yup correct for centos 6.x use addons/python27_install.sh addon at https://community.centminmod.com/posts/17469/ better asked in appropriate thread at Beta Branch - Centmin Mod Backups - Attic Deduplication Backups | Centmin Mod Community
Nginx 1.9.10 Security Fixes Updated both Centmin Mod 123.08stable and 123.09beta01 builds to default to Nginx 1.9.10 for security fixes CVE-2016-0742, CVE-2016-0746, and CVE-2016-0747. You can update your existing Centmin Mod Nginx server via centmin.sh menu option 4. Code: -------------------------------------------------------- Centmin Mod 1.2.3-eva2000.08 - http://centminmod.com -------------------------------------------------------- Centmin Mod Menu -------------------------------------------------------- 1). Centmin Install 2). Add Nginx vhost domain 3). NSD setup domain name DNS 4). Nginx Upgrade / Downgrade 5). PHP Upgrade / Downgrade 6). XCache Re-install 7). APC Cache Re-install 8). XCache Install 9). APC Cache Install 10). Memcached Server Re-install 11). MariaDB 5.2/5.5 & 10.x Upgrade Sub-Menu 12). Zend OpCache Install/Re-install 13). Install ioping.sh vbtechsupport.com/1239/ 14). SELinux disable 15). Install/Reinstall ImagicK PHP Extension 16). Change SSHD Port Number 17). Multi-thread compression: pigz,pbzip2,lbzip2... 18). Suhosin PHP Extension install 19). Install FFMPEG and FFMPEG PHP Extension 20). NSD Re-install 21). Update - Nginx + PHP-FPM + Siege 22). Add Wordpress Nginx vhost + WP Super Cache 23). Update Centmin Mod Code Base 24). Exit -------------------------------------------------------- Enter option [ 1 - 24 ] 4 -------------------------------------------------------- Code: Do you want to run YUM install checks ? [y/n] This will increase your upgrade duration time wise. Check the change log centminmod.com/changelog.html to see if any Nginx or PHP related new additions which require checking YUM prequisites are met. If no new additions made, you can skip the YUM install check to speed up upgrade time. [y/n]: n ********************************************************************** * Nginx Update script - Included in Centmin Extras * Version: 1.2.3-eva2000.08 - Date: 30/04/2016 - Copyright 2011-2016 CentminMod.com ********************************************************************** This software comes with no warranty of any kind. You are free to use it for both personal and commercial use as licensed under the GPL. Nginx Upgrade - Would you like to continue? [y/n] y Install which version of Nginx? (version i.e. 1.9.10}): 1.9.10 To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below: Centmin Mod 1.2.3-eva2000.08 stable install & update thread Centmin Mod 123.09beta thread
centmin.sh menu option 22 updated move centmin.sh menu option 22 wordpress generated include files from /usr/local/nginx/conf to their own specific directories at /usr/local/nginx/conf/wpincludes/$vhostname directory as per discussion at https://community.centminmod.com/posts/24896/ example for centmin.sh menu option 22 wordpress install for newdomain2.com Code: ls -lah /usr/local/nginx/conf/wpincludes/newdomain2.com/ total 24K drwxr-x--- 2 root root 4.0K Jan 27 00:06 . drwxr-x--- 3 root root 4.0K Jan 27 00:06 .. -rw-r--r-- 1 root root 1009 Jan 27 00:06 rediscache_newdomain2.com.conf -rw-r--r-- 1 root root 1.2K Jan 27 00:06 wpcacheenabler_newdomain2.com.conf -rw-r--r-- 1 root root 1.1K Jan 27 00:06 wpsecure_newdomain2.com.conf -rw-r--r-- 1 root root 489 Jan 27 00:06 wpsupercache_newdomain2.com.conf vhost contents /usr/local/nginx/conf/conf.d/newdomain2.com.conf Code: # Centmin Mod Getting Started Guide # must read http://centminmod.com/getstarted.html # redirect from non-www to www # uncomment, save file and restart Nginx to enable # if unsure