Install Centmin Mod 1.2.3-eva2000.08 how to install & update

Updated both Centmin Mod 123.08stable and 123.09beta01 builds for now disabled Nginx vhost traffic stats module temporarily so that centmin.sh variable defaults to NGINX_VHOSTSTATS=n. Posted an issue report on @vozlt's issue tracker at broken nginx 1.9.7 support ? · Issue #27 · vozlt/nginx-module-vts · GitHub too.

Edit: Actual work around fix found broken nginx 1.9.7 support ? · Issue #27 · vozlt/nginx-module-vts · GitHub so re-enabled NGINX_VHOSTSTATS=y

---

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

It is an issue i didn't have with Nginx 1.9.7 a few days ago so the Nginx vhost traffic stats latest November 20th commits might have broken something in terms of compatibility with Nginx 1.9.7

Code:

Fri Nov 20 23:28:44 UTC 2015
Success: Nginx make ok

make -f objs/Makefile install
make[1]: Entering directory `/svr-setup/nginx-1.9.7'
ccache /usr/bin/clang -ferror-limit=0 -c -I/usr/local/include/luajit-2.1  -pipe  -O -Wall -Wextra -Wpointer-arith -Wconditional-uninitialized -Wno-unused-parameter -Werror -g -m64 -mtune=native -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wno-deprecated-declarations -Wno-unused-parameter -Wno-unused-const-variable -Wno-conditional-uninitialized -Wno-mismatched-tags -Wno-c++11-extensions -Wno-sometimes-uninitialized -Wno-parentheses-equality -Wno-tautological-compare -Wno-self-assign -Wno-deprecated-register -Wno-deprecated -Wno-invalid-source-encoding -Wno-pointer-sign -Wno-parentheses -Wno-enum-conversion  -DNDK_SET_VAR -DNDK_UPSTREAM_LIST -DNDK_SET_VAR  -I src/core -I src/event -I src/event/modules -I src/os/unix -I ../ngx_pagespeed-1.9.32.10-beta/psol/include -I ../ngx_pagespeed-1.9.32.10-beta/psol/include/third_party/chromium/src -I ../ngx_pagespeed-1.9.32.10-beta/psol/include/third_party/google-sparsehash/src -I ../ngx_pagespeed-1.9.32.10-beta/psol/include/third_party/google-sparsehash/gen/arch/linux/x64/include -I ../ngx_pagespeed-1.9.32.10-beta/psol/include/third_party/protobuf/src -I ../ngx_pagespeed-1.9.32.10-beta/psol/include/third_party/re2/src -I ../ngx_pagespeed-1.9.32.10-beta/psol/include/out/Release/obj/gen -I ../ngx_pagespeed-1.9.32.10-beta/psol/include/out/Release/obj/gen/protoc_out/instaweb -I ../ngx_pagespeed-1.9.32.10-beta/psol/include/third_party/apr/src/include -I ../ngx_pagespeed-1.9.32.10-beta/psol/include/third_party/aprutil/src/include -I ../ngx_pagespeed-1.9.32.10-beta/psol/include/third_party/apr/gen/arch/linux/x64/include -I ../ngx_pagespeed-1.9.32.10-beta/psol/include/third_party/aprutil/gen/arch/linux/x64/include -I ../ngx_devel_kit-0.2.19/objs -I objs/addon/ndk -I /usr/local/include/luajit-2.1 -I ../lua-nginx-module-0.9.18/src/api -I ../nginx_upstream_check_module-0.3.0 -I ../pcre-8.37 -I ../libressl-2.2.4/.openssl/include -I objs -I src/http -I src/http/modules -I src/http/v2 -I ../ngx_devel_kit-0.2.19/src -I src/mail -I src/stream \
        -o objs/addon/src/ngx_http_vhost_traffic_status_module.o \
        ../nginx-module-vts/src/ngx_http_vhost_traffic_status_module.c
../nginx-module-vts/src/ngx_http_vhost_traffic_status_module.c:904:22: error: adding 'unsigned int' to a string does not append to the string [-Werror,-Wstring-plus-int]
    len = ngx_strlen(ngx_vhost_traffic_status_group_to_string(type));
          ~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
../nginx-module-vts/src/ngx_http_vhost_traffic_status_module.c:341:30: note: expanded from macro 'ngx_vhost_traffic_status_group_to_string'
    : "NO\0UA\0UG\0CC\0FG\0" + 3 * n                                           \
                             ^
src/core/ngx_string.h:61:51: note: expanded from macro 'ngx_strlen'
#define ngx_strlen(s)       strlen((const char *) s)
                                                  ^
../nginx-module-vts/src/ngx_http_vhost_traffic_status_module.c:904:22: note: use array indexing to silence this warning
../nginx-module-vts/src/ngx_http_vhost_traffic_status_module.c:341:30: note: expanded from macro 'ngx_vhost_traffic_status_group_to_string'
    : "NO\0UA\0UG\0CC\0FG\0" + 3 * n                                           \
                             ^
src/core/ngx_string.h:61:51: note: expanded from macro 'ngx_strlen'
#define ngx_strlen(s)       strlen((const char *) s)
                                                  ^
../nginx-module-vts/src/ngx_http_vhost_traffic_status_module.c:915:23: error: adding 'unsigned int' to a string does not append to the string [-Werror,-Wstring-plus-int]
    p = ngx_cpymem(p, ngx_vhost_traffic_status_group_to_string(type), len);
        ~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
../nginx-module-vts/src/ngx_http_vhost_traffic_status_module.c:341:30: note: expanded from macro 'ngx_vhost_traffic_status_group_to_string'
    : "NO\0UA\0UG\0CC\0FG\0" + 3 * n                                           \
                             ^
src/core/ngx_string.h:103:60: note: expanded from macro 'ngx_cpymem'
#define ngx_cpymem(dst, src, n)   (((u_char *) memcpy(dst, src, n)) + (n))
                                                           ^
../nginx-module-vts/src/ngx_http_vhost_traffic_status_module.c:915:23: note: use array indexing to silence this warning
../nginx-module-vts/src/ngx_http_vhost_traffic_status_module.c:341:30: note: expanded from macro 'ngx_vhost_traffic_status_group_to_string'
    : "NO\0UA\0UG\0CC\0FG\0" + 3 * n                                           \
                             ^
src/core/ngx_string.h:103:60: note: expanded from macro 'ngx_cpymem'
#define ngx_cpymem(dst, src, n)   (((u_char *) memcpy(dst, src, n)) + (n))
                                                           ^
2 errors generated.
make[1]: *** [objs/addon/src/ngx_http_vhost_traffic_status_module.o] Error 1
make[1]: Leaving directory `/svr-setup/nginx-1.9.7'
make: *** [install] Error 2

