Get the most out of your Centmin Mod LEMP stack
Become a Member

Beta Branch add tools/nginx_crypto_check.sh in 130.00beta01

Discussion in 'Centmin Mod Github Commits' started by eva2000, Jun 22, 2024.

  1. eva2000

    eva2000 Administrator Staff Member

    58,893
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    9:08 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    add tools/nginx_crypto_check.sh in 130.00beta01

    - Add /usr/local/src/centminmod/tools/nginx_crypto_check.sh script which can check which Nginx crypto library is being compiled with Nginx and also check the crypto libraries version number. To get this update on 130.00beta01, run cmupdate command and you can for now manually run this script to test it.
    - Currently checks for OpenSSL 3.0, 3.1, 3.2, 3.3, LibreSSL 3.8/3.9, and AWS-LC versions. OpenSSL 1.1.1 doesn't have a check as it's always same version with suffix letter and BoringSSL doesn't report a version number in Nginx -V output
    - Will extend this script in future to be able to alert users on SSH login if Nginx's crypto library has a version update, just like existing Nginx and Centmin Mod update alerts do on SSH login via MOTD banner messages.

    example when Nginx compiled with AWS-LC

    nginx -V
    nginx version: nginx/1.27.0 (210624-155923-almalinux8-0099dd9-br-a71f931)
    built by gcc 13.1.1 20230614 (Red Hat 13.1.1-4) (GCC)
    built with OpenSSL 1.1.1 (compatible; AWS-LC 1.30.1) (running with AWS-LC 1.30.1)

    this script will report


    ./tools/nginx_crypto_check.sh
    Nginx Crypto Library: AWS-LC
    Nginx Crypto Library Version: 1.30.1 (up to date)

    Continue reading...

    130.00beta01 branch

    Support Centmin Mod


    If you find Centmin Mod useful, please help support Centmin Mod