Custom Query (2296 matches)

4.19.0-4-amd64 #1 SMP Debian 4.19.28-2 (2019-03-15) x86_64 GNU/Linux nginx release-1.15.9 make 4.2.1-1.2

Building with: auto/configure --build=x86_64-pc-linux-gnu \

--prefix=/usr/nginx --conf-path=/etc/nginx --pid-path=/run \ --sbin-path=/usr/sbin/nginx --error-log-path=/var/log/nginx --http-log-path=/var/log/nginx \ --user=www-data \ --with-pcre=../nginx-build/pcre2-10.32-4 \ --with-zlib=../nginx-build/zlib-1:1.2.11.dfsg-1 \ --with-debug --with-file-aio --with-http_addition_module --with-http_auth_request_module \ --with-http_dav_module --with-http_geoip_module --with-http_gunzip_module \ --with-http_gzip_static_module --with-http_image_filter_module --with-http_mp4_module \ --with-http_perl_module --with-http_random_index_module --with-http_realip_module \ --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module \ --with-http_stub_status_module --with-http_sub_module --with-http_xslt_module \ --with-http_v2_module --with-threads

make

leads to: ... checking for GeoIP IPv6 support ... found creating objs/Makefile

Configuration summary

+ using threads + using PCRE library: ../nginx-build/pcre2-10.32-4 + using system OpenSSL library + using zlib library: ../nginx-build/zlib-1:1.2.11.dfsg-1

nginx path prefix: "/usr/nginx" nginx binary file: "/usr/sbin/nginx" nginx modules path: "/usr/nginx/modules" nginx configuration prefix: "/etc" nginx configuration file: "/etc/nginx" nginx pid file: "/run" nginx error log file: "/var/log/nginx" nginx http access log file: "/var/log/nginx" nginx http client request body temporary files: "client_body_temp" nginx http proxy temporary files: "proxy_temp" nginx http fastcgi temporary files: "fastcgi_temp" nginx http uwsgi temporary files: "uwsgi_temp" nginx http scgi temporary files: "scgi_temp"

make -f objs/Makefile make[1]: Entering directory '/media/actionmystique/SAMSUNG5-Shared/home/actionmystique/src/Nginx/git-nginx' objs/Makefile:127: * multiple target patterns. Stop. make[1]: Leaving directory '/media/actionmystique/SAMSUNG5-Shared/home/actionmystique/src/Nginx/git-nginx' make: * [Makefile:8: build] Error 2

Nginx relevant config:

        resolver 127.0.0.1:53;
        ssl_stapling on;
        ssl_stapling_verify on;
        ssl_certificate domain.com.chained.crt;
        ssl_certificate_key domain.com_rsakey.pem;
        ssl_trusted_certificate letsencrypt_root_intermediate_bundle.pem;

domain.com.chained.crt is a bundle containing:

• the domain wildcard certificate
• letsencryptauthorityx3.pem
• no anchor root certificate

letsencrypt_root_intermediate_bundle.pem is a bundle containing:

• isrgrootx1.pem root certificate
• letsencryptauthorityx3.pem

Testing the domain at ​https://www.ssllabs.com/ssltest reports:

• an overall rating of A+
• a certificate issued by Let's Encrypt Authority X3/AIA: ​http://cert.int-x3.letsencrypt.org/
• Revocation information OCSP: ​http://ocsp.int-x3.letsencrypt.org
• Revocation status as Good (not revoked)
• Trusted yes
• no chain issue with the provided certificate of Let's Encrypt Authority X3 issued by ISRG Root X1

No issue either when accessing ocsp.int-x3.letsencrypt.org:

# dig ocsp.int-x3.letsencrypt.org

; <<>> DiG 9.15.4 <<>> ocsp.int-x3.letsencrypt.org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57953
;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; COOKIE: e26b5bf4a0c64fbc010000005d98883e0f932385bcae9d08 (good)
;; QUESTION SECTION:
;ocsp.int-x3.letsencrypt.org.	IN	A

;; ANSWER SECTION:
ocsp.int-x3.letsencrypt.org. 599 IN	CNAME	ocsp.int-x3.letsencrypt.org.edgesuite.net.
ocsp.int-x3.letsencrypt.org.edgesuite.net. 599 IN CNAME	a771.dscq.akamai.net.
a771.dscq.akamai.net.	599	IN	A	88.221.113.64
a771.dscq.akamai.net.	599	IN	A	88.221.113.51
a771.dscq.akamai.net.	599	IN	A	88.221.113.11

;; Query time: 99 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Sat Oct 05 14:10:38 CEST 2019
;; MSG SIZE  rcvd: 221

# ping ocsp.int-x3.letsencrypt.org.edgesuite.net
PING a771.dscq.akamai.net (88.221.113.89) 56(84) bytes of data.
64 bytes from a88-221-113-89.deploy.static.akamaitechnologies.com (88.221.113.89): icmp_seq=1 ttl=58 time=5.80 ms

Yet, restarting nginx leads to:

nginx: [warn] "ssl_stapling" ignored, host not found in OCSP responder "ocsp.int-x3.letsencrypt.org" in the certificate "domain.com.chained.crt"

Is this a nginx or a configuration issue?