 

Updated both Centmin Mod 123.08stable and 123.09beta01 builds for fixing another nginx vhost traffic module bug workaround using clang compiler related broken nginx 1.9.7 support ? · Issue #27 · vozlt/nginx-module-vts · GitHub

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

 

PHP 7.0.0 GA Stable Support

Updated both Centmin Mod 123.08stable and 123.09beta01 builds to properly support downloading PHP 7.0.0 GA series source tarball files. Prior, when you entered PHP version 7.0.0 on centmin.sh menu option 5 for PHP upgrades, it would download from PHP 7 github based master dev branch. The update now changes that to download the official php.net hosted source tarball files. Example of centmin.sh menu option 5 upgrade to PHP 7.0.0 here.

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

 

Updated both Centmin Mod 123.08stable and 123.09beta01 builds with updated custom curl rpm version fix due to source rpms being renamed

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

 

PHP 7.0 + Zend OpCache & Huge Pages Support

Updated both Centmin Mod 123.08stable and 123.09beta01 builds for Zend OpCache Transparent Huge Pages support only if Centos 7 detected + kernel supports it (and redis server isn't installed) and specifically disable for Centos 6 due to PHP stalls and bugs when CentOS 6 has kernel level transparent huge pages support and PHP 7.0 is used with Zend Opcache. If you're using PHP 7.0, then update your Centmin Mod code as outlined in below threads and official upgrade page centminmod.com/upgrade.html and then recompile PHP via centmin.sh menu option 5.

