Want more timely Centmin Mod News Updates?
Become a Member

LibreSSL April 2018: LibreSSL 2.7.2 Released

Discussion in 'CentOS, Redhat & Oracle Linux News' started by eva2000, Apr 5, 2018.

  1. eva2000

    eva2000 Administrator Staff Member

    May 24, 2014
    Brisbane, Australia
    Local Time:
    7:53 AM
    Nginx 1.19.x
    MariaDB 5.5/10.x

    Centmin Mod + LibreSSL 2.7.2

    LibreSSL 2.7.2 is now latest stable release https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.7.2-relnotes.txt:

    Centmin Mod 123.08stable and 123.09beta01 Github branches corresponding to Centmin Mod 1.2.3-eva2000.08 stable and Centmin Mod 1.2.3-eva2000.09 beta01 have been updated to LibreSSL 2.7.2. Centmin Mod 123.09beta01 uses OpenSSL 1.1.0* branch by default for Nginx compiles now though. For existing folks, follow below update instructions.

    Centmin Mod Nginx Update LibreSSL

    For Centmin Mod 1.2.3-eva2000.08 beta03, .08 stable and higher you can update to LibreSSL 2.7.2 via 2 steps.

    Step 1. Updating centmin.sh LIBRESSL_VERSION variable to 2.7.2. Best way is to use centmin.sh menu option 23 submenu option 2 for auto updating Centmin Mod code as outlined at centminmod.com/upgrade.html and at https://community.centminmod.com/threads/new-08-beta-menu-option-updating-centmin-mod-via-git.3084/. That will auto update centmin.sh to latest version which already has LIBRESSL_VERSION='2.7.2' set.

    Check your updated Centmin Mod centmin.sh to see if LIBRESSL_VERSION='2.7.2' is set. If not set and you do not have centmin.sh menu option 23 submenu option 1 for git environment setup, then you need to manually update and edit in your persistent config file (create it if it doesn't exist) at /etc/centminmod/custom_config.inc and add to it. Note Centmin Mod 123.09beta01 defaults to Nginx compiles with OpenSSL now for better performance so is set to LIBRESSL_SWITCH='n'. Enabling below LIBRESSL_SWITCH='y' will switch you to Nginx with LibreSSL:

    Code (Text):
    # LibreSSL
    LIBRESSL_SWITCH='y'        # if set to 'y' it overrides OpenSSL as the default static compiled option for Nginx server
    LIBRESSL_VERSION='2.7.2'   # Use this version of LibreSSL http://www.libressl.org/

    Step 2. Then select centmin.sh menu option #4 to upgrade/downgrade Nginx recompile Nginx and specify latest Nginx version i.e. 1.13.11+ or newer.

    For example after recompile Nginx version output will show built with LibreSSL 2.7.2

    For 123.09 beta01

    LibreSSL 2.7.2

    You'll find latest LibreSSL 2.7.2 on official site.