Ubuntu jammy LTS

nginx release-1.23.0

Configuring and compiling with:

auto/configure  --build=x86_64-pc-linux-gnu \
                --prefix=/usr \
                --conf-path=/etc/nginx/nginx.conf \
                --error-log-path=/var/log/nginx/error.log \
                --http-log-path=/var/log/nginx/access.log \
                --http-client-body-temp-path=/var/tmp/nginx/body \
                --http-fastcgi-temp-path=/var/tmp/nginx/fastcgi \
                --http-proxy-temp-path=/var/tmp/nginx/proxy \
                --http-scgi-temp-path=/var/tmp/nginx/scgi \
                --http-uwsgi-temp-path=/var/tmp/nginx/uwsgi \
                --lock-path=/run/lock/nginx.lock \
                --modules-path=/usr/lib/nginx/modules \
                --pid-path=/run/nginx.pid \
                --sbin-path=/usr/sbin/nginx \
                --group=www-data \
                --user=www-data \
                --add-dynamic-module=../git-ngx_headers_more \
                --add-dynamic-module=../git-ngx_http_auth_pam_module \
                --with-debug \
                --with-file-aio \
                --with-google_perftools_module \
                --with-http_addition_module \
                --with-http_auth_request_module \
                --with-http_dav_module \
                --with-http_flv_module \
                --with-http_geoip_module \
                --with-http_gunzip_module \
                --with-http_gzip_static_module \
                --with-http_image_filter_module \
                --with-http_mp4_module \
                --with-http_perl_module \
                --with-http_random_index_module \
                --with-http_realip_module \
                --with-http_secure_link_module \
                --with-http_slice_module \
                --with-http_ssl_module \
                --with-http_stub_status_module \
                --with-http_sub_module \
                --with-http_xslt_module \
                --with-http_v2_module \
                --with-mail \
                --with-mail_ssl_module \
                --with-perl_modules_path="/usr/lib/x86_64-linux-gnu/perl/5.34.0" \
                --with-pcre-jit \
                --with-stream \
                --with-stream_ssl_module \
                --with-stream_realip_module \
                --with-stream_geoip_module \
                --with-stream_ssl_preread_module \
                --with-threads
make

... leads to:

objs/ngx_modules.o \
-lpthread -lcrypt -lpcre2-8 -lssl -lcrypto -lpthread -lz -lxml2 -lxslt -lexslt -lgd -lGeoIP -lprofiler \
-Wl,-E -fstack-protector-strong -L/usr/local/lib -L/usr/lib/x86_64-linux-gnu/perl/5.34/CORE -lperl -ldl -lm -lpthread -lc -lcrypt \
-Wl,-E
cc -c -fPIC -pipe  -O -W -Wall -Wpointer-arith -Wno-unused-parameter -Werror -g  -I src/core -I src/event -I src/event/modules -I src/os/unix -I /usr/include/libxml2 -I objs -I src/http -I src/http/modules -I src/http/v2 -I src/http/modules/perl -I src/mail -I src/stream \
	-o objs/addon/src/ngx_http_headers_more_filter_module.o \
	../git-ngx_headers_more/src/ngx_http_headers_more_filter_module.c
cc -c -fPIC -pipe  -O -W -Wall -Wpointer-arith -Wno-unused-parameter -Werror -g  -I src/core -I src/event -I src/event/modules -I src/os/unix -I /usr/include/libxml2 -I objs -I src/http -I src/http/modules -I src/http/v2 -I src/http/modules/perl -I src/mail -I src/stream \
	-o objs/addon/src/ngx_http_headers_more_headers_out.o \
	../git-ngx_headers_more/src/ngx_http_headers_more_headers_out.c
cc -c -fPIC -pipe  -O -W -Wall -Wpointer-arith -Wno-unused-parameter -Werror -g  -I src/core -I src/event -I src/event/modules -I src/os/unix -I /usr/include/libxml2 -I objs -I src/http -I src/http/modules -I src/http/v2 -I src/http/modules/perl -I src/mail -I src/stream \
	-o objs/addon/src/ngx_http_headers_more_headers_in.o \
	../git-ngx_headers_more/src/ngx_http_headers_more_headers_in.c
In file included from /usr/include/dlfcn.h:24,
                 from src/os/unix/ngx_linux_config.h:58,
                 from src/core/ngx_config.h:26,
                 from ../git-ngx_headers_more/src/ddebug.h:5,
                 from ../git-ngx_headers_more/src/ngx_http_headers_more_headers_in.c:10:
../git-ngx_headers_more/src/ngx_http_headers_more_headers_in.c:162:50: error: ‘ngx_http_headers_in_t’ has no member named ‘cookies’; did you mean ‘cookie’?
  162 |                  offsetof(ngx_http_headers_in_t, cookies),
      |                                                  ^~~~~~~
make[1]: *** [objs/Makefile:1937: objs/addon/src/ngx_http_headers_more_headers_in.o] Error 1