• PHP7 fpm - stalls on Centos 6 (Page 1) — User support — Remi's RPM repository - Forum (@Matt Williams might have been caught by this on centos 6 ?)
• PHP 7 Opcache adds Huge Pages support for extra performance | _ck_ says...
• Huge Page usage in PHP 7

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

 

ngx_pagespeed 1.9.32.11-beta security update

Updated both Centmin Mod 123.08stable and 123.09beta01 builds to default to ngx_pagespeed 1.9.32.11-beta for security update. You can update Centmin Mod code via centmin.sh menu option 23 submenu option 1 and then 2 and then recompile Nginx via centmin.sh menu option 4 as outlined here.

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

 

Nginx LibreSSL 2.2.5 Update

Updated both Centmin Mod 123.08stable and 123.09beta01 builds for Nginx related LibreSSL security update from 2.2.4 to 2.2.5. Upgrade instructions are outlined at Security - LibreSSL 2.2.5 Released Security Fixes | Centmin Mod Community

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

 

Update CSF Firewall Whitelisted Ports

Updated both Centmin Mod 123.08stable and 123.09beta01 builds to remove at initial first time installation time some of the whitelisted TCP ports in CSF Firewall as they aren't really needed unless you are running remote servers (i.e. for 11211-11214 and 9000/9001 for memcached and php-fpm respectively). Updated Centmin Mod code doesn't automatically remove these for existing installs as some folks may indeed be running remote memcached or php-fpm server nodes. If you are not running such remote nodes, you can manually remove the ports in your existing server configurations by running these 4 commands below:

Code:

sed -i 's|2202,11211,11212,11213,11214,||g' /etc/csf/csf.conf
sed -i 's|9000,9001,||g' /etc/csf/csf.conf
sed -i 's|10000,10500,10501,||g' /etc/csf/csf.conf
csf -r

Nevertheless, memcached and php-fpm both only listen on 127.0.0.1 so are not available to the public anyway.

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

 

Updated for CentOS 7.2 Support

Updated both Centmin Mod 123.08stable and 123.09beta01 builds to account for newly released CentOS 7.2 version. This was a legacy message that was added at the time when started Centmin Mod development to ensure I tested new CentOS version releases before folks installed Centmin Mod.

Code:

-----------------------------------------------------
Detected CentOS version greater than > CentOS 7.1
CentOS 7.1 is the latest tested version for Centmin Mod
No guarantee 100% working install with your CentOS 7.2
-----------------------------------------------------
Do you still want to continue with install ? [y/n]:

But usually there isn't any problems within CentOS 6.x or 7.x same branch minor versions, so all Centmin Mod functions have accounted for new CentOS 6 and 7 minor versions with exception of this legacy message. So I've updated Centmin Mod branches to only display this message for fresh initial installs and NOT for existing Centmin Mod installations as well as set tested version number to 7.9 for now.

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

 

Transparent Huge Pages Dynamic Configuration

Updated both Centmin Mod 123.08stable and 123.09beta01 builds to integrated a new tools/hptweaks.sh script into inc/zendopcache_tweaks.inc. So PHP recompile via centmin.sh menu option 5, should trigger the detection and dynamic allocation for vm.nr_hugepages and max locked memory system limits but only for centos 7 with huge pages support for now (not centos 6)

• for 123.09beta01 update inc/zendopcache_tweaks.inc for 123.09beta01 · centminmod/centminmod@8e504ee · GitHub
• for 123.08stable add tools/hptweaks.sh for 123.08stable · centminmod/centminmod@76d037d · GitHub

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

 

Add PHP XSL Support for Magento Requirements

Updated both Centmin Mod 123.08stable and 123.09beta01 build to add support for PHP XSL module requirements for Magento. Also
add inc/php_extraopts.inc and PHP_EXTRAOPTS variable support which allows you to pass additional PHP configuration options to php configuration options in inc/php_configure.inc set PHP_EXTRAOPTS variable as long as the required libraries for specific php option already exist or are installed i.e. https://community.centminmod.com/posts/23608/.

