PHP-FPM PHP

PHP seems to be compiled with the Red Hat's OpenSSL 1.0.2.
However Nginx is compiled with upstream OpenSSL 1.1.1.

---

Why is this?
Can PHP be compiled with the same OpenSSL from Centminmod.

 

Nice

 

Seems as PHP is compiled with OpenSSL 1.1.1 via --with-openssl=/opt/openssl
As openssl-1.1.1q is released, did some recompilation of PHP.

Probleems seems that the PHP compile script did not check for the latest OpenSSL 1.1.1. Result. That latest PHP compiled with a vulnerable old OpenSSL version.

Current workaround is to compile Nginx with the latest OpenSSL first as it did check for the latest available OpenSSL.

Solution. @eva2000 Add the OpenSSL version check to the PHP compile script.

 

I didn't pay attention to that. Sorry. Is this intentional because otherwise you have to put the same check on multiple separate scripts? Tricky to keep it up to date etc.

 

Aha new code. Nice!