
    checking for strndup... yes
    checking for strnlen... yes
    checking for strsep... yes
    checking for strtonum... no
    checking for timegm... yes
    checking for _mkgmtime... no
    checking for accept4... yes
    checking for pledge... no
    checking for poll... yes
    checking for arc4random... no
    checking for arc4random_buf... no
    checking for arc4random_uniform... no
    checking for explicit_bzero... no
    checking for getauxval... yes
    checking for getentropy... no
    checking for timingsafe_bcmp... no
    checking for timingsafe_memcmp... no
    checking for getauxval... (cached) yes
    checking for library containing clock_gettime... none required
    checking for clock_gettime... yes
    checking for library containing dl_iterate_phdr... none required
    checking for dl_iterate_phdr... yes
    checking whether va_copy exists... yes
    checking whether __va_copy exists... yes
    checking for library containing b64_ntop... no
    checking for library containing __b64_ntop... -lresolv
    checking for b64_ntop... yes
    checking if BSWAP4 builds without __STRICT_ALIGNMENT... no
    checking if .gnu.warning accepts long strings... yes
    checking size of time_t... 8
    checking that generated files are newer than configure... done
    configure: creating ./config.status
    config.status: creating Makefile
    config.status: creating include/Makefile
    config.status: creating include/openssl/Makefile
    config.status: creating crypto/Makefile
    config.status: creating ssl/Makefile
    config.status: creating tls/Makefile
    config.status: creating tests/Makefile
    config.status: creating apps/Makefile
    config.status: creating apps/openssl/Makefile
    config.status: creating apps/nc/Makefile
    config.status: creating man/Makefile
    config.status: creating libcrypto.pc
    config.status: creating libssl.pc
    config.status: creating libtls.pc
    config.status: creating openssl.pc
    config.status: executing depfiles commands
    config.status: executing libtool commands
    Making all in crypto
    


    OpenSSL 1.0.2j build with LIBRESSL_SWITCH='n' and CRYPTO_DEVTOOLSETGCC='y' in persistent config file /etc/centminmod/custom_config.inc to use GCC 5.3.1

    Code (Text):
    gcc (GCC) 5.3.1 20160406 (Red Hat 5.3.1-6)
    Copyright (C) 2015 Free Software Foundation, Inc.
    This is free software; see the source for copying conditions.  There is NO
    warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
    
