Beta Branch update to LibreSSL 2.3.5 default

eva2000 · Jun 6, 2016

update to LibreSSL 2.3.5 default

LibreSSL: Releases

Continue reading...

123.09beta01 branch

Branch: GitHub - centminmod/centminmod at 123.09beta01

Commit History: Commits · centminmod/centminmod · GitHub

eva2000 · Jun 6, 2016

LibreSSL 2.3.5 stable release

nginx -V
nginx version: nginx/1.11.1
built by clang 3.4.2 (tags/RELEASE_34/dot2-final)
built with LibreSSL 2.3.5
TLS SNI support enabled
configure arguments: --with-ld-opt='-lrt -ljemalloc -Wl,-z,relro -Wl,-rpath,/usr/local/lib' --with-cc-opt='-m64 -mtune=native -mfpmath=sse -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wno-sign-compare -Wno-string-plus-int -Wno-deprecated-declarations -Wno-unused-parameter -Wno-unused-const-variable -Wno-conditional-uninitialized -Wno-mismatched-tags -Wno-c++11-extensions -Wno-sometimes-uninitialized -Wno-parentheses-equality -Wno-tautological-compare -Wno-self-assign -Wno-deprecated-register -Wno-deprecated -Wno-invalid-source-encoding -Wno-pointer-sign -Wno-parentheses -Wno-enum-conversion -Wno-c++11-compat-deprecated-writable-strings -Wno-write-strings' --sbin-path=/usr/local/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --with-http_stub_status_module --with-http_secure_link_module --with-openssl-opt=enable-tlsext --add-module=../nginx-module-vts --with-libatomic --with-threads --with-http_gzip_static_module --with-http_sub_module --with-http_addition_module --with-http_image_filter_module=dynamic --with-http_geoip_module --with-http_realip_module --add-module=../ngx-fancyindex-0.3.6 --add-module=../ngx_cache_purge-2.3 --add-module=../ngx_devel_kit-0.3.0 --add-module=../set-misc-nginx-module-0.30 --add-module=../echo-nginx-module-0.59 --add-module=../redis2-nginx-module-0.13 --add-module=../ngx_http_redis-0.3.7 --add-module=../lua-nginx-module-0.10.5 --add-module=../nginx_upstream_check_module-0.3.0 --add-module=../memc-nginx-module-0.17 --add-module=../srcache-nginx-module-0.31 --add-module=../headers-more-nginx-module-0.30 --with-pcre=../pcre-8.38 --with-pcre-jit --with-http_ssl_module --with-http_v2_module --with-openssl=../libressl-2.3.5
Click to expand...

LibreSSL 2.4.0 unstable release

nginx -V
nginx version: nginx/1.11.1
built by clang 3.4.2 (tags/RELEASE_34/dot2-final)
built with LibreSSL 2.4.0
TLS SNI support enabled
configure arguments: --with-ld-opt='-lrt -ljemalloc -Wl,-z,relro -Wl,-rpath,/usr/local/lib' --with-cc-opt='-m64 -mtune=native -mfpmath=sse -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wno-sign-compare -Wno-string-plus-int -Wno-deprecated-declarations -Wno-unused-parameter -Wno-unused-const-variable -Wno-conditional-uninitialized -Wno-mismatched-tags -Wno-c++11-extensions -Wno-sometimes-uninitialized -Wno-parentheses-equality -Wno-tautological-compare -Wno-self-assign -Wno-deprecated-register -Wno-deprecated -Wno-invalid-source-encoding -Wno-pointer-sign -Wno-parentheses -Wno-enum-conversion -Wno-c++11-compat-deprecated-writable-strings -Wno-write-strings' --sbin-path=/usr/local/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --with-http_stub_status_module --with-http_secure_link_module --with-openssl-opt=enable-tlsext --add-module=../nginx-module-vts --with-libatomic --with-threads --with-http_gzip_static_module --with-http_sub_module --with-http_addition_module --with-http_image_filter_module=dynamic --with-http_geoip_module --with-http_realip_module --add-module=../ngx-fancyindex-0.3.6 --add-module=../ngx_cache_purge-2.3 --add-module=../ngx_devel_kit-0.3.0 --add-module=../set-misc-nginx-module-0.30 --add-module=../echo-nginx-module-0.59 --add-module=../redis2-nginx-module-0.13 --add-module=../ngx_http_redis-0.3.7 --add-module=../lua-nginx-module-0.10.5 --add-module=../nginx_upstream_check_module-0.3.0 --add-module=../memc-nginx-module-0.17 --add-module=../srcache-nginx-module-0.31 --add-module=../headers-more-nginx-module-0.30 --with-pcre=../pcre-8.38 --with-pcre-jit --with-http_ssl_module --with-http_v2_module --with-openssl=../libressl-2.4.0
Click to expand...

Revenge · Jun 6, 2016

LibreSSL 2.4.0 is working fine?

buik · Jun 6, 2016

Revenge said: ↑

LibreSSL 2.4.0 is working fine?
Click to expand...

Does LibreSSL 2.4.0 support the Nginx dual certificate option?
As it does not work with version LibreSSL < 2.40.

Only OpenSSL 1.0.2 and higher support separate chains for
different certificates. With older versions (including LibreSSL)
there is only one chain for all certificates, and all chained
certificates will be added to it. That is, if chains are the same
you have to leave only one of them.

--
Maxim Dounin
Click to expand...

eva2000 · Jun 6, 2016

Revenge said: ↑

LibreSSL 2.4.0 is working fine?
Click to expand...

they mark it as unstable as there are changes etc from the release notes link

rikske said: ↑

Does LibreSSL 2.4.0 support the Nginx dual certificate option?
As it does not work with version LibreSSL < 2.40.
Click to expand...

you need to switch back to openssl 1.0.2h+ for dual ecdsa + rsa certs see SSL - Nginx 1.11.0 introduces dual ECDSA + RSA SSL certificate support ! | Centmin Mod Community

Log in / Register

Forums

Learn about Centmin Mod LEMP Stack today

Beta Branch update to LibreSSL 2.3.5 default

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

Revenge Active Member

buik “The best traveler is one without a camera.”

eva2000 Administrator Staff Member

.

Log in / Register

Useful Searches

Learn about Centmin Mod LEMP Stack today

Beta Branch update to LibreSSL 2.3.5 default

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

Revenge Active Member

buik “The best traveler is one without a camera.”

eva2000 Administrator Staff Member

.