How can i replace Openssl1.0.1t with Openssl1.1
Posted: Thu Sep 08, 2016 4:35 pm
I want to use the chacha20-poly1305 on my website.But i can't update my openssl to the latest version! Who can help
me?
me?
Community Forum
https://forum.vestacp.com/
Thanks for your answer! But i do as you say step by step,then i meet an error,how can i solve that?skurudo wrote:There was nice guide recently:
viewtopic.php?f=20&t=12522
Code: Select all
src/event/ngx_event_openssl.c: In function ‘ngx_ssl_connection_error’:
src/event/ngx_event_openssl.c:1941:21: error: ‘SSL_R_NO_CIPHERS_PASSED’ undeclared (first use in this function)
|| n == SSL_R_NO_CIPHERS_PASSED /* 182 */
^
src/event/ngx_event_openssl.c:1941:21: note: each undeclared identifier is reported only once for each function it appears in
objs/Makefile:980: recipe for target 'objs/src/event/ngx_event_openssl.o' failed
make[1]: *** [objs/src/event/ngx_event_openssl.o] Error 1
make[1]: Leaving directory '/usr/local/src/nginx-1.10.1'
Makefile:8: recipe for target 'build' failed
make: *** [build] Error 2
Thanks for your answer,the error is caused by a bug in nginx. On 13th SEP NGINX1.11.4 had released and the error has been solved.skurudo wrote:You can try to ask huloza from guide topic
and of course check nginx, I saw messeges like this - https://trac.nginx.org/nginx/ticket/932
Code: Select all
Changes with nginx 1.11.4 13 Sep 2016
*) Feature: the $upstream_bytes_received variable.
*) Feature: the $bytes_received, $session_time, $protocol, $status,
$upstream_addr, $upstream_bytes_sent, $upstream_bytes_received,
$upstream_connect_time, $upstream_first_byte_time, and
$upstream_session_time variables in the stream module.
*) Feature: the ngx_stream_log_module.
*) Feature: the "proxy_protocol" parameter of the "listen" directive,
the $proxy_protocol_addr and $proxy_protocol_port variables in the
stream module.
*) Feature: the ngx_stream_realip_module.
*) Bugfix: nginx could not be built with the stream module and the
ngx_http_ssl_module, but without ngx_stream_ssl_module; the bug had
appeared in 1.11.3.
*) Feature: the IP_BIND_ADDRESS_NO_PORT socket option was not used; the
bug had appeared in 1.11.2.
*) Bugfix: in the "ranges" parameter of the "geo" directive.
*) Bugfix: an incorrect response might be returned when using the "aio
threads" and "sendfile" directives; the bug had appeared in 1.9.13.
Code: Select all
yum -y install gc gcc gcc-c++ pcre-devel zlib-devel make wget openssl-devel libxml2-devel libxslt-devel gd-devel perl-ExtUtils-Embed GeoIP-devel gperftools gperftools-devel libatomic_ops-devel perl-ExtUtils-Embed
Code: Select all
cd /usr/local/
wget -c https://www.openssl.org/source/openssl-1.0.2h.tar.gz
tar xf openssl-1.0.2h.tar.gz -C /usr/local/
rm -f openssl-1.0.2h.tar.gz
cd /usr/local/openssl-1.0.2h
./config
make depend
make
make test
make install
mv /usr/bin/openssl /usr/bin/openssl_1.0.1e
ln -s /usr/local/ssl/bin/openssl /usr/bin/openssl
openssl version
Code: Select all
wget http://nginx.org/download/nginx-$nginxversion.tar.gz
tar -xzvf nginx-$nginxversion.tar.gz
cd nginx-$nginxversion/
./configure xxxxx --with-openssl=/usr/local/openssl-1.0.2h