Opened 3 years ago

Closed 3 years ago

Last modified 3 years ago

#908 closed defect (wontfix)

Nginx 1.9.12 fails to compile against LibreSSL 2.2.6

Reported by: centminmod@… Owned by:
Priority: major Milestone:
Component: nginx-core Version: 1.9.x
Keywords: openssl, libressl, Cc:
uname -a: Linux myhost.domain.com 2.6.32-042stab112.15 #1 SMP Tue Oct 20 17:22:56 MSK 2015 x86_64 x86_64 x86_64 GNU/Linux
nginx -V: nginx -V nginx version: nginx/1.9.11 built by clang 3.4.2 (tags/RELEASE_34/dot2-final) built with LibreSSL 2.2.6 TLS SNI support enabled configure arguments: --with-ld-opt='-lrt -ljemalloc -Wl,-z,relro' --with-cc-opt='-m64 -mtune=native -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wno-sign-compare -Wno-string-plus-int -Wno-deprecated-declarations -Wno-unused-parameter -Wno-unused-const-variable -Wno-conditional-uninitialized -Wno-mismatched-tags -Wno-c++11-extensions -Wno-sometimes-uninitialized -Wno-parentheses-equality -Wno-tautological-compare -Wno-self-assign -Wno-deprecated-register -Wno-deprecated -Wno-invalid-source-encoding -Wno-pointer-sign -Wno-parentheses -Wno-enum-conversion' --sbin-path=/usr/local/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --with-http_ssl_module --with-http_v2_module --with-http_gzip_static_module --with-http_stub_status_module --with-http_sub_module --with-http_addition_module --with-http_image_filter_module --with-http_secure_link_module --with-http_realip_module --with-http_geoip_module --with-openssl-opt=enable-tlsext --add-module=../ngx-fancyindex-ngx-fancyindex --add-module=../ngx_cache_purge-2.3 --add-module=../nginx-accesskey-2.0.3 --add-module=../nginx-http-concat-master --add-module=../openresty-memc-nginx-module-4f6f78f --add-module=../openresty-srcache-nginx-module-ffa9ab7 --add-module=../ngx_devel_kit-0.2.19 --add-module=../set-misc-nginx-module-0.29 --add-module=../echo-nginx-module-0.58 --add-module=../redis2-nginx-module-0.12 --add-module=../ngx_http_redis-0.3.7 --add-module=../nginx_upstream_check_module-0.3.0 --add-module=../nginx-module-vts --add-module=../headers-more-nginx-module-0.28 --with-openssl=../libressl-2.2.6 --with-libatomic --with-threads --with-stream --with-stream_ssl_module --with-pcre=../pcre-8.37 --with-pcre-jit

Description

Nginx 1.9.12 openssl changes seems to have broken Nginx compiled with LibreSSL 2.2.6 https://community.centminmod.com/posts/27246/. Was working up to Nginx 1.9.11 with LibreSSL 2.2.6. Probably due to your openssl specific changes in 1.9.12 ? It works fine if Nginx 1.9.12 is compiled against OpenSSL 1.0.2f instead of LibreSSL 2.2.6.

Make stage source compile error is

make[1]: *** [../libressl-2.2.6/.openssl/include/openssl/ssl.h] Error 2

Change History (4)

comment:1 Changed 3 years ago by mdounin

  • Resolution set to wontfix
  • Status changed from new to closed

Yes, now nginx uses install_sw target to install OpenSSL when --with-openssl=path is used, and this breaks things when you try to use LibreSSL instead of OpenSSL.

Consider compiling LibreSSL yourself instead of asking nginx to do it for you. Don't expect nginx is able to compile LibreSSL, it's only expected to be able to compile OpenSSL.

comment:2 Changed 3 years ago by centminmod@…

Hi Maxim thanks for replying. Sad news to hear but I understand

comment:3 Changed 3 years ago by RubenKelevra@…

Sad news. Anything we can do about it? We on Arch Linux used to compile LibreSSL together with Nginx this way.

comment:4 Changed 3 years ago by mdounin

As previously suggested, consider compiling LibreSSL yourself instead of asking nginx to do it for you.

Note: See TracTickets for help on using tickets.