OpenSSL OpenSSL 1.1.1 Alpha Pre-Release 2 - released

buik · Mar 1, 2018

OpenSSL 1.1.1 Alpha Pre-Release 2 is released.

OpenSSL version 1.1.1 pre release 2 (alpha)
===========================================

OpenSSL - The Open Source toolkit for SSL/TLS
/index.html

OpenSSL 1.1.1 is currently in alpha. OpenSSL 1.1.1 pre release 2 has now
been made available. For details of changes and known issues see the
release notes at:

/news/openssl-1.1.1-notes.html

Note: This OpenSSL pre-release has been provided for testing ONLY.
It should NOT be used for security critical purposes.

The alpha release is available for download via HTTP and FTP from the
following master locations (you can find the various FTP mirrors under
/source/mirror.html):

* /source/index.html
* ftp://ftp.openssl.org/source/

The distribution file name is:

o openssl-1.1.1-pre2.tar.gz
Size: 6485957
SHA1 checksum: 11be9034aa6b84eb8bfff7accc2a1a3f940deef9
SHA256 checksum: 33dbda4a90345d256942fb5316967efd90df4f2373578c7b56c90062fe21fc9c

The checksums were calculated using the following commands:

openssl sha1 openssl-1.1.1-pre2.tar.gz
openssl sha256 openssl-1.1.1-pre2.tar.gz

Please download and check this alpha release as soon as possible.
Click to expand...

eva2000 · Mar 2, 2018

nice.. moving closer to TLS v1.3 reality

nginx -V
nginx version: nginx/1.13.9
built by gcc 8.0.1 20180218 (experimental) (GCC)
built with OpenSSL 1.1.1-pre2 (alpha) 27 Feb 2018
TLS SNI support enabled
configure arguments: --with-ld-opt='-L/usr/local/lib -ljemalloc -Wl,-z,relro -Wl,-rpath,/usr/local/lib' --with-cc-opt='-I/usr/local/include -m64 -march=native -DTCP_FASTOPEN=23 -g -O3 -Wno-error=strict-aliasing -fstack-protector-strong -flto -fuse-ld=gold --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wimplicit-fallthrough=0 -fcode-hoisting -Wno-cast-function-type -Wp,-D_FORTIFY_SOURCE=2 -Wno-deprecated-declarations' --sbin-path=/usr/local/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --with-compat --with-http_stub_status_module --with-http_secure_link_module --add-dynamic-module=../nginx-module-vts --with-libatomic --with-http_gzip_static_module --add-dynamic-module=../ngx_brotli --with-http_sub_module --with-http_addition_module --with-http_image_filter_module=dynamic --with-http_geoip_module --with-stream_geoip_module --with-stream_realip_module --with-stream_ssl_preread_module --with-threads --with-stream=dynamic --with-stream_ssl_module --with-http_realip_module --add-dynamic-module=../ngx-fancyindex-0.4.2 --add-module=../ngx_cache_purge-2.4.2 --add-module=../ngx_devel_kit-0.3.0 --add-dynamic-module=../set-misc-nginx-module-0.31 --add-dynamic-module=../echo-nginx-module-0.61 --add-module=../redis2-nginx-module-0.14 --add-module=../ngx_http_redis-0.3.7 --add-module=../memc-nginx-module-0.18 --add-module=../srcache-nginx-module-0.31 --add-dynamic-module=../headers-more-nginx-module-0.33 --with-pcre=../pcre-8.41 --with-pcre-jit --with-zlib=../zlib-cloudflare-1.3.0 --with-http_ssl_module --with-http_v2_module --with-http_v2_hpack_enc --with-openssl=../openssl-1.1.1-pre2 --with-openssl-opt='enable-ec_nistp_64_gcc_128 enable-tls1_3'
Click to expand...

Nginx Patches
Code (Text):
cat /root/centminlogs/patch_patchnginx_010318-185708.log
             ____  _                    _   __  _                   
            / ___|| |  ___   _   _   __| | / _|| |  __ _  _ __  ___ 
           | |    | | / _ \ | | | | / _` || |_ | | / _` || '__|/ _ \
           | |___ | || (_) || |_| || (_| ||  _|| || (_| || |  |  __/
            \____||_| \___/  \__,_| \__,_||_|  |_| \__,_||_|   \___|
                                                                   
 _   _         _                ____                                   _       
| \ | |  __ _ (_) _ __  __  __ |  _ \  _   _  _ __    __ _  _ __ ___  (_)  ___ 
|  \| | / _` || || '_ \ \ \/ / | | | || | | || '_ \  / _` || '_ ` _ \ | | / __|
| |\  || (_| || || | | | >  <  | |_| || |_| || | | || (_| || | | | | || || (__ 
|_| \_| \__, ||_||_| |_|/_/\_\ |____/  \__, ||_| |_| \__,_||_| |_| |_||_| \___|
        |___/                          |___/                                   
               _____  _      ____    ____         _         _     
              |_   _|| |    / ___|  |  _ \  __ _ | |_  ___ | |__ 
                | |  | |    \___ \  | |_) |/ _` || __|/ __|| '_ \ 
                | |  | |___  ___) | |  __/| (_| || |_| (__ | | | |
                |_|  |_____||____/  |_|    \__,_| \__|\___||_| |_|
                                                                 