      -m64                                  [enabled]
      -m80387                               [enabled]
      -m96bit-long-double                   [enabled]
      -maes                                 [enabled]
      -malign-stringops                     [enabled]
      -march=                               ivybridge
      -mavx                                 [enabled]
      -mcx16                                [enabled]
      -mfancy-math-387                      [enabled]
      -mfentry                              [enabled]
      -mfp-ret-in-387                       [enabled]
      -mfpmath=                             387
      -mfxsr                                [enabled]
      -mglibc                               [enabled]
      -mhard-float                          [enabled]
      -mieee-fp                             [enabled]
      -mlong-double-80                      [enabled]
      -mmmx                                 [enabled]
      -mpclmul                              [enabled]
      -mpopcnt                              [enabled]
      -mpush-args                           [enabled]
      -mrdrnd                               [enabled]
      -mred-zone                            [enabled]
      -msahf                                [enabled]
      -msse                                 [enabled]
      -msse2                                [enabled]
      -msse3                                [enabled]
      -msse4                                [enabled]
      -msse4.1                              [enabled]
      -msse4.2                              [enabled]
      -mssse3                               [enabled]
      -mstackrealign                        [enabled]
      -mtls-direct-seg-refs                 [enabled]
      -mtune-ctrl=                
      -mtune=                               ivybridge
      -mxsave                               [enabled]
      Valid arguments to -mfpmath=:
    Operating system: x86_64-whatever-linux2
    Configuring for linux-x86_64
    Configuring for linux-x86_64
        no-gmp          [default]  OPENSSL_NO_GMP (skip dir)
        no-jpake        [experimental] OPENSSL_NO_JPAKE (skip dir)
        no-krb5         [krb5-flavor not specified] OPENSSL_NO_KRB5
        no-libunbound   [experimental] OPENSSL_NO_LIBUNBOUND (skip dir)
        no-md2          [default]  OPENSSL_NO_MD2 (skip dir)
        no-rc5          [default]  OPENSSL_NO_RC5 (skip dir)
        no-rfc3779      [default]  OPENSSL_NO_RFC3779 (skip dir)
        no-sctp         [default]  OPENSSL_NO_SCTP (skip dir)
        no-ssl-trace    [default]  OPENSSL_NO_SSL_TRACE (skip dir)
        no-ssl2         [default]  OPENSSL_NO_SSL2 (skip dir)
        no-store        [experimental] OPENSSL_NO_STORE (skip dir)
        no-unit-test    [default]  OPENSSL_NO_UNIT_TEST (skip dir)
        no-weak-ssl-ciphers [default]  OPENSSL_NO_WEAK_SSL_CIPHERS (skip dir)
        no-zlib         [default] 
        no-zlib-dynamic [default] 
    IsMK1MF=0
    CC            =ccache /opt/rh/devtoolset-4/root/usr/bin/gcc
    CFLAG         =-fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -Wa,--noexecstack -m64 -DL_ENDIAN -O3 -Wall -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DRC4_ASM -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DCHAPOLY_ASM
    EX_LIBS       =-ldl
    CPUID_OBJ     =x86_64cpuid.o
    BN_ASM        =x86_64-gcc.o x86_64-mont.o x86_64-mont5.o x86_64-gf2m.o rsaz_exp.o rsaz-x86_64.o rsaz-avx2.o
    EC_ASM        =ecp_nistz256.o ecp_nistz256-x86_64.o
    DES_ENC       =des_enc.o fcrypt_b.o
    AES_ENC       =aes-x86_64.o vpaes-x86_64.o bsaes-x86_64.o aesni-x86_64.o aesni-sha1-x86_64.o aesni-sha256-x86_64.o aesni-mb-x86_64.o
    BF_ENC        =bf_enc.o
    CAST_ENC      =c_enc.o
    RC4_ENC       =rc4-x86_64.o rc4-md5-x86_64.o
    RC5_ENC       =rc5_enc.o
    MD5_OBJ_ASM   =md5-x86_64.o
    SHA1_OBJ_ASM  =sha1-x86_64.o sha256-x86_64.o sha512-x86_64.o sha1-mb-x86_64.o sha256-mb-x86_64.o
    RMD160_OBJ_ASM=
    CMLL_ENC      =cmll-x86_64.o cmll_misc.o
    MODES_OBJ     =ghash-x86_64.o aesni-gcm-x86_64.o
    CHAPOLY_ASM   =chacha20_poly1305_x86_64.o poly1305_x86_64.o chacha20_x86_64.o
    ENGINES_OBJ   =
    PROCESSOR     =
    RANLIB        =/opt/rh/devtoolset-4/root/usr/bin/ranlib
    ARFLAGS       =
    PERL          =/bin/perl
    SIXTY_FOUR_BIT_LONG mode
    DES_UNROLL used
    DES_INT used
    
     
    • Like Like x 1
  3. eva2000

    eva2000 Administrator Staff Member

    29,720
    6,711
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,015
    Local Time:
    7:57 PM
    Nginx 1.13.x
    MariaDB 5.5
    Difference when enabled doesn't seem much right now for my testing, hence disabled by default. But i don't have access to the newer Intel Xeon E3/E5 v4/v5 processors to test. If you use E3-12xx v5 or E5-16xx v4 or E5-26xx v4 maybe more useful
     
    • Like Like x 1
  4. Sunka

    Sunka Active Member

    910
    238
    43
    Oct 31, 2015
    Rijeka, Croatia
    Ratings:
    +385
    Local Time:
    11:57 AM
    Nginx 1.13.3
    MariaDB 10.1.24
    I have this: Intel(R) Xeon(R) CPU E5-2687W v4 @ 3.00GHz
    So maybe it will be useful
    Added CRYPTO_DEVTOOLSETGCC='y' into file.
    Will recompile nginx tonight after update php and mariadb

    I also have this:
    NGINX_DEVTOOLSETGCC='y'
    CLANG='n'

    And nginx is with LibreSSL
     
    • Like Like x 1
  5. RoldanLT

    RoldanLT Well-Known Member

    3,875
    946
    113
    May 25, 2014
    Phillipines
    Ratings:
    +1,290
    Local Time:
    5:57 PM
    1.11
    10.2
    I just enabled this also.
     
    • Like Like x 1
  6. RoldanLT

    RoldanLT Well-Known Member

    3,875
    946
    113
    May 25, 2014
    Phillipines
    Ratings:
    +1,290
    Local Time:
    5:57 PM
    1.11
    10.2
    Maybe this helps a bit :)
    upload_2017-1-27_3-37-52.png