Example in inc/php_extraopts.inc file contents below:

Code:

# allows you to pass additional PHP configuration options to
# php configuration options in inc/php_configure.inc as long as
# the required libraries for specific php option already exist
# or are installed i.e. https://community.centminmod.com/posts/23608/
PHP_EXTRAOPTS=" --with-xsl"

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

And then run centmin.sh menu option 5 to recompile your existing PHP version or upgraded PHP version to support PHP XSL

Disabling PHP_EXTRAOPTS

You can also disable PHP_EXTRAOPTS passed variables if you do not use PHP XSL module, via overriding the variable by using persistent config file you create yourself at /etc/centminmod/custom_config.inc and set in the persistent config file the variable as empty

Code:

PHP_EXTRAOPTS=""

Extending More PHP Configuration Options

Also you can extend your PHP configuration options as long as the required libraries for specific php option already exist or are installed i.e. https://community.centminmod.com/posts/23608/ by editing or creating yourself the /etc/centminmod/custom_config.inc and set in the persistent config file the variable's additional options. You'll have to read up on php.net official documentation to understand which PHP configuration option needs to be passed and what system libraries are needed to be installed prior. For example for PHP XSL module as outlined at PHP: Installing/Configuring - Manual needed --with-xsl passed and libxslt-devel yum package installed.

Code:

PHP_EXTRAOPTS=" --with-xsl"

 

Nginx 1.8 unsupported options

Nginx 1.9.9 is default installed version right now. Updated both Centmin Mod 123.08stable and 123.09beta01 build's inc/nginx_configure.inc and inc/nginx_upgrade.inc include files to account for some unsupported nginx options if someone decides to downgrade from Nginx 1.9 branch and install Nginx 1.8 branch. reuseport and HTTP/2 are not supported nor is nginx TCP streams in Nginx 1.8 branch.

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

 

Nginx 1.9.10 Security Fixes

Updated both Centmin Mod 123.08stable and 123.09beta01 builds to default to Nginx 1.9.10 for security fixes CVE-2016-0742, CVE-2016-0746, and CVE-2016-0747. You can update your existing Centmin Mod Nginx server via centmin.sh menu option 4.

Code:

--------------------------------------------------------
Centmin Mod 1.2.3-eva2000.08 - http://centminmod.com
--------------------------------------------------------
                   Centmin Mod Menu                  
--------------------------------------------------------
1).  Centmin Install
2).  Add Nginx vhost domain
3).  NSD setup domain name DNS
4).  Nginx Upgrade / Downgrade
5).  PHP Upgrade / Downgrade
6).  XCache Re-install
7).  APC Cache Re-install
8).  XCache Install
9).  APC Cache Install
10). Memcached Server Re-install
11). MariaDB 5.2/5.5 & 10.x Upgrade Sub-Menu
12). Zend OpCache Install/Re-install
13). Install ioping.sh vbtechsupport.com/1239/
14). SELinux disable
15). Install/Reinstall ImagicK PHP Extension
16). Change SSHD Port Number
17). Multi-thread compression: pigz,pbzip2,lbzip2...
18). Suhosin PHP Extension install
19). Install FFMPEG and FFMPEG PHP Extension
20). NSD Re-install
21). Update - Nginx + PHP-FPM + Siege
22). Add Wordpress Nginx vhost + WP Super Cache
23). Update Centmin Mod Code Base
24). Exit
--------------------------------------------------------
Enter option [ 1 - 24 ] 4
--------------------------------------------------------

Code:

Do you want to run YUM install checks ?  [y/n]

This will increase your upgrade duration time wise.
Check the change log centminmod.com/changelog.html
to see if any Nginx or PHP related new additions
which require checking YUM prequisites are met.
If no new additions made, you can skip the
YUM install check to speed up upgrade time.

