Beta Branch re-enable Cloudflare ChaCha20 patch support for OpenSSL 1.0.2j in 123…

re-enable Cloudflare ChaCha20 patch support for OpenSSL 1.0.2j in 123.09beta01

When LIBRESSL_SWITCH='y' and CLOUDFLARE_PATCHSSL='y' set in persistent config file /et/centminmod/custom_config.inc to switch from LibreSSL to OpenSSL for nginx compiles, re-enable Cloudflare ChaCha20 patch now that OpenSSL 1.0.2j support is added. Also updated in inc/openssl_install.inc the order for checking for 32bit systems which need CLOUDFLARE_PATCHSSL='n' set to disabled to override and come after OpenSSL version incompatibility checks.

At end of centmin.sh menu option 4 upgrades, you should get a log for openssl patching if you switched to OpenSSL via LIBRESSL_SWITCH='y' and CLOUDFLARE_PATCHSSL='y'

Code (Text):

log files saved at /root/centminlogs
-rw-r--r--  1 root root  3.2K Oct 28 19:56 patch_opensslpatches_281016-195632.log
-rw-r--r--  1 root root    44 Oct 28 19:57 centminmod_opensslinstalltime_281016-195632.log
-rw-r--r--  1 root root     0 Oct 28 19:57 patch_patchnginx_281016-195632.log
-rw-r--r--  1 root root  1.3K Oct 28 19:58 nginx-configure-281016-195632.log
-rw-r--r--  1 root root   21K Oct 28 20:00 nginx_autoconf.err.281016-195632.log
-rw-r--r--  1 root root  1.4M Oct 28 20:00 centminmod_1.2.3-eva2000.09.001_281016-195632_nginx_upgrade.log

Continue reading...

---

123.09beta01 branch

• Branch: https://github.com/centminmod/centminmod/tree/123.09beta01
• Commit History: https://github.com/centminmod/centminmod/commits/123.09beta01

 

Cloudflare's official OpenSSL 1.0.2 chacha20 patch only supports 1.0.2 and not 1.1. but Centmin Mod 123.09beta01 also uses backported Cloudflare OpenSSL 1.0.2 to 1.1.0 chacha20 patch that @bassie shard https://community.centminmod.com/posts/35727/

 

looks right read entire thread and bassie's explanation of OpenSSL 1.1 patched results on ssllabs https://community.centminmod.com/posts/35727/

and https://community.centminmod.com/th...preferred-cipher-openssl-1-1.8603/#post-35743

 

@bassies saves me some hassle of figuring it out