<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">I suggest you consider investigating Intels' Clear Linux.<div class=""><br class=""></div><div class=""><a href="https://docs.01.org/clearlinux/latest/index.html" class="">https://docs.01.org/clearlinux/latest/index.html</a></div><div class=""><br class=""></div><div class=""><a href="https://docs.01.org/clearlinux/latest/about.html#" class="">https://docs.01.org/clearlinux/latest/about.html#</a></div><div class=""><br class=""></div><div class=""><a href="https://docs.01.org/clearlinux/latest/reference/bundles/bundles.html" class="">https://docs.01.org/clearlinux/latest/reference/bundles/bundles.html</a></div><div class=""><br class=""></div><div class="">read specifically about swupd and bundles.</div><div class=""><br class=""></div><div class="">This is a ’Stateless’ OS</div><div class=""><br class=""></div><div class="">In particular to your issues, on Clear Linux you'd install nginx-mainline bundle,</div><div class="">all the source packages and dependancies are tested with the bundle before distribution to swupd</div><div class=""><br class=""></div><div class="">Example, the nginx-mainline bundle version requires lib-openssl, the and only compatible tested lib-openssl package version will be included. </div><div class=""><br class=""></div><div class="">This strategy eliminates all those fragmented dependancy issues every other Linux distro, where you install nginx but you’ve no real idea what openssl version is going to work with it.</div><div class=""><br class=""><div>Admittedly, Clear Linux is a little unfamiliar at first but give it a try, there’s far less headaches to deal with than other the ‘popular’ distros.</div><div><br class=""></div><div>Apologies for not addressing your issue directly.</div><div><br class=""><blockquote type="cite" class=""><div class="">On 15 Aug 2019, at 21:05, TC_Hessen <<a href="mailto:nginx-forum@forum.nginx.org" class="">nginx-forum@forum.nginx.org</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">Hi,<br class=""><br class="">I am new to this forum, but not new to nginx. I am running multiple debian<br class="">servers (stretch) with nginx 1.14.1 and TLS 1.3 support, i.e.<br class=""><br class="">nginx version: nginx/1.14.1<br class="">built with OpenSSL 1.1.0f 25 May 2017 (running with OpenSSL 1.1.1c 28 May<br class="">2019)<br class="">TLS SNI support enabled<br class=""><br class="">To prevent the servers agains the new bugs, I tried to upgrade directly to<br class="">1.17.3 provided by <a href="http://nginx.org" class="">nginx.org</a>. That works without any problems, but TLS 1.3<br class="">is not running anymore:<br class=""><br class="">nginx version: nginx/1.17.3<br class="">built by gcc 6.3.0 20170516 (Debian 6.3.0-18+deb9u1)<br class="">built with OpenSSL 1.1.0j 20 Nov 2018 (running with OpenSSL 1.1.1c 28 May<br class="">2019)<br class="">TLS SNI support enabled<br class=""><br class="">Where is the error?<br class=""><br class="">Posted at Nginx Forum: <a href="https://forum.nginx.org/read.php?2,285294,285294#msg-285294" class="">https://forum.nginx.org/read.php?2,285294,285294#msg-285294</a><br class=""><br class="">_______________________________________________<br class="">nginx mailing list<br class=""><a href="mailto:nginx@nginx.org" class="">nginx@nginx.org</a><br class="">http://mailman.nginx.org/mailman/listinfo/nginx<br class=""></div></div></blockquote></div><br class=""></div></body></html>