[y/n]: n
**********************************************************************
* Nginx Update script - Included in Centmin Extras
* Version: 1.2.3-eva2000.08 - Date: 30/04/2016 - Copyright 2011-2016 CentminMod.com
**********************************************************************
This software comes with no warranty of any kind. You are free to use
it for both personal and commercial use as licensed under the GPL.
Nginx Upgrade - Would you like to continue? [y/n] y

Install which version of Nginx? (version i.e. 1.9.10}): 1.9.10

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

 

Github & Gitlab Centmin Mod Repositories

In light of current Github.com site downtime, I am posting more detailed info for Centmin Mod's Github and Gitlab backup Git repositories that Centmin Mod folks can use. Full details can be read in sticky thread in Git Commit forums Centmin Mod Git Repository Online Status

Alot of Centmin Mod users and myself rely on the access to the Git hosted Centmin Mod code with currently 60-80 new Centmin Mod installations per day ! So it's always good to have backups for everything and Gitlab serves as a backup to Github for Centmin Mod.

 

OpenSSL 1.0.2f & LibreSSL 2.2.6 Updates for Centmin Mod Nginx

• OpenSSL 1.0.2f is out Security - OpenSSL 1.0.2f & Updating Centmin Mod Nginx SSL Support
• LibreSSL 2.2.6 is out Security - LibreSSL 2.2.6 Security Fix Release | Centmin Mod Community

Updated both Centmin Mod 123.08stable and 123.09beta01 builds for OpenSSL 1.0.2f and LibreSSL 2.2.6 release for Centmin Mod Nginx folks who may use OpenSSL 1.0.2 (123.08stable and higher default to using LibreSSL instead of OpenSSL, unless you use Phusion Passenger addon which reverts Centmin Mod Nginx back from LibreSSL to OpenSSL 1.0.2).

Important

Centmin Mod Nginx needs recompiling for using OpenSSL 1.0.2f or LibreSSL 2.2.6. To update Centmin Mod Nginx, read instructions here or below.

http://openssl.org/news/secadv/20160128.txt

• CVE-2016-0701 - Red Hat Customer Portal
• CVE-2015-3197 - Red Hat Customer Portal

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

Upgrading Centmin Mod Code to Latest Version

Upgrading Centmin Mod involves 2 parts.

1. Upgrading the actual Centmin Mod code outlined at Upgrade Centmin Mod - CentminMod.com LEMP Nginx web stack for CentOS This is heart of Centmin Mod where the code is the engine that runs centmin.sh shell based menu and all the automation you're accustomed to.
2. Upgrade software that Centmin Mod installed or manages. For this part following outline at Upgrade - How to upgrade Centmin Mod. In this case after updating Centmin Mod code, read instructions here and run centmin.sh menu option 4 to recompile Nginx which already has centmin.sh variable updated to 1.0.2f
   Code:

   OPENSSL_VERSION='1.0.2f'

   and
   Code:

   LIBRESSL_VERSION='2.2.6'

 

centmin.sh menu option 22 update

Updated both Centmin Mod 123.08stable and 123.09beta01 build's centmin.sh menu option 22 wordpress auto installer routine in inc/wpsetup.inc to pre-whitelist common and popular Wordpress plugins.

Update wpsecure_${vhostname}.conf include file to whilelist most popular and common wordpress plugins which need to run php within plugins directory otherwise their php execution will be blocked by centmin.sh menu option 22's wordpress auto installer /usr/local/nginx/conf/wpincludes/wpsecure_${vhostname}.conf generated includes file

• Centmin Mod 123.09beta01 commit update inc/wpsetup.inc pre-whitelist wp plugins · centminmod/centminmod@4137e28 · GitHub
• Centmin Mod 123.08stable commit update inc/wpsetup.inc pre-whitelist wp plugins · centminmod/centminmod@e92e823 · GitHub

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

 

ngx_pagespeed 1.9.32.13-beta security update

Updated both Centmin Mod 123.08stable and 123.09beta01 builds to default to ngx_pagespeed 1.9.32.13-beta for security update. You can update Centmin Mod code via centmin.sh menu option 23 submenu option 1 and then 2 and then recompile Nginx via centmin.sh menu option 4 as outlined above.

