nginx升级OpenSSL版本

openssl

传输层安全性/安全套接层及其加密库

项目地址：https://gitcode.com/gh_mirrors/ope/openssl

免费下载资源

cwy_linux

3950人浏览 · 2021-03-22 18:33:24

cwy_linux · 2021-03-22 18:33:24 发布

1、查看OpenSSL版本

查看OpenSSL现版本为1.0.2k-fips
在这里插入图片描述

2、下载OpenSSL源码包

下载地址 https://www.openssl.org/source

root@node1 ~]# cd /usr/local/src/
[root@node1 src]# wget -c https://www.openssl.org/source/openssl-1.1.1j.tar.gz

3、编译安装nginx并指定新版本OpenSSL路径

[root@node1 src]# /apps/nginx/sbin/nginx -s  stop
[root@node1 src]# cd /usr/local/src/nginx-1.18.0/
[root@node1 nginx-1.18.0]# ./configure --prefix=/apps/nginx --with-http_v2_module --with-http_realip_module --with-http_stub_status_module --with-http_gzip_static_module --with-pcre --with-stream --with-stream_ssl_module --with-stream_realip_module --with-http_ssl_module --with-openssl=/usr/local/src/openssl-1.1.1j
[root@node1 nginx-1.18.0]# make && make install

4、启动nginx并查看OpenSSL版本

[root@node1 nginx-1.18.0]# /apps/nginx/sbin/nginx
[root@node1 nginx-1.18.0]# /apps/nginx/sbin/nginx -V
nginx version: nginx/1.18.0
built by gcc 4.8.5 20150623 (Red Hat 4.8.5-44) (GCC)
built with OpenSSL 1.1.1j  16 Feb 2021
TLS SNI support enabled
configure arguments: --prefix=/apps/nginx --with-http_v2_module --with-http_realip_module --with-http_stub_status_module --with-http_gzip_static_module --with-pcre --with-stream --with-stream_ssl_module --with-stream_realip_module --with-http_ssl_module --with-openssl=/usr/local/src/openssl-1.1.1j

在这里插入图片描述

GitHub 加速计划 / ope / openssl

下载

传输层安全性/安全套接层及其加密库

最近提交(Master分支：4 个月前 )

75bc132d Current preforms the following operations 1) Generates arbitrary key pairs 2) Generates key pairs with parameters (both correct and incorrect) based on fuzzer input buffer 3) Exports and re-imports keys, confirming validity 4) Preforms Sign and Verify operations with optional parameters based on fuzzer input buffer Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26708) 9 天前

0e436524 Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/26701) 9 天前