We are happy to announce that Vesta is back under active development as of 25 February 2024. We are working on v1 candidate and expect to engage more with the community over the coming months. We are committed to open source, and we encourage contributors to help us build the future of Vesta.
How can i replace Openssl1.0.1t with Openssl1.1
How can i replace Openssl1.0.1t with Openssl1.1
I want to use the chacha20-poly1305 on my website.But i can't update my openssl to the latest version! Who can help
me?
me?
Re: How can i replace Openssl1.0.1t with Openssl1.1
There was nice guide recently:
viewtopic.php?f=20&t=12522
viewtopic.php?f=20&t=12522
Re: How can i replace Openssl1.0.1t with Openssl1.1
Thanks for your answer! But i do as you say step by step,then i meet an error,how can i solve that?skurudo wrote:There was nice guide recently:
viewtopic.php?f=20&t=12522
Code: Select all
src/event/ngx_event_openssl.c: In function ‘ngx_ssl_connection_error’:
src/event/ngx_event_openssl.c:1941:21: error: ‘SSL_R_NO_CIPHERS_PASSED’ undeclared (first use in this function)
|| n == SSL_R_NO_CIPHERS_PASSED /* 182 */
^
src/event/ngx_event_openssl.c:1941:21: note: each undeclared identifier is reported only once for each function it appears in
objs/Makefile:980: recipe for target 'objs/src/event/ngx_event_openssl.o' failed
make[1]: *** [objs/src/event/ngx_event_openssl.o] Error 1
make[1]: Leaving directory '/usr/local/src/nginx-1.10.1'
Makefile:8: recipe for target 'build' failed
make: *** [build] Error 2
Re: How can i replace Openssl1.0.1t with Openssl1.1
You can try to ask huloza from guide topic
and of course check nginx, I saw messeges like this - https://trac.nginx.org/nginx/ticket/932
and of course check nginx, I saw messeges like this - https://trac.nginx.org/nginx/ticket/932
Re: How can i replace Openssl1.0.1t with Openssl1.1
Thanks for your answer,the error is caused by a bug in nginx. On 13th SEP NGINX1.11.4 had released and the error has been solved.skurudo wrote:You can try to ask huloza from guide topic
and of course check nginx, I saw messeges like this - https://trac.nginx.org/nginx/ticket/932
Code: Select all
Changes with nginx 1.11.4 13 Sep 2016
*) Feature: the $upstream_bytes_received variable.
*) Feature: the $bytes_received, $session_time, $protocol, $status,
$upstream_addr, $upstream_bytes_sent, $upstream_bytes_received,
$upstream_connect_time, $upstream_first_byte_time, and
$upstream_session_time variables in the stream module.
*) Feature: the ngx_stream_log_module.
*) Feature: the "proxy_protocol" parameter of the "listen" directive,
the $proxy_protocol_addr and $proxy_protocol_port variables in the
stream module.
*) Feature: the ngx_stream_realip_module.
*) Bugfix: nginx could not be built with the stream module and the
ngx_http_ssl_module, but without ngx_stream_ssl_module; the bug had
appeared in 1.11.3.
*) Feature: the IP_BIND_ADDRESS_NO_PORT socket option was not used; the
bug had appeared in 1.11.2.
*) Bugfix: in the "ranges" parameter of the "geo" directive.
*) Bugfix: an incorrect response might be returned when using the "aio
threads" and "sendfile" directives; the bug had appeared in 1.9.13.
Re: How can i replace Openssl1.0.1t with Openssl1.1
Code: Select all
yum -y install gc gcc gcc-c++ pcre-devel zlib-devel make wget openssl-devel libxml2-devel libxslt-devel gd-devel perl-ExtUtils-Embed GeoIP-devel gperftools gperftools-devel libatomic_ops-devel perl-ExtUtils-Embed
Code: Select all
cd /usr/local/
wget -c https://www.openssl.org/source/openssl-1.0.2h.tar.gz
tar xf openssl-1.0.2h.tar.gz -C /usr/local/
rm -f openssl-1.0.2h.tar.gz
cd /usr/local/openssl-1.0.2h
./config
make depend
make
make test
make install
mv /usr/bin/openssl /usr/bin/openssl_1.0.1e
ln -s /usr/local/ssl/bin/openssl /usr/bin/openssl
openssl version
Code: Select all
wget http://nginx.org/download/nginx-$nginxversion.tar.gz
tar -xzvf nginx-$nginxversion.tar.gz
cd nginx-$nginxversion/
./configure xxxxx --with-openssl=/usr/local/openssl-1.0.2h