######################################################################
Patching Nginx for Dynamic TLS Size Support
######################################################################
Cloudflare Nginx Dynamic TLS patch
https://github.com/cloudflare/sslconfig/raw/master/patches/nginx__dynamic_tls_records.patch
######################################################################
patch -p1 < /usr/local/src/centminmod/patches/cloudflare/nginx__dynamic_tls_records_1011005.patch
patching file src/event/ngx_event_openssl.c
Hunk #1 succeeded at 1174 (offset 43 lines).
Hunk #2 succeeded at 1713 (offset 43 lines).
Hunk #3 succeeded at 1849 (offset 43 lines).
patching file src/event/ngx_event_openssl.h
Hunk #1 succeeded at 60 with fuzz 1 (offset 6 lines).
Hunk #2 succeeded at 95 (offset 6 lines).
Hunk #3 succeeded at 108 (offset 6 lines).
patching file src/http/modules/ngx_http_ssl_module.c
Hunk #1 succeeded at 234 (offset 1 line).
Hunk #2 succeeded at 594 (offset 26 lines).
Hunk #3 succeeded at 664 (offset 26 lines).
Hunk #4 succeeded at 858 (offset 26 lines).
patching file src/http/modules/ngx_http_ssl_module.h
1013009
/svr-setup/nginx-1.13.9 /svr-setup/nginx-1.13.9
patching nginx http/2 full HPACK encoding support
nginx-1.13.9_http2-hpack.patch
patch -p1 < /usr/local/src/centminmod/patches/cloudflare/nginx-1.13.9_http2-hpack.patch
patching file auto/modules
Hunk #1 succeeded at 437 (offset 1 line).
patching file auto/options
patching file src/core/ngx_murmurhash.c
patching file src/core/ngx_murmurhash.h
patching file src/http/v2/ngx_http_v2.c
Hunk #1 succeeded at 274 with fuzz 1 (offset 27 lines).
Hunk #2 succeeded at 2076 with fuzz 1 (offset 54 lines).
patching file src/http/v2/ngx_http_v2.h
Hunk #6 succeeded at 414 (offset -1 lines).
patching file src/http/v2/ngx_http_v2_filter_module.c
Hunk #1 succeeded at 26 (offset 1 line).
Hunk #2 succeeded at 88 with fuzz 2 (offset 40 lines).
Hunk #3 succeeded at 187 with fuzz 2 (offset 45 lines).
Hunk #4 succeeded at 465 (offset 56 lines).
Hunk #5 succeeded at 473 (offset 56 lines).
Hunk #6 succeeded at 493 (offset 56 lines).
Hunk #7 succeeded at 540 (offset 56 lines).
Hunk #8 succeeded at 592 (offset 56 lines).
Hunk #9 succeeded at 1025 (offset 347 lines).
Hunk #10 succeeded at 1051 (offset 347 lines).
patching file src/http/v2/ngx_http_v2_table.c

patching nginx http/2 full HPACK encoding for nginx 1.13.9+

eva2000 · Mar 9, 2018

Looking good now that Chrome 65 stable has TLSv1.3 support enabled
Code (Text):
curl --tlsv1.3 -Isv https://http2.centminmod.com 2>&1 | egrep 'ALPN|SSL connection'
* ALPN, offering h2
* ALPN, offering http/1.1
* SSL connection using TLSv1.3 / TLS13-AES-128-GCM-SHA256
* ALPN, server accepted to use h2
Nginx 1.13.9 + OpenSSL 1.1.1-pre2 beta with TLSv1.3 support

nginx -V
nginx version: nginx/1.13.9
built by gcc 7.2.1 20170829 (Red Hat 7.2.1-1) (GCC)
built with OpenSSL 1.1.1-pre2 (alpha) 27 Feb 2018
TLS SNI support enabled
configure arguments: --with-ld-opt='-L/usr/local/lib -ljemalloc -Wl,-z,relro -Wl,-rpath,/usr/local/lib' --with-cc-opt='-I/usr/local/include -m64 -march=native -DTCP_FASTOPEN=23 -g -O3 -fstack-protector-strong -flto -fuse-ld=gold --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wimplicit-fallthrough=0 -fcode-hoisting -Wp,-D_FORTIFY_SOURCE=2 -Wno-deprecated-declarations -gsplit-dwarf' --sbin-path=/usr/local/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --with-compat --with-http_stub_status_module --with-http_secure_link_module --with-libatomic --with-http_gzip_static_module --add-dynamic-module=../ngx_brotli --add-dynamic-module=../incubator-pagespeed-ngx-1.13.35.2-stable --with-http_sub_module --with-http_addition_module --with-http_image_filter_module=dynamic --with-http_geoip_module --with-stream_geoip_module --with-stream_realip_module --with-stream_ssl_preread_module --with-threads --with-stream=dynamic --with-stream_ssl_module --with-http_realip_module --add-dynamic-module=../ngx-fancyindex-0.4.2 --add-module=../ngx_cache_purge-2.4.2 --add-module=../ngx_devel_kit-0.3.0 --add-dynamic-module=../set-misc-nginx-module-0.31 --add-dynamic-module=../echo-nginx-module-0.61 --add-module=../redis2-nginx-module-0.14 --add-module=../ngx_http_redis-0.3.7 --add-module=../memc-nginx-module-0.18 --add-module=../srcache-nginx-module-0.31 --add-dynamic-module=../headers-more-nginx-module-0.33 --with-pcre=../pcre-8.41 --with-pcre-jit --with-zlib=../zlib-cloudflare-1.3.0 --with-http_ssl_module --with-http_v2_module --with-openssl=../openssl-1.1.1-pre2 --with-openssl-opt='enable-ec_nistp_64_gcc_128 enable-tls1_3'
Click to expand...

Log in / Register

Forums

Welcome to Centmin Mod Community

OpenSSL OpenSSL 1.1.1 Alpha Pre-Release 2 - released

buik “The best traveler is one without a camera.”

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

.

Log in / Register

Useful Searches

Welcome to Centmin Mod Community

OpenSSL OpenSSL 1.1.1 Alpha Pre-Release 2 - released

buik “The best traveler is one without a camera.”

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

.