Security CentOS updating for OpenSSL 1.0.2 testing feedback please

Same time as OpenSSL 1.0.1l release there's a OpenSSL 1.0.2 released too. Folks give it a test and see if it compiles fine for your Centmin Mod LEMP setups

Change Log for OpenSSL 1.0.2

---

OpenSSL 1.0.2 testing on Centmin Mod 1.2.3-eva2000.07 stable via manual update for Centmin Mod Nginx static OpenSSL compile part outlined here.

 

Thanks is that with Cloudflare RC4 patch enabled too ?

from centminmodbench.sh github repo got an issue request for P-224 curve tests but looks like it's only supported in OpenSSL 1.0.2 too Include P-224 in tests · Issue #1 · centminmod/centminmodbench · GitHub

 

Testing system OpenSSL 1.0.1e-30.el6_6.5 vs OpenSSL 1.0.2 static compiled into Centmin Mod Nginx

Code:

openssl speed ecdsap224 ecdsap256

/svr-setup/openssl-1.0.2/.openssl/bin/openssl speed ecdsap224 ecdsap256

Not sure if it makes much difference for most folks using SSL certificates with RSA 2048bit as it would only apply to ECC 256 bit (ECDSA) based SSL certificate usage ? SSL - ECC 256 bit vs RSA 2048 bit SSL | Centmin Mod Community

My test site at sslspdy.com is using ECC 256 bit SSL certificate with ECDSA signature algorithm

 

yup

 

haha, meant to keep them there as Centmin Mod uses ccache for compiler caching, should speed up reinstalls of same version source recompiled software by up to 60% faster than non-cached ccache normal source recompiles

 

should be

 

For OpenSSL 1.0.2a updates Security - OpenSSL 1.0.2a, 1.0.1m, 1.0.0r & 0.9.8zf coming soon | Centmin Mod Community