Beta Branch add OPENSSL_VERSIONFALLBACK variable in 123.09beta01

eva2000 · Jan 6, 2017

add OPENSSL_VERSIONFALLBACK variable in 123.09beta01

When lua nginx module is enabled via ORESTY_LUANGINX='y', auto fallback to defined OpenSSL version in OPENSSL_VERSIONFALLBACK variable which currently defaults to 1.0.2j. This is when trying to use OPENSSL_VERSION 1.1.x branch which lua nginx module doesn't support currently and would cause nginx compiles to fail when using OpenSSL 1.1.x branch.

Continue reading...

123.09beta01 branch

Branch: https://github.com/centminmod/centminmod/tree/123.09beta01

Commit History: https://github.com/centminmod/centminmod/commits/123.09beta01

eva2000 · Jan 6, 2017

With persistent config file /etc/centminmod/custom_config.inc set prior to centmin.sh menu option 4 nginx recompile
Code (Text):
NGXDYNAMIC_NGXPAGESPEED='y'
NGINX_PAGESPEED='y'

LIBRESSL_SWITCH='n'
OPENSSL_VERSION='1.1.0c'
nginx -V
nginx version: nginx/1.11.8
built by gcc 4.8.5 20150623 (Red Hat 4.8.5-11) (GCC)
built with OpenSSL 1.1.0c 10 Nov 2016
TLS SNI support enabled
configure arguments: --with-ld-opt='-ljemalloc -Wl,-z,relro -Wl,-rpath,/usr/local/lib' --with-cc-opt='-m64 -march=native -g -O3 -fstack-protector-strong --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2' --sbin-path=/usr/local/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --with-http_stub_status_module --with-http_secure_link_module --add-module=../nginx-module-vts --with-libatomic --with-http_gzip_static_module --add-dynamic-module=../ngx_pagespeed-1.12.34.2-beta --with-http_sub_module --with-http_addition_module --with-http_image_filter_module=dynamic --with-http_geoip_module --with-stream_geoip_module --with-stream_realip_module --with-stream_ssl_preread_module --with-threads --with-stream=dynamic --with-stream_ssl_module --with-http_realip_module --add-dynamic-module=../ngx-fancyindex-0.4.0 --add-module=../ngx_cache_purge-2.3 --add-module=../ngx_devel_kit-0.3.0 --add-module=../set-misc-nginx-module-0.31 --add-module=../echo-nginx-module-0.60 --add-module=../redis2-nginx-module-0.13 --add-module=../ngx_http_redis-0.3.7 --add-module=../memc-nginx-module-0.17 --add-module=../srcache-nginx-module-0.31 --add-module=../headers-more-nginx-module-0.32 --with-pcre=../pcre-8.39 --with-pcre-jit --with-http_ssl_module --with-http_v2_module --with-openssl=../openssl-1.1.0c
Click to expand...

With persistent config file /etc/centminmod/custom_config.inc set prior to centmin.sh menu option 4 nginx recompile to enable lua nginx module to test fallback OPENSSL_VERSIONFALLBACK='1.0.2j' set in centmin.sh. Should compile nginx with 1.0.2j fallback version despite setting OPENSSL_VERSION='1.1.0c'.
Code (Text):
NGXDYNAMIC_NGXPAGESPEED='y'
NGINX_PAGESPEED='y'

LIBRESSL_SWITCH='n'
OPENSSL_VERSION='1.1.0c'

NGXDYNAMIC_LUA='y'
ORESTY_LUANGINX='y'
nginx -V
nginx version: nginx/1.11.8
built by gcc 4.8.5 20150623 (Red Hat 4.8.5-11) (GCC)
built with OpenSSL 1.0.2j 26 Sep 2016
TLS SNI support enabled
configure arguments: --with-ld-opt='-ljemalloc -lpcre -Wl,-z,relro -Wl,-rpath,/usr/local/lib' --with-cc-opt='-m64 -march=native -g -O3 -fstack-protector-strong --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2' --sbin-path=/usr/local/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --with-http_stub_status_module --with-http_secure_link_module --add-module=../nginx-module-vts --with-libatomic --with-http_gzip_static_module --add-dynamic-module=../ngx_pagespeed-1.12.34.2-beta --with-http_sub_module --with-http_addition_module --with-http_image_filter_module=dynamic --with-http_geoip_module --with-stream_geoip_module --with-stream_realip_module --with-stream_ssl_preread_module --with-threads --with-stream=dynamic --with-stream_ssl_module --with-http_realip_module --add-dynamic-module=../ngx-fancyindex-0.4.0 --add-module=../ngx_cache_purge-2.3 --add-module=../ngx_devel_kit-0.3.0 --add-module=../set-misc-nginx-module-0.31 --add-module=../echo-nginx-module-0.60 --add-module=../redis2-nginx-module-0.13 --add-module=../ngx_http_redis-0.3.7 --add-dynamic-module=../lua-nginx-module-0.10.7 --add-module=../memc-nginx-module-0.17 --add-module=../srcache-nginx-module-0.31 --add-module=../headers-more-nginx-module-0.32 --with-pcre=../pcre-8.39 --with-pcre-jit --with-http_ssl_module --with-http_v2_module --with-openssl=../openssl-1.0.2j
Click to expand...

Now I feel more comfortable with maybe defaulting to OpenSSL 1.1.x branch i.e. 1.1.0c for OpenSSL version in 123.09beta01 just in case folks enable lua nginx module

Log in / Register

Forums

Get the most out of your Centmin Mod LEMP stack

Beta Branch add OPENSSL_VERSIONFALLBACK variable in 123.09beta01

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

.

Log in / Register

Useful Searches

Get the most out of your Centmin Mod LEMP stack

Beta Branch add OPENSSL_VERSIONFALLBACK variable in 123.09beta01

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

.