#908 closed defect (wontfix)
Nginx 1.9.12 fails to compile against LibreSSL 2.2.6
| Reported by: | George L | Owned by: | |
|---|---|---|---|
| Priority: | major | Milestone: | |
| Component: | nginx-core | Version: | 1.9.x |
| Keywords: | openssl, libressl, | Cc: | |
| uname -a: | Linux myhost.domain.com 2.6.32-042stab112.15 #1 SMP Tue Oct 20 17:22:56 MSK 2015 x86_64 x86_64 x86_64 GNU/Linux | ||
| nginx -V: |
nginx -V
nginx version: nginx/1.9.11 built by clang 3.4.2 (tags/RELEASE_34/dot2-final) built with LibreSSL 2.2.6 TLS SNI support enabled configure arguments: --with-ld-opt='-lrt -ljemalloc -Wl,-z,relro' --with-cc-opt='-m64 -mtune=native -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wno-sign-compare -Wno-string-plus-int -Wno-deprecated-declarations -Wno-unused-parameter -Wno-unused-const-variable -Wno-conditional-uninitialized -Wno-mismatched-tags -Wno-c++11-extensions -Wno-sometimes-uninitialized -Wno-parentheses-equality -Wno-tautological-compare -Wno-self-assign -Wno-deprecated-register -Wno-deprecated -Wno-invalid-source-encoding -Wno-pointer-sign -Wno-parentheses -Wno-enum-conversion' --sbin-path=/usr/local/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --with-http_ssl_module --with-http_v2_module --with-http_gzip_static_module --with-http_stub_status_module --with-http_sub_module --with-http_addition_module --with-http_image_filter_module --with-http_secure_link_module --with-http_realip_module --with-http_geoip_module --with-openssl-opt=enable-tlsext --add-module=../ngx-fancyindex-ngx-fancyindex --add-module=../ngx_cache_purge-2.3 --add-module=../nginx-accesskey-2.0.3 --add-module=../nginx-http-concat-master --add-module=../openresty-memc-nginx-module-4f6f78f --add-module=../openresty-srcache-nginx-module-ffa9ab7 --add-module=../ngx_devel_kit-0.2.19 --add-module=../set-misc-nginx-module-0.29 --add-module=../echo-nginx-module-0.58 --add-module=../redis2-nginx-module-0.12 --add-module=../ngx_http_redis-0.3.7 --add-module=../nginx_upstream_check_module-0.3.0 --add-module=../nginx-module-vts --add-module=../headers-more-nginx-module-0.28 --with-openssl=../libressl-2.2.6 --with-libatomic --with-threads --with-stream --with-stream_ssl_module --with-pcre=../pcre-8.37 --with-pcre-jit |
||
Description
Nginx 1.9.12 openssl changes seems to have broken Nginx compiled with LibreSSL 2.2.6 https://community.centminmod.com/posts/27246/. Was working up to Nginx 1.9.11 with LibreSSL 2.2.6. Probably due to your openssl specific changes in 1.9.12 ? It works fine if Nginx 1.9.12 is compiled against OpenSSL 1.0.2f instead of LibreSSL 2.2.6.
Make stage source compile error is
make[1]: *** [../libressl-2.2.6/.openssl/include/openssl/ssl.h] Error 2
Change History (4)
comment:1 by , 8 years ago
| Resolution: | → wontfix |
|---|---|
| Status: | new → closed |
comment:3 by , 8 years ago
Sad news. Anything we can do about it? We on Arch Linux used to compile LibreSSL together with Nginx this way.
comment:4 by , 8 years ago
As previously suggested, consider compiling LibreSSL yourself instead of asking nginx to do it for you.
Note:
See TracTickets
for help on using tickets.
Yes, now nginx uses
install_swtarget to install OpenSSL when--with-openssl=pathis used, and this breaks things when you try to use LibreSSL instead of OpenSSL.Consider compiling LibreSSL yourself instead of asking nginx to do it for you. Don't expect nginx is able to compile LibreSSL, it's only expected to be able to compile OpenSSL.