use return 302 before using return 301 #server { # listen 80; # server_name newdomain2.com; # return 301 $scheme://www.newdomain2.com$request_uri; # } server { server_name newdomain2.com www.newdomain2.com; # ngx_pagespeed & ngx_pagespeed handler #include /usr/local/nginx/conf/pagespeed.conf; #include /usr/local/nginx/conf/pagespeedhandler.conf; #include /usr/local/nginx/conf/pagespeedstatslog.conf; # limit_conn limit_per_ip 16; # ssi on; access_log /home/nginx/domains/newdomain2.com/log/access.log combined buffer=256k flush=60m; error_log /home/nginx/domains/newdomain2.com/log/error.log; root /home/nginx/domains/newdomain2.com/public; include /usr/local/nginx/conf/wpincludes/newdomain2.com/wpcacheenabler_newdomain2.com.conf; #include /usr/local/nginx/conf/wpincludes/newdomain2.com/wpsupercache_newdomain2.com.conf; # https://community.centminmod.com/posts/18828/ #include /usr/local/nginx/conf/wpincludes/newdomain2.com/rediscache_newdomain2.com.conf; location / { # Enables directory listings when index file not found #autoindex on; # for wordpress super cache plugin #try_files /wp-content/cache/supercache/$http_host/$cache_uri/index.html $uri $uri/ /index.php?q=$uri&$args; # for wp cache enabler plugin try_files $cache_enabler_uri $uri $uri/ $custom_subdir/index.php?$args; # Wordpress Permalinks #try_files $uri $uri/ /index.php?q=$uri&$args; # Nginx level redis Wordpress # https://community.centminmod.com/posts/18828/ #try_files $uri $uri/ /index.php?$args; } location ~* /(wp-login\.php) { limit_req zone=xwplogin burst=1 nodelay; #limit_conn xwpconlimit 30; #auth_basic "Private"; #auth_basic_user_file /home/nginx/domains/newdomain2.com/htpasswd_wplogin; include /usr/local/nginx/conf/php-wpsc.conf; # https://community.centminmod.com/posts/18828/ #include /usr/local/nginx/conf/php-rediscache.conf; } location ~* /(xmlrpc\.php) { limit_req zone=xwprpc burst=45 nodelay; #limit_conn xwpconlimit 30; include /usr/local/nginx/conf/php-wpsc.conf; # https://community.centminmod.com/posts/18828/ #include /usr/local/nginx/conf/php-rediscache.conf; } include /usr/local/nginx/conf/wpincludes/newdomain2.com/wpsecure_newdomain2.com.conf; include /usr/local/nginx/conf/php-wpsc.conf; # https://community.centminmod.com/posts/18828/ #include /usr/local/nginx/conf/php-rediscache.conf; include /usr/local/nginx/conf/staticfiles.conf; include /usr/local/nginx/conf/drop.conf; #include /usr/local/nginx/conf/errorpage.conf; include /usr/local/nginx/conf/vts_server.conf; }
Updated mine, Thanks! Using latest 09beta. Code: ]# nginx -V nginx version: nginx/1.9.10 built by clang 3.4.2 (tags/RELEASE_34/dot2-final) built with LibreSSL 2.2.5 TLS SNI support enabled configure arguments: --with-ld-opt='-lrt -ljemalloc -Wl,-z,relro' --with-cc-opt='-m64 -mtune=native -mfpmath=sse -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wno-sign-compare -Wno-string-plus-int -Wno-deprecated-declarations -Wno-unused-parameter -Wno-unused-const-variable -Wno-conditional-uninitialized -Wno-mismatched-tags -Wno-c++11-extensions -Wno-sometimes-uninitialized -Wno-parentheses-equality -Wno-tautological-compare -Wno-self-assign -Wno-deprecated-register -Wno-deprecated -Wno-invalid-source-encoding -Wno-pointer-sign -Wno-parentheses -Wno-enum-conversion' --sbin-path=/usr/local/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --with-http_ssl_module --with-http_v2_module --with-http_gzip_static_module --with-http_realip_module --with-openssl-opt=enable-tlsext --with-openssl=../libressl-2.2.5 --with-libatomic --with-pcre=../pcre-8.38 --with-pcre-jit
@eva2000 Just noticed a little mistake in the output of the default nginx version Code: Install which version of Nginx? (version i.e. 1.9.10}) Additional curly bracket on the end.
