HTTP/2 + ALPN в Debian 8 Jessie

[Dmitriy Kovalkov]

Здравствуйте!

В jessie-backports https://backports.debian.org/ имеется более новая версия
OpenSSL 1.0.2l собранный с которой Nginx прекрасно работает

apt-cache policy libssl-dev libssl1.0.0 openssl
libssl-dev:
  Installed: 1.0.2l-1~bpo8+1
  Candidate: 1.0.2l-1~bpo8+1
  Version table:
 *** 1.0.2l-1~bpo8+1 0
        100 http://ftp.debian.org/debian/ jessie-backports/main amd64
Packages
        100 /var/lib/dpkg/status
     1.0.1t-1+deb8u6 0
        500 http://deb.debian.org/debian/ jessie/main amd64 Packages
        500 http://security.debian.org/ jessie/updates/main amd64 Packages
libssl1.0.0:
  Installed: 1.0.2l-1~bpo8+1
  Candidate: 1.0.2l-1~bpo8+1
  Version table:
 *** 1.0.2l-1~bpo8+1 0
        100 http://ftp.debian.org/debian/ jessie-backports/main amd64
Packages
        100 /var/lib/dpkg/status
     1.0.1t-1+deb8u6 0
        500 http://deb.debian.org/debian/ jessie/main amd64 Packages
        500 http://security.debian.org/ jessie/updates/main amd64 Packages
openssl:
  Installed: 1.0.2l-1~bpo8+1
  Candidate: 1.0.2l-1~bpo8+1
  Version table:
 *** 1.0.2l-1~bpo8+1 0
        100 http://ftp.debian.org/debian/ jessie-backports/main amd64
Packages
        100 /var/lib/dpkg/status
     1.0.1t-1+deb8u6 0
        500 http://deb.debian.org/debian/ jessie/main amd64 Packages
        500 http://security.debian.org/ jessie/updates/main amd64 Packages

Однако стоковый nginx

apt-cache policy nginx
nginx:
  Installed: 1.12.1-1~jessie
  Candidate: 1.12.1-1~jessie
  Version table:
 *** 1.12.1-1~jessie 0
        500 http://nginx.org/packages/debian/ jessie/nginx amd64 Packages
        100 /var/lib/dpkg/status
     1.12.0-1~jessie 0
        500 http://nginx.org/packages/debian/ jessie/nginx amd64 Packages
     1.10.3-1+deb9u1~bpo8+2 0
        100 http://ftp.debian.org/debian/ jessie-backports/main amd64
Packages
     1.10.3-1~jessie 0
        500 http://nginx.org/packages/debian/ jessie/nginx amd64 Packages
     1.10.2-1~jessie 0
        500 http://nginx.org/packages/debian/ jessie/nginx amd64 Packages
     1.10.1-1~jessie 0
        500 http://nginx.org/packages/debian/ jessie/nginx amd64 Packages
     1.10.0-1~jessie 0
        500 http://nginx.org/packages/debian/ jessie/nginx amd64 Packages
     1.8.1-1~jessie 0
        500 http://nginx.org/packages/debian/ jessie/nginx amd64 Packages
     1.8.0-1~jessie 0
        500 http://nginx.org/packages/debian/ jessie/nginx amd64 Packages
     1.6.2-5+deb8u5 0
        500 http://security.debian.org/ jessie/updates/main amd64 Packages
     1.6.2-5+deb8u4 0
        500 http://deb.debian.org/debian/ jessie/main amd64 Packages

собран с OpenSSL 1.0.1t

nginx -V
nginx version: nginx/1.12.1
built by gcc 4.9.2 (Debian 4.9.2-10)
built with OpenSSL 1.0.1t  3 May 2016 (running with OpenSSL 1.0.2l  25 May
2017)
TLS SNI support enabled
configure arguments: --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx
--modules-path=/usr/lib/nginx/modules --conf-path=/etc/nginx/nginx.conf
--error-log-path=/var/log/nginx/error.log
--http-log-path=/var/log/nginx/access.log --pid-path=/var/run/nginx.pid
--lock-path=/var/run/nginx.lock
--http-client-body-temp-path=/var/cache/nginx/client_temp
--http-proxy-temp-path=/var/cache/nginx/proxy_temp
--http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp
--http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp
--http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nginx --group=nginx
--with-compat --with-file-aio --with-threads --with-http_addition_module
--with-http_auth_request_module --with-http_dav_module
--with-http_flv_module --with-http_gunzip_module
--with-http_gzip_static_module --with-http_mp4_module
--with-http_random_index_module --with-http_realip_module
--with-http_secure_link_module --with-http_slice_module
--with-http_ssl_module --with-http_stub_status_module
--with-http_sub_module --with-http_v2_module --with-mail
--with-mail_ssl_module --with-stream --with-stream_realip_module
--with-stream_ssl_module --with-stream_ssl_preread_module --with-cc-opt='-g
-O2 -fstack-protector-strong -Wformat -Werror=format-security
-Wp,-D_FORTIFY_SOURCE=2 -fPIC' --with-ld-opt='-Wl,-z,relro -Wl,-z,now
-Wl,--as-needed -pie'

Есть ли надежда что в офф репе появится nginx с поддержкой OpenSSL 1.0.2l
для Debian 8 Jessie?

Спасибо.
---
Respectfully, Dmitrii Kovalkov
FASTVPS technical department
----------- следущая часть -----------
Вложение в формате HTML было извлечено…
URL: <http://mailman.nginx.org/pipermail/nginx-ru/attachments/20170725/5c78acac/attachment.html>