Welcome to Centmin Mod Community
Register Now

Beta Branch re-enable Cloudflare ChaCha20 patch support for OpenSSL 1.0.2j in 123…

Discussion in 'Centmin Mod Github Commits' started by eva2000, Oct 29, 2016.

  1. eva2000

    eva2000 Administrator Staff Member

    36,860
    8,068
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +12,426
    Local Time:
    9:44 PM
    Nginx 1.15.x
    MariaDB 5.5/10.x
    re-enable Cloudflare ChaCha20 patch support for OpenSSL 1.0.2j in 123.09beta01

    When LIBRESSL_SWITCH='y' and CLOUDFLARE_PATCHSSL='y' set in persistent config file /et/centminmod/custom_config.inc to switch from LibreSSL to OpenSSL for nginx compiles, re-enable Cloudflare ChaCha20 patch now that OpenSSL 1.0.2j support is added. Also updated in inc/openssl_install.inc the order for checking for 32bit systems which need CLOUDFLARE_PATCHSSL='n' set to disabled to override and come after OpenSSL version incompatibility checks.

    At end of centmin.sh menu option 4 upgrades, you should get a log for openssl patching if you switched to OpenSSL via LIBRESSL_SWITCH='y' and CLOUDFLARE_PATCHSSL='y'
    Code (Text):
    log files saved at /root/centminlogs
    -rw-r--r--  1 root root  3.2K Oct 28 19:56 patch_opensslpatches_281016-195632.log
    -rw-r--r--  1 root root    44 Oct 28 19:57 centminmod_opensslinstalltime_281016-195632.log
    -rw-r--r--  1 root root     0 Oct 28 19:57 patch_patchnginx_281016-195632.log
    -rw-r--r--  1 root root  1.3K Oct 28 19:58 nginx-configure-281016-195632.log
    -rw-r--r--  1 root root   21K Oct 28 20:00 nginx_autoconf.err.281016-195632.log
    -rw-r--r--  1 root root  1.4M Oct 28 20:00 centminmod_1.2.3-eva2000.09.001_281016-195632_nginx_upgrade.log
    

    Continue reading...

    123.09beta01 branch
     
  2. rdan

    rdan Premium Member Premium Member

    4,365
    1,053
    113
    May 25, 2014
    Ratings:
    +1,522
    Local Time:
    7:44 PM
    Mainline
    10.2
    Does the latest Cloudflare patch support OPENSSL VERSION 1.1.0e ?
     
  3. eva2000

    eva2000 Administrator Staff Member

    36,860
    8,068
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +12,426
    Local Time:
    9:44 PM
    Nginx 1.15.x
    MariaDB 5.5/10.x
    Cloudflare's official OpenSSL 1.0.2 chacha20 patch only supports 1.0.2 and not 1.1. but Centmin Mod 123.09beta01 also uses backported Cloudflare OpenSSL 1.0.2 to 1.1.0 chacha20 patch that @bassie shard https://community.centminmod.com/posts/35727/ :)
     
    • Like Like x 1
  4. rdan

    rdan Premium Member Premium Member

    4,365
    1,053
    113
    May 25, 2014
    Ratings:
    +1,522
    Local Time:
    7:44 PM
    Mainline
    10.2
    upload_2017-4-4_23-13-52.png
     
  5. rdan

    rdan Premium Member Premium Member

    4,365
    1,053
    113
    May 25, 2014
    Ratings:
    +1,522
    Local Time:
    7:44 PM
    Mainline
    10.2
    OPENSSL VERSION 1.0.2k
    upload_2017-4-4_23-19-37.png
     
  6. eva2000

    eva2000 Administrator Staff Member

    36,860
    8,068
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +12,426
    Local Time:
    9:44 PM
    Nginx 1.15.x
    MariaDB 5.5/10.x
    • Informative Informative x 1
  7. rdan

    rdan Premium Member Premium Member

    4,365
    1,053
    113
    May 25, 2014
    Ratings:
    +1,522
    Local Time:
    7:44 PM
    Mainline
    10.2
    But not supporting IE8 (default version of Win7) is still a big deal for me :).
     
  8. rdan

    rdan Premium Member Premium Member

    4,365
    1,053
    113
    May 25, 2014
    Ratings:
    +1,522
    Local Time:
    7:44 PM
    Mainline
    10.2
  9. bassie

    bassie Well-Known Member

    1,013
    243
    63
    Apr 29, 2016
    Ratings:
    +720
    Local Time:
    12:44 PM
    • Like Like x 1
    • Informative Informative x 1
  10. rdan

    rdan Premium Member Premium Member

    4,365
    1,053
    113
    May 25, 2014
    Ratings:
    +1,522
    Local Time:
    7:44 PM
    Mainline
    10.2
    • Informative Informative x 1
  11. bassie

    bassie Well-Known Member

    1,013
    243
    63
    Apr 29, 2016
    Ratings:
    +720
    Local Time:
    12:44 PM
    Nup. Is the same.
    Few other characters, because diff sees another new line, spaces etc as a change.
    And that's theoretically right because it is different (on another place).
     
    • Informative Informative x 2
  12. eva2000

    eva2000 Administrator Staff Member

    36,860
    8,068
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +12,426
    Local Time:
    9:44 PM
    Nginx 1.15.x
    MariaDB 5.5/10.x
    @bassies saves me some hassle of figuring it out :D
     
  13. rdan

    rdan Premium Member Premium Member

    4,365
    1,053
    113
    May 25, 2014
    Ratings:
    +1,522
    Local Time:
    7:44 PM
    Mainline
    10.2
    What about this?
    upload_2017-5-26_12-36-14.png
     
  14. bassie

    bassie Well-Known Member

    1,013
    243
    63
    Apr 29, 2016
    Ratings:
    +720
    Local Time:
    12:44 PM
    Maths.
    If you call something within (), you could open/close it with () like this: (( ) )
     
    Last edited: May 26, 2017
..