cheers @Matt @ModeltogTossen Also updated download routine for 123.09beta01 for LibreSSL download to geo location map to provided mirrors Getting OpenBSD - should speed up LibreSSL downloads commit Implement geo location mapping for LibreSSL downloads · centminmod/centminmod@7728f96 · GitHub
Re-enabled FFMPEG network support in centmin.sh menu option 19 installer for FFMPEG and FFMPEG PHP extension https://community.centminmod.com/posts/24965/
I got the compile to this state and all get havoc.. Code: creating libtool appending configuration tag "CXX" to libtool checking whether the ccache g++ linker (/bin/ld -m elf_x86_64) supports shared libraries... yes checking for ccache g++ option to produce PIC... checking if ccache g++ static flag works... yes checking if ccache g++ supports -c -o file.o... yes checking whether the ccache g++ linker (/bin/ld -m elf_x86_64) supports shared libraries... yes checking dynamic linker characteristics... GNU/Linux ld.so (cached) (cached) checking how to hardcode library paths into programs... unsupported configure: creating ./config.status config.status: creating config.h /bin/sh /svr-setup/ffmpeg-php-git/libtool --mode=compile ccache gcc -I. -I/svr-setup/ffmpeg-php-git -DPHP_ATOM_INC -I/svr-setup/ffmpeg-php-git/include -I/svr-setup/ffmpeg-php-git/main -I/svr-setup/ffmpeg-php-git -I/usr/local/include/php -I/usr/local/include/php/main -I/usr/local/include/php/TSRM -I/usr/local/include/php/Zend -I/usr/local/include/php/ext -I/usr/local/include/php/ext/date/lib -I/opt/ffmpeg/include -DHAVE_CONFIG_H -g -O2 -c /svr-setup/ffmpeg-php-git/ffmpeg-php.c -o ffmpeg-php.lo /bin/sh /svr-setup/ffmpeg-php-git/libtool --mode=compile ccache gcc -I. -I/svr-setup/ffmpeg-php-git -DPHP_ATOM_INC -I/svr-setup/ffmpeg-php-git/include -I/svr-setup/ffmpeg-php-git/main -I/svr-setup/ffmpeg-php-git -I/usr/local/include/php -I/usr/local/include/php/main -I/usr/local/include/php/TSRM -I/usr/local/include/php/Zend -I/usr/local/include/php/ext -I/usr/local/include/php/ext/date/lib -I/opt/ffmpeg/include -DHAVE_CONFIG_H -g -O2 -c /svr-setup/ffmpeg-php-git/ffmpeg_movie.c -o ffmpeg_movie.lo /bin/sh /svr-setup/ffmpeg-php-git/libtool --mode=compile ccache gcc -I. -I/svr-setup/ffmpeg-php-git -DPHP_ATOM_INC -I/svr-setup/ffmpeg-php-git/include -I/svr-setup/ffmpeg-php-git/main -I/svr-setup/ffmpeg-php-git -I/usr/local/include/php -I/usr/local/include/php/main -I/usr/local/include/php/TSRM -I/usr/local/include/php/Zend -I/usr/local/include/php/ext -I/usr/local/include/php/ext/date/lib -I/opt/ffmpeg/include -DHAVE_CONFIG_H -g -O2 -c /svr-setup/ffmpeg-php-git/ffmpeg_frame.c -o ffmpeg_frame.lo mkdir .libs ccache gcc -I. -I/svr-setup/ffmpeg-php-git -DPHP_ATOM_INC -I/svr-setup/ffmpeg-php-git/include -I/svr-setup/ffmpeg-php-git/main -I/svr-setup/ffmpeg-php-git -I/usr/local/include/php -I/usr/local/include/php/main -I/usr/local/include/php/TSRM -I/usr/local/include/php/Zend -I/usr/local/include/php/ext -I/usr/local/include/php/ext/date/lib -I/opt/ffmpeg/include -DHAVE_CONFIG_H -g -O2 -c /svr-setup/ffmpeg-php-git/ffmpeg_movie.c -fPIC -DPIC -o .libs/ffmpeg_movie.o ccache gcc -I. -I/svr-setup/ffmpeg-php-git -DPHP_ATOM_INC -I/svr-setup/ffmpeg-php-git/include -I/svr-setup/ffmpeg-php-git/main -I/svr-setup/ffmpeg-php-git -I/usr/local/include/php -I/usr/local/include/php/main -I/usr/local/include/php/TSRM -I/usr/local/include/php/Zend -I/usr/local/include/php/ext -I/usr/local/include/php/ext/date/lib -I/opt/ffmpeg/include -DHAVE_CONFIG_H -g -O2 -c /svr-setup/ffmpeg-php-git/ffmpeg-php.c -fPIC -DPIC -o .libs/ffmpeg-php.o /svr-setup/ffmpeg-php-git/ffmpeg_movie.c: In function ‘zim_ffmpeg_movie___construct’: /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:298:9: error: unknown type name ‘zend_rsrc_list_entry’ zend_rsrc_list_entry *le; ^ /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:307:9: warning: passing argument 2 of ‘zend_hash_find’ from incompatible pointer type [enabled by default] if (SUCCESS == zend_hash_find(&EG(persistent_list), hashkey, hashkey_length+1, (void**)&le)) { ^ In file included from /usr/local/include/php/Zend/zend.h:36:0, from /usr/local/include/php/main/php.h:35, from /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:36: /usr/local/include/php/Zend/zend_hash.h:154:30: note: expected ‘struct zend_string *’ but argument is of type ‘char *’ ZEND_API zval* ZEND_FASTCALL zend_hash_find(const HashTable *ht, zend_string *key); ^ /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:307:9: error: too many arguments to function ‘zend_hash_find’ if (SUCCESS == zend_hash_find(&EG(persistent_list), hashkey, hashkey_length+1, (void**)&le)) { ^ In file included from /usr/local/include/php/Zend/zend.h:36:0, from /usr/local/include/php/main/php.h:35, from /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:36: /usr/local/include/php/Zend/zend_hash.h:154:30: note: declared here ZEND_API zval* ZEND_FASTCALL zend_hash_find(const HashTable *ht, zend_string *key); ^ /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:310:13: warning: passing argument 1 of ‘zval_get_type’ from incompatible pointer type [enabled by default] if (Z_TYPE_P(le) != le_ffmpeg_pmovie) { ^ In file included from /usr/local/include/php/Zend/zend.h:31:0, from /usr/local/include/php/main/php.h:35, from /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:36: /usr/local/include/php/Zend/zend_types.h:326:38: note: expected ‘const struct zval *’ but argument is of type ‘int *’ static zend_always_inline zend_uchar zval_get_type(const zval* pz) { ^ /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:315:48: error: request for member ‘ptr’ in something not a structure or union ffmovie_ctx = (ff_movie_context*)le->ptr; ^ /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:319:61: warning: comparison between pointer and integer [enabled by default] if (zend_list_find(ffmovie_ctx->rsrc_id, &type) == ffmovie_ctx) { ^ /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:330:13: error: unknown type name ‘zend_rsrc_list_entry’ zend_rsrc_list_entry new_le; ^ /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:339:13: warning: passing argument 1 of ‘zval_get_type’ from incompatible pointer type [enabled by default] Z_TYPE(new_le) = le_ffmpeg_pmovie; ^ In file included from /usr/local/include/php/Zend/zend.h:31:0, from /usr/local/include/php/main/php.h:35, from /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:36: /usr/local/include/php/Zend/zend_types.h:326:38: note: expected ‘const struct zval *’ but argument is of type ‘int *’ static zend_always_inline zend_uchar zval_get_type(const zval* pz) { ^ /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:339:28: error: lvalue required as left operand of assignment Z_TYPE(new_le) = le_ffmpeg_pmovie; ^ /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:340:19: error: request for member ‘ptr’ in something not a structure or union new_le.ptr = ffmovie_ctx; ^ /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:344:29: error: macro "zend_hash_update" passed 6 arguments, but takes just 3 NULL)) { ^ /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:342:28: error: ‘zend_hash_update’ undeclared (first use in this function) if (FAILURE == zend_hash_update(&EG(persistent_list), hashkey, ^ /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:342:28: note: each undeclared identifier is reported only once for each function it appears in /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:367:5: warning: passing argument 4 of ‘add_property_resource_ex’ makes pointer from integer without a cast [enabled by default] add_property_resource(getThis(), "ffmpeg_movie", ffmovie_ctx->rsrc_id); ^ In file included from /usr/local/include/php/main/php.h:39:0, from /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:36: /usr/local/include/php/Zend/zend_API.h:453:14: note: expected ‘struct zend_resource *’ but argument is of type ‘long int’ ZEND_API int add_property_resource_ex(zval *arg, const char *key, size_t key_len, zend_resource *r); ^ /svr-setup/ffmpeg-php-git/ffmpeg_movie.c: At top level: /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:381:36: error: unknown type name ‘zend_rsrc_list_entry’ static void _php_free_ffmpeg_movie(zend_rsrc_list_entry *rsrc TSRMLS_DC) ^ /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:404:37: error: unknown type name ‘zend_rsrc_list_entry’ static void _php_free_ffmpeg_pmovie(zend_rsrc_list_entry *rsrc TSRMLS_DC) ^ /svr-setup/ffmpeg-php-git/ffmpeg_movie.c: In function ‘register_ffmpeg_movie_class’: /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:432:57: error: ‘_php_free_ffmpeg_movie’ undeclared (first use in this function) le_ffmpeg_movie = zend_register_list_destructors_ex(_php_free_ffmpeg_movie, ^ /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:436:13: error: ‘_php_free_ffmpeg_pmovie’ undeclared (first use in this function) _php_free_ffmpeg_pmovie, "ffmpeg_pmovie", module_number); ^ /svr-setup/ffmpeg-php-git/ffmpeg_movie.c: In function ‘php_get_dict_value’: /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:507:5: warning: passing argument 2 of ‘zend_hash_find’ from incompatible pointer type [enabled by default] GET_MOVIE_RESOURCE(ffmovie_ctx); ^ In file included from /usr/local/include/php/Zend/zend.h:36:0, from /usr/local/include/php/main/php.h:35, from /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:36: /usr/local/include/php/Zend/zend_hash.h:154:30: note: expected ‘struct zend_string *’ but argument is of type ‘char *’ ZEND_API zval* ZEND_FASTCALL zend_hash_find(const HashTable *ht, zend_string *key); ^ /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:507:5: error: too many arguments to function ‘zend_hash_find’ GET_MOVIE_RESOURCE(ffmovie_ctx); ^ In file included from /usr/local/include/php/Zend/zend.h:36:0, from /usr/local/include/php/main/php.h:35, from /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:36: /usr/local/include/php/Zend/zend_hash.h:154:30: note: declared here ZEND_API zval* ZEND_FASTCALL zend_hash_find(const HashTable *ht, zend_string *key); ^ /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:56:62: warning: comparison between pointer and integer [enabled by default] sizeof("ffmpeg_movie"), (void **)&_tmp_zval) == FAILURE) {\ ^ /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:507:5: note: in expansion of macro ‘GET_MOVIE_RESOURCE’ GET_MOVIE_RESOURCE(ffmovie_ctx); And alot more of those .. Updated branch to include your latest update on this - but still same stuff like above.. Have all delete/cleared the /opt/bin|ffmpeg|ffmpeg_sources and also the deleted the /svr-setup/ffmpeg-php-git before I tried again - with the very same issues. What is the best way from here to continue trying to fix this?
what version of PHP ? not sure if it works with PHP 7 you using 123.09beta01 branch ? which menu options you ran ?
Github & Gitlab Centmin Mod Repositories In light of current Github.com site downtime, I am posting more detailed info for Centmin Mod's Github and Gitlab backup Git repositories that Centmin Mod folks can use. Full details can be read in sticky thread in Git Commit forums Centmin Mod Git Repository Online Status | Centmin Mod Community Alot of Centmin Mod users and myself rely on the access to the Git hosted Centmin Mod code with currently 60-80 new Centmin Mod installations per day ! So it's always good to have backups for everything and Gitlab serves as a backup to Github for Centmin Mod.