Discussion thread at Nginx PageSpeed - ngx_pagespeed 1.9.32.13 beta security update ! | Centmin Mod Community

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

Disable ngx_pagespeed integration

If you do not use ngx_pagespeed and have not enabled it as per instructions outlined at centminmod.com/nginx_ngx_pagespeed.html, you can in fact totally remove ngx_pagespeed integration from Nginx server using steps outlined on official site Nginx PageSpeed - CentminMod.com LEMP Nginx web stack for CentOS and below:

The best way is to use persistent config file created or appended to at /etc/centminmod/custom_config.inc and add setting:

Code:

NGINX_PAGESPEED=n

Then run centmin.sh menu option 4 to recompile Nginx without ngx_pagespeed module integration.

 

Nginx 1.9.11 Dynamic Module Update & Compatibility

Updated both Centmin Mod 123.08stable and 123.09beta01 builds to default to Nginx 1.9.11 which has added Dynamic Nginx Module support. Only Centmin Mod 123.09beta has been updated with Dynamic Nginx Module routines to support Nginx 1.9.11. Centmin Mod 123.08stable hasn't been updated yet.

• Specifically, for Centmin Mod 123.08stable, ngx_pagespeed 1.9 branch and nginx lua modules have been temporarily disabled due to compatibility issues with Nginx 1.9.11's dynamic module features. You can read up on the issues discussed throughout the thread at Nginx - Nginx 1.9.11 next version with dynamic module support ! | Centmin Mod Community
• Centmin Mod 123.09beta01's ngx_pagespeed 1.9 build is also broken now, but ngx_pagespeed folks have a fix in ngx_pagespeed 1.10 branch via a patch so 123.09beta01 will get patched as it supports ngx_pagespeed 1.10's higher GCC requirements via a workaround.
• Unfortunately Centmin Mod 123.08stable does support the ngx_pagespeed 1.10 workarounds so is reason why it has been temporarily disabled for now.

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

 

Nginx 1.9.12 with OpenSSL defaults

Updated both Centmin Mod 123.08stable and 123.09beta01 builds to default to Nginx 1.9.12. Due to Nginx 1.9.12 breaking LibreSSL support, I have switched Centmin Mod's Nginx build back from LibreSSL to OpenSSL 1.0.2f via setting LIBRESSL_SWITCH='n' as default. You'll notice longer Nginx compile/recompile times as Nginx compiled against OpenSSL takes much longer than against LibreSSL. So to update to Nginx 1.9.12, update Centmin Mod 123.08stable or 123.09beta01 latest code first BEFORE running centmin.sh menu option 4.

Backport to 123.08stable

LibreSSL had native chacha20_poly1305 ssl cipher support for SSL. But OpenSSL 1.0.2f doesn't. Centmin Mod 123.09beta01 supports patching OpenSSL 1.0.2+ with Cloudflare's official patch they use to add chacha20 support to OpenSSL 1.0.2. This is set via switch in centmin.sh. You can set this via persistent config file /etc/centminmod/custom_config.inc and set.

Code:

CLOUDFLARE_PATCHSSL='y'    # set 'y' to implement Cloudflare's chacha20 patch https://github.com/cloudflare/sslconfig

I have backported this patch routine into Centmin Mod 123.08stable however for stable it's default to disabled with

Code:

CLOUDFLARE_PATCHSSL='n' 

If you are on 123.08stable and need chacha20 support for SSL, you can set this via persistent config file /etc/centminmod/custom_config.inc

Code:

CLOUDFLARE_PATCHSSL='y' 

and then run centmin.sh menu option 4 to update to Nginx 1.9.12

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread
• Example of centmin.sh menu option 23 git updating code.

 

Security Updates for System OpenSSL + Nginx OpenSSL 1.0.2g Update

Updated both Centmin Mod 123.08stable and 123.09beta01 builds to update to OpenSSL 1.0.2g for Nginx compilation for security fixes for OpenSSL 1.0.2+ branch. There's also a CentOS OpenSSL system security update. Full details at Security - OpenSSL 1.0.2g & Updating Centmin Mod Nginx SSL Support | Centmin Mod Community

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread
• Example of centmin.sh menu option 23 git updating code.