How can i replace Openssl1.0.1t with Openssl1.1

[xuan]

I want to use the chacha20-poly1305 on my website.But i can't update my openssl to the latest version！ Who can help
me?

[skurudo]

There was nice guide recently:
viewtopic.php?f=20&t=12522

[xuan]

There was nice guide recently:
viewtopic.php?f=20&t=12522

Thanks for your answer! But i do as you say step by step，then i meet an error，how can i solve that？

Code: Select all

src/event/ngx_event_openssl.c: In function ‘ngx_ssl_connection_error’:
src/event/ngx_event_openssl.c:1941:21: error: ‘SSL_R_NO_CIPHERS_PASSED’ undeclared (first use in this function)
             || n == SSL_R_NO_CIPHERS_PASSED                          /*  182 */
                     ^
src/event/ngx_event_openssl.c:1941:21: note: each undeclared identifier is reported only once for each function it appears in
objs/Makefile:980: recipe for target 'objs/src/event/ngx_event_openssl.o' failed
make[1]: *** [objs/src/event/ngx_event_openssl.o] Error 1
make[1]: Leaving directory '/usr/local/src/nginx-1.10.1'
Makefile:8: recipe for target 'build' failed
make: *** [build] Error 2

[skurudo]

You can try to ask huloza from guide topic
and of course check nginx, I saw messeges like this - https://trac.nginx.org/nginx/ticket/932

[xuan]

You can try to ask huloza from guide topic
and of course check nginx, I saw messeges like this - https://trac.nginx.org/nginx/ticket/932

Thanks for your answer，the error is caused by a bug in nginx. On 13th SEP NGINX1.11.4 had released and the error has been solved.

Code: Select all

Changes with nginx 1.11.4                                        13 Sep 2016

    *) Feature: the $upstream_bytes_received variable.

    *) Feature: the $bytes_received, $session_time, $protocol, $status,
       $upstream_addr, $upstream_bytes_sent, $upstream_bytes_received,
       $upstream_connect_time, $upstream_first_byte_time, and
       $upstream_session_time variables in the stream module.

    *) Feature: the ngx_stream_log_module.

    *) Feature: the "proxy_protocol" parameter of the "listen" directive,
       the $proxy_protocol_addr and $proxy_protocol_port variables in the
       stream module.

    *) Feature: the ngx_stream_realip_module.

    *) Bugfix: nginx could not be built with the stream module and the
       ngx_http_ssl_module, but without ngx_stream_ssl_module; the bug had
       appeared in 1.11.3.

    *) Feature: the IP_BIND_ADDRESS_NO_PORT socket option was not used; the
       bug had appeared in 1.11.2.

    *) Bugfix: in the "ranges" parameter of the "geo" directive.

    *) Bugfix: an incorrect response might be returned when using the "aio
       threads" and "sendfile" directives; the bug had appeared in 1.9.13.

Anyhow thank you a lot.

[duy13]

Code: Select all

yum -y install gc gcc gcc-c++ pcre-devel zlib-devel make wget openssl-devel libxml2-devel libxslt-devel gd-devel perl-ExtUtils-Embed GeoIP-devel gperftools gperftools-devel libatomic_ops-devel perl-ExtUtils-Embed

Install openssl-1.0.2h

Code: Select all

cd /usr/local/
wget -c https://www.openssl.org/source/openssl-1.0.2h.tar.gz
tar xf openssl-1.0.2h.tar.gz -C /usr/local/
rm -f openssl-1.0.2h.tar.gz
cd /usr/local/openssl-1.0.2h
 ./config
 make depend
 make
 make test
 make install
 mv /usr/bin/openssl /usr/bin/openssl_1.0.1e
 ln -s /usr/local/ssl/bin/openssl /usr/bin/openssl
 openssl version

Install openssl-1.0.2h with nginx

Code: Select all

wget http://nginx.org/download/nginx-$nginxversion.tar.gz
tar -xzvf nginx-$nginxversion.tar.gz
cd nginx-$nginxversion/
./configure xxxxx --with-openssl=/usr/local/openssl-1.0.2h