addons/customcurl.sh updated Updated optional addons/customcurl.sh to Curl 7.47 outlined at https://community.centminmod.com/posts/25009/
Updated 123.09beta01 to backup Centmin Mod created cronjobs backup centmin mod setup cronjobs to cronjoblist files · centminmod/centminmod@d9a85b5 · GitHub
OpenSSL 1.0.2f & LibreSSL 2.2.6 Updates for Centmin Mod Nginx OpenSSL 1.0.2f is out Security - OpenSSL 1.0.2f & Updating Centmin Mod Nginx SSL Support LibreSSL 2.2.6 is out Security - LibreSSL 2.2.6 Security Fix Release | Centmin Mod Community Updated both Centmin Mod 123.08stable and 123.09beta01 builds for OpenSSL 1.0.2f and LibreSSL 2.2.6 release for Centmin Mod Nginx folks who may use OpenSSL 1.0.2 (123.08stable and higher default to using LibreSSL instead of OpenSSL, unless you use Phusion Passenger addon which reverts Centmin Mod Nginx back from LibreSSL to OpenSSL 1.0.2). Important Centmin Mod Nginx needs recompiling for using OpenSSL 1.0.2f or LibreSSL 2.2.6. To update Centmin Mod Nginx, read instructions here or below. http://openssl.org/news/secadv/20160128.txt CVE-2016-0701 - Red Hat Customer Portal CVE-2015-3197 - Red Hat Customer Portal To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below: Centmin Mod 1.2.3-eva2000.08 stable install & update thread Centmin Mod 123.09beta thread Upgrading Centmin Mod Code to Latest Version Upgrading Centmin Mod involves 2 parts. Upgrading the actual Centmin Mod code outlined at Upgrade Centmin Mod - CentminMod.com LEMP Nginx web stack for CentOS This is heart of Centmin Mod where the code is the engine that runs centmin.sh shell based menu and all the automation you're accustomed to. Upgrade software that Centmin Mod installed or manages. For this part following outline at Upgrade - How to upgrade Centmin Mod. In this case after updating Centmin Mod code, read instructions here and run centmin.sh menu option 4 to recompile Nginx which already has centmin.sh variable updated to 1.0.2f Code: OPENSSL_VERSION='1.0.2f' and Code: LIBRESSL_VERSION='2.2.6'
FYI, just updated 123.09beta01 with mirror checking routine for LibreSSL so if the mirror url doesn't have the LibreSSL version populated it will fall back to main download link. Example, My Virtualbox server located in Australia detected AU mirror but fellback to main USA download link as Australian mirror doesn't have the LibreSSL version Code: AU server detected Download libressl-2.2.6.tar.gz ... Initializing download: http://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.2.6.tar.gz File size: 2965531 bytes Opening output file libressl-2.2.6.tar.gz Starting download Connection 2 finished ] Connection 3 finished ] Connection 1 finished ] Connection 0 finished ] Downloaded 2.8 Megabyte in 4 seconds. (602.36 KB/s) Download done. libressl-2.2.6.tar.gz valid file.
Updated 123.09beta01 to add Cloudflare's chacha20_poly1305 patch for OpenSSL 1.0.2f Beta Branch - update OpenSSL 1.0.2 Cloudflare patch for chacha20_poly1305 support | Centmin Mod Community Nginx defaults to LibreSSL 2.2 which already has native chacha20_poly1305 support. However, if you set LIBRESSL_SWITCH='n' in centmin.sh, then Nginx uses OpenSSL 1.0.2f which out of box doesn't support chacha20_poly1305 unless you also set CLOUDFLARE_PATCHSSL='y' before centmin.sh menu option 4 recompile of Nginx. Using Nginx with OpenSSL 1.0.2f patched with Cloudflare chacha20 patch requires these 2 settings set preferably in persistent config file at /etc/centminmod/custom_config.inc or in centmin.sh alterations. Code: CLOUDFLARE_PATCHSSL='y' LIBRESSL_SWITCH='n' Note Centmin Mod Nginx will always default to LibreSSL as opposed to using OpenSSL 1.0.2 where possible as outlined at SSL - Nginx and LibreSSL alternative to OpenSSL | Centmin Mod Community You can see the supported SSL cipher list for OpenSSL 1.0.2f patched vs LibreSSL 2.2.6 vs system OpenSSL 1.0.1e here https://community.centminmod.com/posts/25069/
Updated 123.09beta01 with new security headers in default nginx http and https vhost templates Beta Branch - update nginx vhost templates. Commented out by default. Also updated the official vhost generator with same template additions for these additional security headers at centminmod.com/vhost.php.
centmin.sh menu option 22 update Updated both Centmin Mod 123.08stable and 123.09beta01 build's centmin.sh menu option 22 wordpress auto installer routine in inc/wpsetup.inc to pre-whitelist common and popular Wordpress plugins. Update wpsecure_${vhostname}.conf include file to whilelist most popular and common wordpress plugins which need to run php within plugins directory otherwise their php execution will be blocked by centmin.sh menu option 22's wordpress auto installer /usr/local/nginx/conf/wpincludes/wpsecure_${vhostname}.conf generated includes file Centmin Mod 123.09beta01 commit update inc/wpsetup.inc pre-whitelist wp plugins · centminmod/centminmod@4137e28 · GitHub Centmin Mod 123.08stable commit update inc/wpsetup.inc pre-whitelist wp plugins · centminmod/centminmod@e92e823 · GitHub To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below: Centmin Mod 1.2.3-eva2000.08 stable install & update thread Centmin Mod 123.09beta thread
Moved innodbio.sh testing to own thread at Beta Branch - Help test innodbio.sh for MySQL Tuning | Centmin Mod Community