Join the community today
Become a Member

LibreSSL March 2018: LibreSSL 2.7.1 Released

Discussion in 'CentOS, Redhat & Oracle Linux News' started by eva2000, Mar 31, 2018.

  1. eva2000

    eva2000 Administrator Staff Member

    35,133
    7,753
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +11,956
    Local Time:
    3:27 AM
    Nginx 1.15.x
    MariaDB 5.5/10.x

    Centmin Mod + LibreSSL 2.7.1



    LibreSSL 2.7.1 is now latest stable release https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.7.1-relnotes.txt:

    Centmin Mod 123.08stable and 123.09beta01 Github branches corresponding to Centmin Mod 1.2.3-eva2000.08 stable and Centmin Mod 1.2.3-eva2000.09 beta01 have been updated to LibreSSL 2.7.1. Centmin Mod 123.09beta01 uses OpenSSL 1.1.0* branch by default for Nginx compiles now though. For existing folks, follow below update instructions.

    Centmin Mod Nginx Update LibreSSL



    For Centmin Mod 1.2.3-eva2000.08 beta03, .08 stable and higher you can update to LibreSSL 2.7.1 via 2 steps.

    Step 1. Updating centmin.sh LIBRESSL_VERSION variable to 2.7.1. Best way is to use centmin.sh menu option 23 submenu option 2 for auto updating Centmin Mod code as outlined at centminmod.com/upgrade.html and at https://community.centminmod.com/threads/new-08-beta-menu-option-updating-centmin-mod-via-git.3084/. That will auto update centmin.sh to latest version which already has LIBRESSL_VERSION='2.7.1' set.

    Check your updated Centmin Mod centmin.sh to see if LIBRESSL_VERSION='2.7.1' is set. If not set and you do not have centmin.sh menu option 23 submenu option 1 for git environment setup, then you need to manually update and edit in your persistent config file (create it if it doesn't exist) at /etc/centminmod/custom_config.inc and add to it. Note Centmin Mod 123.09beta01 defaults to Nginx compiles with OpenSSL now for better performance so is set to LIBRESSL_SWITCH='n'. Enabling below LIBRESSL_SWITCH='y' will switch you to Nginx with LibreSSL:

    Code (Text):
    # LibreSSL
    LIBRESSL_SWITCH='y'        # if set to 'y' it overrides OpenSSL as the default static compiled option for Nginx server
    LIBRESSL_VERSION='2.7.1'   # Use this version of LibreSSL http://www.libressl.org/


    Step 2. Then select centmin.sh menu option #4 to upgrade/downgrade Nginx recompile Nginx and specify latest Nginx version i.e. 1.13.10+ or newer.

    For example after recompile Nginx version output will show built with LibreSSL 2.7.1

    For 123.09 beta01

    LibreSSL 2.7.1



    You'll find latest LibreSSL 2.7.1 on official site.
     
  2. rdan

    rdan Premium Member Premium Member

    4,230
    1,030
    113
    May 25, 2014
    Ratings:
    +1,471
    Local Time:
    1:27 AM
    Mainline
    10.2
    Maybe it's time to remove LibreSSL on Centminmod? :smuggrin:.
     
  3. pamamolf

    pamamolf Well-Known Member

    3,111
    295
    83
    May 31, 2014
    Ratings:
    +530
    Local Time:
    8:27 PM
    Nginx-1.13.x
    MariaDB 10.1.x
    If something goes wrong with the default compile we can use that :)

    So it will be good to have as an alternative :)
     
  4. eva2000

    eva2000 Administrator Staff Member

    35,133
    7,753
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +11,956
    Local Time:
    3:27 AM
    Nginx 1.15.x
    MariaDB 5.5/10.x
    Yeah you never know what LibreSSL developments happen in future so having support for it as an alternative is good :)
     
..