Want more timely Centmin Mod News Updates?
Become a Member

LibreSSL March 2018: LibreSSL 2.7.1 Released

Discussion in 'CentOS, Redhat & Oracle Linux News' started by eva2000, Mar 31, 2018.

  1. eva2000

    eva2000 Administrator Staff Member

    33,720
    7,466
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +11,478
    Local Time:
    9:02 AM
    Nginx 1.13.x
    MariaDB 5.5

    Centmin Mod + LibreSSL 2.7.1



    LibreSSL 2.7.1 is now latest stable release https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.7.1-relnotes.txt:

    Centmin Mod 123.08stable and 123.09beta01 Github branches corresponding to Centmin Mod 1.2.3-eva2000.08 stable and Centmin Mod 1.2.3-eva2000.09 beta01 have been updated to LibreSSL 2.7.1. Centmin Mod 123.09beta01 uses OpenSSL 1.1.0* branch by default for Nginx compiles now though. For existing folks, follow below update instructions.

    Centmin Mod Nginx Update LibreSSL



    For Centmin Mod 1.2.3-eva2000.08 beta03, .08 stable and higher you can update to LibreSSL 2.7.1 via 2 steps.

    Step 1. Updating centmin.sh LIBRESSL_VERSION variable to 2.7.1. Best way is to use centmin.sh menu option 23 submenu option 2 for auto updating Centmin Mod code as outlined at centminmod.com/upgrade.html and at https://community.centminmod.com/threads/new-08-beta-menu-option-updating-centmin-mod-via-git.3084/. That will auto update centmin.sh to latest version which already has LIBRESSL_VERSION='2.7.1' set.

    Check your updated Centmin Mod centmin.sh to see if LIBRESSL_VERSION='2.7.1' is set. If not set and you do not have centmin.sh menu option 23 submenu option 1 for git environment setup, then you need to manually update and edit in your persistent config file (create it if it doesn't exist) at /etc/centminmod/custom_config.inc and add to it. Note Centmin Mod 123.09beta01 defaults to Nginx compiles with OpenSSL now for better performance so is set to LIBRESSL_SWITCH='n'. Enabling below LIBRESSL_SWITCH='y' will switch you to Nginx with LibreSSL:

    Code (Text):
    # LibreSSL
    LIBRESSL_SWITCH='y'        # if set to 'y' it overrides OpenSSL as the default static compiled option for Nginx server
    LIBRESSL_VERSION='2.7.1'   # Use this version of LibreSSL http://www.libressl.org/


    Step 2. Then select centmin.sh menu option #4 to upgrade/downgrade Nginx recompile Nginx and specify latest Nginx version i.e. 1.13.10+ or newer.

    For example after recompile Nginx version output will show built with LibreSSL 2.7.1

    For 123.09 beta01

    LibreSSL 2.7.1



    You'll find latest LibreSSL 2.7.1 on official site.
     
  2. RoldanLT

    RoldanLT Well-Known Member

    4,157
    1,007
    113
    May 25, 2014
    Phillipines
    Ratings:
    +1,421
    Local Time:
    7:02 AM
    1.11
    10.2
    Maybe it's time to remove LibreSSL on Centminmod? :smuggrin:.
     
  3. pamamolf

    pamamolf Well-Known Member

    3,080
    293
    83
    May 31, 2014
    Ratings:
    +525
    Local Time:
    2:02 AM
    Nginx-1.13.x
    MariaDB 10.1.x
    If something goes wrong with the default compile we can use that :)

    So it will be good to have as an alternative :)
     
  4. eva2000

    eva2000 Administrator Staff Member

    33,720
    7,466
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +11,478
    Local Time:
    9:02 AM
    Nginx 1.13.x
    MariaDB 5.5
    Yeah you never know what LibreSSL developments happen in future so having support for it as an alternative is good :)
     
..