Beta Branch libressl 2.3.4 updated

eva2000 · May 4, 2016

libressl 2.3.4 updated

Continue reading...

123.09beta01 branch

Branch: https://github.com/centminmod/centminmod/tree/123.09beta01

Commit History: https://github.com/centminmod/centminmod/commits/123.09beta01

eva2000 · May 4, 2016

updated

nginx -V
nginx version: nginx/1.9.15
built by clang 3.4.2 (tags/RELEASE_34/dot2-final)
built with LibreSSL 2.3.4
TLS SNI support enabled
configure arguments: --with-ld-opt='-lrt -ljemalloc -Wl,-z,relro -Wl,-rpath,/usr/local/lib' --with-cc-opt='-m64 -mtune=native -mfpmath=sse -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wno-sign-compare -Wno-string-plus-int -Wno-deprecated-declarations -Wno-unused-parameter -Wno-unused-const-variable -Wno-conditional-uninitialized -Wno-mismatched-tags -Wno-c++11-extensions -Wno-sometimes-uninitialized -Wno-parentheses-equality -Wno-tautological-compare -Wno-self-assign -Wno-deprecated-register -Wno-deprecated -Wno-invalid-source-encoding -Wno-pointer-sign -Wno-parentheses -Wno-enum-conversion -Wno-c++11-compat-deprecated-writable-strings -Wno-write-strings' --sbin-path=/usr/local/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --with-http_stub_status_module --with-http_secure_link_module --with-openssl-opt=enable-tlsext --add-module=../nginx-module-vts --with-libatomic --with-threads --with-stream=dynamic --with-stream_ssl_module --with-http_gzip_static_module --with-http_sub_module --with-http_addition_module --with-http_image_filter_module=dynamic --with-http_geoip_module --with-http_realip_module --add-module=../ngx-fancyindex-0.3.6 --add-module=../ngx_cache_purge-2.3 --add-module=../ngx_devel_kit-0.3.0rc1 --add-module=../set-misc-nginx-module-0.30 --add-module=../echo-nginx-module-0.59rc1 --add-module=../redis2-nginx-module-0.12 --add-module=../ngx_http_redis-0.3.7 --add-module=../lua-nginx-module-0.10.2 --add-module=../nginx_upstream_check_module-0.3.0 --add-module=../openresty-memc-nginx-module-4f6f78f --add-module=../srcache-nginx-module-0.30 --add-module=../headers-more-nginx-module-0.30rc1 --with-pcre=../pcre-8.38 --with-pcre-jit --with-http_ssl_module --with-http_v2_module --with-openssl=../libressl-2.3.4
Click to expand...

BobbyWibowo · May 4, 2016

Updating right now

BobbyWibowo · May 4, 2016

Updated

nginx version: nginx/1.9.15
built by gcc 4.8.5 20150623 (Red Hat 4.8.5-4) (GCC)
built with LibreSSL 2.3.4
TLS SNI support enabled
configure arguments: --with-ld-opt='-lrt -ljemalloc -Wl,-z,relro -Wl,-rpath,/usr/local/lib' --with-cc-opt='-m64 -mtune=native -mfpmath=sse -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2' --sbin-path=/usr/local/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --with-http_stub_status_module --with-http_secure_link_module --with-openssl-opt=enable-tlsext --add-module=../nginx-module-vts --with-libatomic --with-threads --with-stream=dynamic --with-stream_ssl_module --with-http_gzip_static_module --add-dynamic-module=../ngx_brotli --add-dynamic-module=../ngx_pagespeed-release-1.11.33.0-beta --with-http_sub_module --with-http_addition_module --with-http_image_filter_module=dynamic --with-http_geoip_module --with-http_realip_module --add-module=../ngx-fancyindex-0.3.6 --add-module=../ngx_cache_purge-2.3 --add-module=../ngx_devel_kit-0.3.0rc1 --add-module=../set-misc-nginx-module-0.30 --add-module=../echo-nginx-module-0.59rc1 --add-module=../redis2-nginx-module-0.12 --add-module=../ngx_http_redis-0.3.7 --add-module=../nginx_upstream_check_module-0.3.0 --add-module=../openresty-memc-nginx-module-4f6f78f --add-module=../srcache-nginx-module-0.30 --add-module=../headers-more-nginx-module-0.30rc1 --with-pcre=../pcre-8.38 --with-pcre-jit --with-http_ssl_module --with-http_v2_module --with-openssl=../libressl-2.3.4
Click to expand...

Also, is it better to use clang instead of gcc? Not sure if I have ever asked this before..

eva2000 · May 4, 2016

BobbyWibowo said: ↑

Updated

Also, is it better to use clang instead of gcc? Not sure if I have ever asked this before..
Click to expand...

whether you use GCC or Clang depends on if you use and enable ngx_pagespeed 1.10+ and higher versions due to their requirement to use GCC 4.8+ and higher Nginx PageSpeed - Nginx Pagespeed 1.10.x betas coming. Centmin Mod auto detects if ngx_pagespeed 1.10+ is enabled and auto switches back from Clang to GCC 4.8+ (for CentOS 7) or GCC 4.9.1 (for CentOS 6 via devtoolset).

eva2000 · May 5, 2016

FYI, there's an online tool to check and verify if your HTTPS enabled site is vulnerable to the latest OpenSSL 1.0.2g and lower and LibreSSQL 2.3.3 and lower security issue at Test your server for yet another CBC padding oracle (CVE-2016-2107)

Sunka · May 5, 2016

Thanks @eva2000

eva2000 · May 5, 2016

looking good @Sunka

BobbyWibowo · May 6, 2016

eva2000 said: ↑

whether you use GCC or Clang depends on if you use and enable ngx_pagespeed 1.10+ and higher versions due to their requirement to use GCC 4.8+ and higher Nginx PageSpeed - Nginx Pagespeed 1.10.x betas coming. Centmin Mod auto detects if ngx_pagespeed 1.10+ is enabled and auto switches back from Clang to GCC 4.8+ (for CentOS 7) or GCC 4.9.1 (for CentOS 6 via devtoolset).
Click to expand...

Ah, alright. For some reason I believe I've heard you mentioned that before, lol. I guess my memory was kinda foggy..

As for the CVE blablabla.. I'm not sure what is that, but mine seems to be fine.

Anyway, thanks for the information!

Log in / Register

Forums

Welcome to Centmin Mod Community

Beta Branch libressl 2.3.4 updated

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

BobbyWibowo Active Member

BobbyWibowo Active Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

Sunka Well-Known Member

eva2000 Administrator Staff Member

BobbyWibowo Active Member

.

Log in / Register

Useful Searches

Welcome to Centmin Mod Community

Beta Branch libressl 2.3.4 updated

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

BobbyWibowo Active Member

BobbyWibowo Active Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

Sunka Well-Known Member

eva2000 Administrator Staff Member

BobbyWibowo Active Member

.